', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x10}}]})

14:56:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:01 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:01 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:01 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3284.059238] audit: type=1800 audit(1576940161.494:768): pid=22360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17396 res=0
[ 3284.093592] hfs: can't find a HFS filesystem on dev loop4
14:56:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3284.139845] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3284.141881] audit: type=1800 audit(1576940161.524:769): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17398 res=0
[ 3284.251651] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3284.264822] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3284.272607] hfs: can't find a HFS filesystem on dev loop4
14:56:01 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x22}}]})

[ 3284.336755] minix_free_inode: bit 1 already cleared
14:56:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:01 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3284.440869] hfs: can't find a HFS filesystem on dev loop4
[ 3284.444898] minix_free_inode: bit 1 already cleared
14:56:01 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3284.557069] hfs: can't find a HFS filesystem on dev loop4
[ 3284.649657] audit: type=1800 audit(1576940162.084:770): pid=22389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16738 res=0
[ 3284.736926] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3284.751710] audit: type=1800 audit(1576940162.124:771): pid=22387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16817 res=0
[ 3284.788057] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3284.815583] minix_free_inode: bit 1 already cleared
[ 3284.855971] minix_free_inode: bit 1 already cleared
14:56:02 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x3f000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:02 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x23}}]})

14:56:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:02 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:02 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:02 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3285.166375] audit: type=1800 audit(1576940162.604:772): pid=22403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16849 res=0
[ 3285.205618] hfs: can't find a HFS filesystem on dev loop4
14:56:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3285.220391] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3285.249159] audit: type=1800 audit(1576940162.624:773): pid=22407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16865 res=0
[ 3285.273793] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3285.289239] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3285.345643] minix_free_inode: bit 1 already cleared
[ 3285.357030] hfs: can't find a HFS filesystem on dev loop4
[ 3285.385467] minix_free_inode: bit 1 already cleared
14:56:02 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x2c}}]})

14:56:03 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:03 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0)
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3285.559039] hfs: can't find a HFS filesystem on dev loop4
[ 3285.658869] hfs: can't find a HFS filesystem on dev loop4
[ 3285.764769] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3285.821468] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3285.954919] minix_free_inode: bit 1 already cleared
[ 3285.960909] minix_free_inode: bit 1 already cleared
14:56:03 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x40000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:03 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x48}}]})

14:56:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0)
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:03 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:03 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:03 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3286.259047] hfs: can't find a HFS filesystem on dev loop4
14:56:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0)
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3286.325308] hfs: can't find a HFS filesystem on dev loop4
[ 3286.336338] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:03 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4c}}]})

[ 3286.396147] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3286.408554] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3286.466482] minix_free_inode: bit 1 already cleared
[ 3286.474291] minix_free_inode: bit 1 already cleared
[ 3286.483082] hfs: can't find a HFS filesystem on dev loop4
14:56:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x0, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:04 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:04 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3286.646479] hfs: can't find a HFS filesystem on dev loop4
14:56:04 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4f}}]})

[ 3286.835814] hfs: can't find a HFS filesystem on dev loop4
[ 3286.844572] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3286.883450] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3286.903100] hfs: can't find a HFS filesystem on dev loop4
[ 3287.002819] minix_free_inode: bit 1 already cleared
[ 3287.034844] minix_free_inode: bit 1 already cleared
14:56:04 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4f000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x0, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:04 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:04 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:04 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x50}}]})

14:56:04 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3287.302647] hfs: can't find a HFS filesystem on dev loop4
14:56:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x0, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3287.348347] selinux_nlmsg_perm: 390 callbacks suppressed
[ 3287.348364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
[ 3287.384266] hfs: can't find a HFS filesystem on dev loop4
[ 3287.426596] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3287.460363] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:04 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x60}}]})

[ 3287.486222] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3287.498224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
[ 3287.516907] minix_free_inode: bit 1 already cleared
[ 3287.551561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
[ 3287.575843] minix_free_inode: bit 1 already cleared
14:56:05 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3287.608340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
14:56:05 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:05 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3287.654192] hfs: can't find a HFS filesystem on dev loop4
[ 3287.671703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
[ 3287.717617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
[ 3287.753972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
[ 3287.778421] hfs: can't find a HFS filesystem on dev loop4
[ 3287.807232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
14:56:05 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3287.842878] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3287.847029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
[ 3287.880668] kauditd_printk_skb: 9 callbacks suppressed
[ 3287.880684] audit: type=1800 audit(1576940165.314:783): pid=22531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16592 res=0
[ 3287.925656] minix_free_inode: bit 1 already cleared
[ 3287.935269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22506 comm=syz-executor.1
[ 3288.016773] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3288.086189] minix_free_inode: bit 1 already cleared
14:56:05 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x64000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:05 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x68}}]})

14:56:05 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:05 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:05 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32], 0x2}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:05 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3288.397958] hfs: can't find a HFS filesystem on dev loop4
[ 3288.414478] audit: type=1800 audit(1576940165.844:784): pid=22547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16914 res=0
[ 3288.451403] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:05 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, 0x0)
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3288.496080] audit: type=1800 audit(1576940165.894:785): pid=22549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17057 res=0
[ 3288.531228] hfs: can't find a HFS filesystem on dev loop4
[ 3288.536844] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3288.567422] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3288.595926] minix_free_inode: bit 1 already cleared
14:56:06 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x6c}}]})

14:56:06 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, 0x0)
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:06 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:06 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3288.737993] hfs: can't find a HFS filesystem on dev loop4
14:56:06 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, 0x0)
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3288.804155] hfs: can't find a HFS filesystem on dev loop4
[ 3288.814940] minix_free_inode: bit 1 already cleared
[ 3288.836244] audit: type=1800 audit(1576940166.274:786): pid=22569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16833 res=0
[ 3288.991469] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3289.018746] audit: type=1800 audit(1576940166.454:787): pid=22577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16994 res=0
[ 3289.171762] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3289.181524] minix_free_inode: bit 1 already cleared
[ 3289.372005] minix_free_inode: bit 1 already cleared
14:56:07 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x65000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:07 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x74}}]})

14:56:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(0xffffffffffffffff, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:07 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32], 0x2}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:07 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:07 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3289.605219] hfs: can't find a HFS filesystem on dev loop4
[ 3289.616157] audit: type=1800 audit(1576940167.054:788): pid=22589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17329 res=0
[ 3289.675608] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3289.704305] audit: type=1800 audit(1576940167.084:789): pid=22592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17403 res=0
[ 3289.780466] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3289.788805] hfs: can't find a HFS filesystem on dev loop4
[ 3289.803060] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:07 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x7a}}]})

[ 3289.875844] minix_free_inode: bit 1 already cleared
14:56:07 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3289.975306] minix_free_inode: bit 1 already cleared
[ 3289.996027] hfs: can't find a HFS filesystem on dev loop4
14:56:07 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3290.089394] hfs: can't find a HFS filesystem on dev loop4
[ 3290.108054] audit: type=1800 audit(1576940167.544:790): pid=22612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17249 res=0
14:56:07 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x300}}]})

[ 3290.189586] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3290.242361] audit: type=1800 audit(1576940167.664:791): pid=22619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17138 res=0
[ 3290.278496] hfs: can't find a HFS filesystem on dev loop4
[ 3290.305639] minix_free_inode: bit 1 already cleared
[ 3290.342752] hfs: can't find a HFS filesystem on dev loop4
[ 3290.364720] protocol 88fb is buggy, dev hsr_slave_0
[ 3290.369934] protocol 88fb is buggy, dev hsr_slave_1
14:56:07 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32], 0x2}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(0xffffffffffffffff, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3290.538572] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3290.627404] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3290.714940] minix_free_inode: bit 1 already cleared
14:56:08 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x66000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:08 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x500}}]})

14:56:08 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xa4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:08 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3290.883655] hfs: can't find a HFS filesystem on dev loop4
[ 3290.900854] audit: type=1800 audit(1576940168.334:792): pid=22639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17402 res=0
[ 3290.994066] hfs: can't find a HFS filesystem on dev loop4
[ 3291.004520] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3291.012864] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:08 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x600}}]})

[ 3291.084711] protocol 88fb is buggy, dev hsr_slave_0
[ 3291.088387] minix_free_inode: bit 1 already cleared
[ 3291.089819] protocol 88fb is buggy, dev hsr_slave_1
[ 3291.105496] minix_free_inode: bit 1 already cleared
14:56:08 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:08 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xa4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3291.269548] hfs: can't find a HFS filesystem on dev loop4
[ 3291.367149] hfs: can't find a HFS filesystem on dev loop4
[ 3291.412704] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:08 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x700}}]})

14:56:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(0xffffffffffffffff, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:08 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3291.535457] minix_free_inode: bit 1 already cleared
[ 3291.622581] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3291.636539] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:09 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3291.668594] hfs: can't find a HFS filesystem on dev loop4
[ 3291.695397] minix_free_inode: bit 1 already cleared
14:56:09 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xa4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3291.815576] hfs: can't find a HFS filesystem on dev loop4
[ 3291.894554] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3291.955712] minix_free_inode: bit 1 already cleared
[ 3292.024930] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3292.105268] minix_free_inode: bit 1 already cleared
14:56:09 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x67000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:09 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x900}}]})

14:56:09 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:09 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xe4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3292.258250] hfs: can't find a HFS filesystem on dev loop4
[ 3292.320753] hfs: can't find a HFS filesystem on dev loop4
14:56:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:09 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xa00}}]})

[ 3292.397514] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3292.419960] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:09 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3292.465726] minix_free_inode: bit 1 already cleared
14:56:10 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3292.539802] hfs: can't find a HFS filesystem on dev loop4
[ 3292.546089] minix_free_inode: bit 1 already cleared
[ 3292.552137] selinux_nlmsg_perm: 390 callbacks suppressed
[ 3292.552152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
14:56:10 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3292.624849] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3292.653806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
[ 3292.675256] hfs: can't find a HFS filesystem on dev loop4
14:56:10 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xe00}}]})

14:56:10 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xe4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3292.725377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
[ 3292.762488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
14:56:10 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3292.827903] hfs: can't find a HFS filesystem on dev loop4
[ 3292.833674] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3292.863126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
[ 3292.884509] hfs: can't find a HFS filesystem on dev loop4
[ 3292.905673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
[ 3292.938530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
[ 3292.958355] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3292.987355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
[ 3293.035949] minix_free_inode: bit 1 already cleared
[ 3293.042052] minix_free_inode: bit 1 already cleared
[ 3293.067430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
[ 3293.106339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22712 comm=syz-executor.1
14:56:10 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xdc040000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:10 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xe52}}]})

14:56:10 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:10 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xe4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:10 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:10 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3293.559157] hfs: can't find a HFS filesystem on dev loop4
[ 3293.561495] kauditd_printk_skb: 9 callbacks suppressed
[ 3293.561509] audit: type=1800 audit(1576940170.994:802): pid=22750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17414 res=0
[ 3293.595652] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:11 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3293.659137] hfs: can't find a HFS filesystem on dev loop4
[ 3293.693042] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3293.697622] audit: type=1800 audit(1576940171.004:803): pid=22749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17421 res=0
14:56:11 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x1f00}}]})

[ 3293.797172] minix_free_inode: bit 1 already cleared
14:56:11 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3293.826244] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:11 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3293.897468] hfs: can't find a HFS filesystem on dev loop4
14:56:11 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3293.969182] hfs: can't find a HFS filesystem on dev loop4
14:56:11 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3294.010106] audit: type=1800 audit(1576940171.444:804): pid=22770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17405 res=0
[ 3294.034787] minix_free_inode: bit 1 already cleared
[ 3294.138916] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3294.154528] audit: type=1800 audit(1576940171.584:805): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17235 res=0
[ 3294.235484] minix_free_inode: bit 1 already cleared
[ 3294.363683] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3294.525104] minix_free_inode: bit 1 already cleared
14:56:12 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe8030000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:12 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x2000}}]})

14:56:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:12 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:12 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB="00000000f1ffffff000e0000"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:12 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3294.792442] hfs: can't find a HFS filesystem on dev loop4
[ 3294.823025] audit: type=1800 audit(1576940172.254:806): pid=22794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17649 res=0
14:56:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3294.864966] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3294.906327] audit: type=1800 audit(1576940172.254:807): pid=22795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17665 res=0
[ 3294.982716] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3294.992053] hfs: can't find a HFS filesystem on dev loop4
14:56:12 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x2200}}]})

[ 3295.023702] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:12 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:12 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3295.147189] hfs: can't find a HFS filesystem on dev loop4
[ 3295.175006] minix_free_inode: bit 1 already cleared
[ 3295.222765] minix_free_inode: bit 1 already cleared
[ 3295.308833] hfs: can't find a HFS filesystem on dev loop4
14:56:12 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x2300}}]})

[ 3295.390210] audit: type=1800 audit(1576940172.824:808): pid=22818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17649 res=0
[ 3295.471693] audit: type=1800 audit(1576940172.854:809): pid=22819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16602 res=0
[ 3295.521510] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3295.546096] hfs: can't find a HFS filesystem on dev loop4
[ 3295.598024] hfs: can't find a HFS filesystem on dev loop4
[ 3295.615548] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3295.646125] minix_free_inode: bit 1 already cleared
[ 3295.775089] minix_free_inode: bit 1 already cleared
14:56:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:13 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x2c00}}]})

14:56:13 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:13 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xf0ffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:13 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3296.110668] audit: type=1800 audit(1576940173.544:810): pid=22837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17537 res=0
[ 3296.137960] hfs: can't find a HFS filesystem on dev loop4
[ 3296.164252] audit: type=1800 audit(1576940173.574:811): pid=22839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17553 res=0
[ 3296.184449] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3296.230262] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3296.240456] hfs: can't find a HFS filesystem on dev loop4
[ 3296.249251] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:13 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x3f00}}]})

[ 3296.336894] minix_free_inode: bit 1 already cleared
[ 3296.343497] minix_free_inode: bit 1 already cleared
14:56:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:13 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3296.469721] hfs: can't find a HFS filesystem on dev loop4
14:56:14 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3296.527080] hfs: can't find a HFS filesystem on dev loop4
[ 3296.650291] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3296.745738] minix_free_inode: bit 1 already cleared
[ 3296.832199] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:14 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4000}}]})

14:56:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:14 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3297.013838] hfs: can't find a HFS filesystem on dev loop4
[ 3297.015861] minix_free_inode: bit 1 already cleared
[ 3297.111356] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3297.124837] hfs: can't find a HFS filesystem on dev loop4
[ 3297.209095] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3297.354845] minix_free_inode: bit 1 already cleared
14:56:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:14 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:14 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4244}}]})

14:56:14 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xf2ffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:14 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3297.555082] hfs: can't find a HFS filesystem on dev loop4
14:56:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3297.647873] hfs: can't find a HFS filesystem on dev loop4
[ 3297.661014] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:15 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4442}}]})

[ 3297.719243] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3297.810561] hfs: can't find a HFS filesystem on dev loop4
[ 3297.825162] minix_free_inode: bit 1 already cleared
[ 3297.845323] minix_free_inode: bit 1 already cleared
14:56:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:15 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:15 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3297.960691] hfs: can't find a HFS filesystem on dev loop4
14:56:15 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4800}}]})

[ 3298.062285] selinux_nlmsg_perm: 390 callbacks suppressed
[ 3298.062302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
14:56:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3298.144454] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3298.163961] hfs: can't find a HFS filesystem on dev loop4
[ 3298.169580] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3298.177580] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3298.212874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
[ 3298.236491] minix_free_inode: bit 1 already cleared
[ 3298.240421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
14:56:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3298.317930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
[ 3298.346732] hfs: can't find a HFS filesystem on dev loop4
[ 3298.363770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
[ 3298.385249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
[ 3298.418935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
[ 3298.431783] minix_free_inode: bit 1 already cleared
[ 3298.463824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
[ 3298.505753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
[ 3298.535639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22930 comm=syz-executor.1
14:56:16 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xf3ffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:16 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:16 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:16 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4c00}}]})

14:56:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3298.838889] kauditd_printk_skb: 7 callbacks suppressed
[ 3298.838912] audit: type=1800 audit(1576940176.264:819): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17743 res=0
[ 3298.877685] hfs: can't find a HFS filesystem on dev loop4
14:56:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB="00000000f1ffff"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3298.899779] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3298.953499] audit: type=1800 audit(1576940176.324:820): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17747 res=0
[ 3299.016471] hfs: can't find a HFS filesystem on dev loop4
[ 3299.029081] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3299.038148] minix_free_inode: bit 1 already cleared
14:56:16 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4d50}}]})

14:56:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3299.095619] minix_free_inode: bit 1 already cleared
[ 3299.102120] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:16 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:16 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(0x0, 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3299.257270] hfs: can't find a HFS filesystem on dev loop4
[ 3299.314514] audit: type=1800 audit(1576940176.744:821): pid=22975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17713 res=0
14:56:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3299.367637] hfs: can't find a HFS filesystem on dev loop4
[ 3299.442961] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3299.473658] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3299.497710] minix_free_inode: bit 1 already cleared
[ 3299.506117] minix_free_inode: bit 1 already cleared
14:56:17 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:17 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4f00}}]})

14:56:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:17 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(0x0, 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:17 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3300.002345] audit: type=1800 audit(1576940177.434:822): pid=22997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17750 res=0
[ 3300.035821] hfs: can't find a HFS filesystem on dev loop4
[ 3300.042477] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3300.137877] hfs: can't find a HFS filesystem on dev loop4
[ 3300.145193] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:17 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:17 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x5000}}]})

[ 3300.289435] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3300.327134] minix_free_inode: bit 1 already cleared
[ 3300.334975] minix_free_inode: bit 1 already cleared
14:56:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3300.441849] hfs: can't find a HFS filesystem on dev loop4
14:56:17 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(0x0, 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3300.476917] audit: type=1800 audit(1576940177.904:823): pid=23023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16668 res=0
[ 3300.520897] hfs: can't find a HFS filesystem on dev loop4
[ 3300.598184] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3300.686370] minix_free_inode: bit 1 already cleared
[ 3300.853411] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3300.929188] minix_free_inode: bit 1 already cleared
14:56:18 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfeffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:18 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:18 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x504d}}]})

14:56:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:18 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:18 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3301.154779] hfs: can't find a HFS filesystem on dev loop4
[ 3301.161680] audit: type=1800 audit(1576940178.594:824): pid=23049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17748 res=0
14:56:18 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x0, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3301.233538] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3301.281834] hfs: can't find a HFS filesystem on dev loop4
[ 3301.327178] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:18 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x520e}}]})

[ 3301.401306] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3301.425502] minix_free_inode: bit 1 already cleared
14:56:18 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x0, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:18 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3301.521922] hfs: can't find a HFS filesystem on dev loop4
14:56:19 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3301.571614] minix_free_inode: bit 1 already cleared
[ 3301.595999] hfs: can't find a HFS filesystem on dev loop4
14:56:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x0, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3301.704246] audit: type=1800 audit(1576940179.134:825): pid=23072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17729 res=0
[ 3301.758757] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3301.800853] minix_free_inode: bit 1 already cleared
[ 3301.806144] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3301.916108] minix_free_inode: bit 1 already cleared
14:56:19 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xff0f0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:19 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x5354}}]})

14:56:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:19 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:19 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3302.504857] audit: type=1800 audit(1576940179.924:826): pid=23093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17752 res=0
[ 3302.528792] hfs: can't find a HFS filesystem on dev loop4
[ 3302.537437] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3302.589014] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3302.610406] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3302.631411] minix_free_inode: bit 1 already cleared
[ 3302.636975] hfs: can't find a HFS filesystem on dev loop4
14:56:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3302.675928] minix_free_inode: bit 1 already cleared
14:56:20 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x5453}}]})

14:56:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:20 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:20 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3302.839675] hfs: can't find a HFS filesystem on dev loop4
[ 3302.926653] hfs: can't find a HFS filesystem on dev loop4
[ 3302.936975] audit: type=1800 audit(1576940180.374:827): pid=23117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17713 res=0
[ 3303.004394] audit: type=1800 audit(1576940180.434:828): pid=23120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17744 res=0
[ 3303.045970] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3303.126151] minix_free_inode: bit 1 already cleared
[ 3303.132808] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3303.246795] minix_free_inode: bit 1 already cleared
14:56:21 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffff8000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:21 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x6000}}]})

14:56:21 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:21 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:21 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xe4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3303.642475] hfs: can't find a HFS filesystem on dev loop4
14:56:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3303.720269] selinux_nlmsg_perm: 390 callbacks suppressed
[ 3303.720284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
[ 3303.739489] hfs: can't find a HFS filesystem on dev loop4
[ 3303.769146] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3303.791275] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:21 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x6800}}]})

[ 3303.838384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
[ 3303.871815] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3303.880401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
[ 3303.887113] minix_free_inode: bit 1 already cleared
[ 3303.949781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
14:56:21 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xe4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:21 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3303.999272] hfs: can't find a HFS filesystem on dev loop4
[ 3304.002047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
[ 3304.048972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
[ 3304.074946] minix_free_inode: bit 1 already cleared
[ 3304.084743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
[ 3304.110892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
[ 3304.137268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
[ 3304.155261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23148 comm=syz-executor.1
[ 3304.226877] kauditd_printk_skb: 2 callbacks suppressed
[ 3304.226892] audit: type=1800 audit(1576940181.664:831): pid=23161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17766 res=0
14:56:21 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x6c00}}]})

[ 3304.322991] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3304.335774] audit: type=1800 audit(1576940181.754:832): pid=23166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17841 res=0
[ 3304.431166] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3304.445581] minix_free_inode: bit 1 already cleared
[ 3304.477960] hfs: can't find a HFS filesystem on dev loop4
[ 3304.525576] minix_free_inode: bit 1 already cleared
[ 3304.582513] hfs: can't find a HFS filesystem on dev loop4
14:56:22 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:22 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
socket$rds(0x15, 0x5, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r3 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r3, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r4}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r3, r2, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:22 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x7400}}]})

14:56:22 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xe4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3304.975800] audit: type=1800 audit(1576940182.414:833): pid=23186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17905 res=0
14:56:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3305.021611] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3305.052133] hfs: can't find a HFS filesystem on dev loop4
[ 3305.071165] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3305.074117] audit: type=1800 audit(1576940182.454:834): pid=23188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17937 res=0
[ 3305.147786] hfs: can't find a HFS filesystem on dev loop4
[ 3305.158404] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3305.167715] minix_free_inode: bit 1 already cleared
14:56:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:22 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x7a00}}]})

[ 3305.245386] minix_free_inode: bit 1 already cleared
14:56:22 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3305.352344] hfs: can't find a HFS filesystem on dev loop4
14:56:22 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
socket$rds(0x15, 0x5, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r3 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r3, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r4}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r3, r2, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3305.463149] hfs: can't find a HFS filesystem on dev loop4
[ 3305.499216] audit: type=1800 audit(1576940182.934:835): pid=23209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17809 res=0
[ 3305.573315] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3305.598167] audit: type=1800 audit(1576940183.034:836): pid=23217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16624 res=0
[ 3305.676055] minix_free_inode: bit 1 already cleared
[ 3305.828807] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3305.954788] minix_free_inode: bit 1 already cleared
14:56:23 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfffffff0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:23 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xedc0}}]})

14:56:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:23 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:23 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:23 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
socket$rds(0x15, 0x5, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r3 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r3, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r4}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r3, r2, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3306.268084] hfs: can't find a HFS filesystem on dev loop4
[ 3306.278401] audit: type=1800 audit(1576940183.704:837): pid=23231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17889 res=0
[ 3306.305273] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3306.371723] audit: type=1800 audit(1576940183.714:838): pid=23233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17905 res=0
14:56:23 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xff0f}}]})

14:56:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

[ 3306.518042] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3306.563440] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:24 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:24 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, 0x0, 0x0, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3306.661131] hfs: can't find a HFS filesystem on dev loop4
[ 3306.694900] minix_free_inode: bit 1 already cleared
[ 3306.755663] minix_free_inode: bit 1 already cleared
[ 3306.786053] hfs: can't find a HFS filesystem on dev loop4
[ 3306.900866] audit: type=1800 audit(1576940184.304:839): pid=23260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17766 res=0
[ 3306.971302] audit: type=1800 audit(1576940184.404:840): pid=23262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17755 res=0
[ 3307.019339] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3307.079816] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3307.125813] minix_free_inode: bit 1 already cleared
[ 3307.168450] minix_free_inode: bit 1 already cleared
14:56:25 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfffffff2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:25 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x20000}}]})

14:56:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:25 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:25 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:25 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, 0x0, 0x0, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3307.624134] hfs: can't find a HFS filesystem on dev loop4
[ 3307.661852] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 3307.690382] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3307.711856] hfs: can't find a HFS filesystem on dev loop4
[ 3307.720820] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:25 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x40000}}]})

[ 3307.807945] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3307.851542] minix_free_inode: bit 1 already cleared
[ 3307.899786] minix_free_inode: bit 1 already cleared
[ 3307.951580] hfs: can't find a HFS filesystem on dev loop4
14:56:25 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, 0x0, 0x0, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:25 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3308.033100] hfs: can't find a HFS filesystem on dev loop4
14:56:25 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xe0000}}]})

[ 3308.124703] protocol 88fb is buggy, dev hsr_slave_0
[ 3308.129858] protocol 88fb is buggy, dev hsr_slave_1
[ 3308.178445] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3308.197819] hfs: can't find a HFS filesystem on dev loop4
[ 3308.205408] protocol 88fb is buggy, dev hsr_slave_0
[ 3308.210938] protocol 88fb is buggy, dev hsr_slave_1
[ 3308.217119] protocol 88fb is buggy, dev hsr_slave_0
[ 3308.222577] protocol 88fb is buggy, dev hsr_slave_1
[ 3308.228369] protocol 88fb is buggy, dev hsr_slave_0
[ 3308.234117] protocol 88fb is buggy, dev hsr_slave_1
[ 3308.258888] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3308.285926] minix_free_inode: bit 1 already cleared
[ 3308.303763] hfs: can't find a HFS filesystem on dev loop4
[ 3308.345820] minix_free_inode: bit 1 already cleared
14:56:25 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x1fffff}}]})

14:56:25 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}], 0x1, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3308.509551] hfs: can't find a HFS filesystem on dev loop4
[ 3308.600111] hfs: can't find a HFS filesystem on dev loop4
[ 3308.635781] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3308.715824] minix_free_inode: bit 1 already cleared
14:56:26 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfffffff3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:26 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:26 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:26 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x400000}}]})

14:56:26 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}], 0x1, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3308.917177] hfs: can't find a HFS filesystem on dev loop4
[ 3308.928003] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 3308.939571] selinux_nlmsg_perm: 310 callbacks suppressed
[ 3308.939598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
[ 3308.982078] hfs: can't find a HFS filesystem on dev loop4
[ 3309.000756] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3309.023028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
14:56:26 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x6b6b6b}}]})

[ 3309.079712] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3309.104947] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3309.113594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
14:56:26 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3309.150365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
[ 3309.170325] hfs: can't find a HFS filesystem on dev loop4
[ 3309.181780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
[ 3309.194340] minix_free_inode: bit 1 already cleared
[ 3309.213604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
[ 3309.233477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
[ 3309.253274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
[ 3309.275097] minix_free_inode: bit 1 already cleared
[ 3309.281205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
[ 3309.302218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23338 comm=syz-executor.1
14:56:26 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}], 0x1, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3309.367021] hfs: can't find a HFS filesystem on dev loop4
14:56:26 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x1000000}}]})

[ 3309.459603] kauditd_printk_skb: 7 callbacks suppressed
[ 3309.459618] audit: type=1800 audit(1576940186.894:848): pid=23359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17779 res=0
[ 3309.559155] audit: type=1800 audit(1576940186.914:849): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=18001 res=0
[ 3309.638167] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3309.658206] hfs: can't find a HFS filesystem on dev loop4
[ 3309.680653] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:27 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {0x0}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3309.755033] hfs: can't find a HFS filesystem on dev loop4
[ 3309.775306] minix_free_inode: bit 1 already cleared
[ 3309.894443] audit: type=1800 audit(1576940187.324:850): pid=23374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17772 res=0
[ 3309.895338] minix_free_inode: bit 1 already cleared
[ 3309.931508] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3310.058416] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3310.135658] minix_free_inode: bit 1 already cleared
14:56:27 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfffffffe)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

14:56:27 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x2000000}}]})

14:56:27 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:27 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {0x0}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3310.303531] hfs: can't find a HFS filesystem on dev loop4
[ 3310.331441] audit: type=1800 audit(1576940187.764:852): pid=23387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17784 res=0
[ 3310.386773] hfs: can't find a HFS filesystem on dev loop4
[ 3310.417276] audit: type=1800 audit(1576940187.764:851): pid=23388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17783 res=0
14:56:27 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x3000000}}]})

[ 3310.485719] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3310.486674] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:28 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3310.573515] hfs: can't find a HFS filesystem on dev loop4
[ 3310.585870] minix_free_inode: bit 1 already cleared
[ 3310.624916] minix_free_inode: bit 1 already cleared
14:56:28 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {0x0}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3310.710246] hfs: can't find a HFS filesystem on dev loop4
14:56:28 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4000000}}]})

[ 3310.788910] audit: type=1800 audit(1576940188.224:853): pid=23406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17773 res=0
[ 3310.861551] audit: type=1800 audit(1576940188.254:854): pid=23408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17774 res=0
[ 3310.915340] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3310.959109] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3310.961520] hfs: can't find a HFS filesystem on dev loop4
[ 3310.976151] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:28 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3311.048835] hfs: can't find a HFS filesystem on dev loop4
[ 3311.056121] minix_free_inode: bit 1 already cleared
14:56:28 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x5000000}}]})

[ 3311.134975] minix_free_inode: bit 1 already cleared
[ 3311.244259] hfs: can't find a HFS filesystem on dev loop4
[ 3311.288531] audit: type=1800 audit(1576940188.724:855): pid=23429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17771 res=0
14:56:28 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x200000003)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)

14:56:28 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3311.336609] hfs: can't find a HFS filesystem on dev loop4
14:56:28 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x6000000}}]})

[ 3311.407939] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3311.413462] audit: type=1800 audit(1576940188.844:856): pid=23435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17782 res=0
[ 3311.506147] minix_free_inode: bit 1 already cleared
[ 3311.573680] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3311.590527] hfs: can't find a HFS filesystem on dev loop4
[ 3311.656105] minix_free_inode: bit 1 already cleared
14:56:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:29 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:29 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3311.742588] hfs: can't find a HFS filesystem on dev loop4
14:56:29 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x7000000}}]})

[ 3311.801921] audit: type=1800 audit(1576940189.234:857): pid=23449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17771 res=0
[ 3311.875307] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3311.890335] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3311.950320] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3311.954076] hfs: can't find a HFS filesystem on dev loop4
[ 3312.042360] hfs: can't find a HFS filesystem on dev loop4
[ 3312.065675] minix_free_inode: bit 1 already cleared
14:56:29 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:29 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x8000000}}]})

14:56:29 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3312.185162] minix_free_inode: bit 1 already cleared
14:56:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3312.292322] hfs: can't find a HFS filesystem on dev loop4
[ 3312.350351] hfs: can't find a HFS filesystem on dev loop4
[ 3312.433075] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3312.459302] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3312.519226] minix_free_inode: bit 1 already cleared
[ 3312.537222] minix_free_inode: bit 1 already cleared
14:56:30 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x8000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:30 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x9000000}}]})

14:56:30 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:30 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df2", 0x7a}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:30 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYBLOB="00000000f1"], 0x2}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3312.841215] hfs: can't find a HFS filesystem on dev loop4
[ 3312.916397] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3312.934711] hfs: can't find a HFS filesystem on dev loop4
[ 3312.951915] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:30 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xa000000}}]})

[ 3313.020188] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3313.056607] minix_free_inode: bit 1 already cleared
[ 3313.095996] minix_free_inode: bit 1 already cleared
14:56:30 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:30 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df2", 0x7a}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3313.173081] hfs: can't find a HFS filesystem on dev loop4
14:56:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffcd2)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2000, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e22, @local}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000))
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3313.234555] hfs: can't find a HFS filesystem on dev loop4
14:56:30 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x10000000}}]})

[ 3313.375304] net_ratelimit: 7 callbacks suppressed
[ 3313.375314] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 3313.392021] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3313.459610] hfs: can't find a HFS filesystem on dev loop4
[ 3313.485751] minix_free_inode: bit 1 already cleared
[ 3313.523074] hfs: can't find a HFS filesystem on dev loop4
[ 3313.564541] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:31 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x1f000000}}]})

14:56:31 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df2", 0x7a}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3313.685332] minix_free_inode: bit 1 already cleared
[ 3313.741254] hfs: can't find a HFS filesystem on dev loop4
[ 3313.783437] hfs: can't find a HFS filesystem on dev loop4
[ 3313.864436] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3313.935757] minix_free_inode: bit 1 already cleared
[ 3313.965388] protocol 88fb is buggy, dev hsr_slave_0
[ 3313.970942] protocol 88fb is buggy, dev hsr_slave_1
14:56:31 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:31 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:31 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYBLOB="00000000f1"], 0x2}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:31 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x20000000}}]})

14:56:31 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328c", 0xb7}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3314.121631] hfs: can't find a HFS filesystem on dev loop4
[ 3314.192988] hfs: can't find a HFS filesystem on dev loop4
[ 3314.217375] selinux_nlmsg_perm: 390 callbacks suppressed
[ 3314.217391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
[ 3314.236715] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:31 executing program 0:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 \n'], 0xc)
prctl$PR_SET_PTRACER(0x59616d61, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

14:56:31 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x22000000}}]})

[ 3314.293942] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3314.337478] minix_free_inode: bit 1 already cleared
[ 3314.359708] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3314.375652] minix_free_inode: bit 1 already cleared
14:56:31 executing program 0:
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xfffffe5d)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file2\x00')
lsetxattr$smack_xattr_label(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000080)={'uservboxnet0vmnet0'}, 0x13, 0x8aef9ab1ee8403db)

[ 3314.403317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
[ 3314.461244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
14:56:31 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328c", 0xb7}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3314.514526] hfs: can't find a HFS filesystem on dev loop4
[ 3314.536933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
14:56:32 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3314.573611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
[ 3314.612569] hfs: can't find a HFS filesystem on dev loop4
[ 3314.642320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
[ 3314.655106] kauditd_printk_skb: 10 callbacks suppressed
[ 3314.655123] audit: type=1800 audit(1576940192.074:868): pid=23579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17773 res=0
[ 3314.725914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
[ 3314.755574] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:32 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x23000000}}]})

[ 3314.765754] audit: type=1800 audit(1576940192.144:869): pid=23583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16528 res=0
[ 3314.813966] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3314.825536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
[ 3314.891914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
[ 3314.907076] minix_free_inode: bit 1 already cleared
[ 3314.918116] minix_free_inode: bit 1 already cleared
14:56:32 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328c", 0xb7}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3314.972604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23560 comm=syz-executor.1
[ 3314.993649] hfs: can't find a HFS filesystem on dev loop4
[ 3315.067608] hfs: can't find a HFS filesystem on dev loop4
[ 3315.144740] audit: type=1800 audit(1576940192.574:870): pid=23597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16641 res=0
[ 3315.310674] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3315.476406] minix_free_inode: bit 1 already cleared
14:56:33 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7ffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYBLOB="00000000f1"], 0x2}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:33 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x2c000000}}]})

14:56:33 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:33 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85", 0xd6}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3315.657598] hfs: can't find a HFS filesystem on dev loop4
[ 3315.666296] audit: type=1800 audit(1576940193.104:871): pid=23611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16947 res=0
[ 3315.689753] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:33 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xffffffffffffff59)
getpid()
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x200000002)
setpgid(0x0, 0x0)
ftruncate(r2, 0x8200)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348)
r4 = dup(r3)
setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
getresgid(&(0x7f0000000140), 0x0, 0x0)
geteuid()
fstat(0xffffffffffffffff, 0x0)
lchown(0x0, 0x0, 0x0)
getgroups(0x0, 0x0)
getpid()
getresgid(0x0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0)
getgroups(0x0, 0x0)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x10002)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x2404000c, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)

[ 3315.768308] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3315.776309] hfs: can't find a HFS filesystem on dev loop4
[ 3315.782369] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3315.794788] audit: type=1800 audit(1576940193.114:872): pid=23618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16994 res=0
14:56:33 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x3f000000}}]})

[ 3315.865876] minix_free_inode: bit 1 already cleared
14:56:33 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85", 0xd6}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3315.936817] minix_free_inode: bit 1 already cleared
14:56:33 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3315.998079] hfs: can't find a HFS filesystem on dev loop4
14:56:33 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xffffffffffffff59)
getpid()
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x200000002)
setpgid(0x0, 0x0)
ftruncate(r2, 0x8200)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348)
r4 = dup(r3)
setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
getresgid(&(0x7f0000000140), 0x0, 0x0)
geteuid()
fstat(0xffffffffffffffff, 0x0)
lchown(0x0, 0x0, 0x0)
getgroups(0x0, 0x0)
getpid()
getresgid(0x0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0)
getgroups(0x0, 0x0)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x10002)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x2404000c, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)

[ 3316.066953] audit: type=1800 audit(1576940193.504:873): pid=23636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16881 res=0
[ 3316.067637] hfs: can't find a HFS filesystem on dev loop4
14:56:33 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x40000000}}]})

[ 3316.161000] audit: type=1800 audit(1576940193.594:874): pid=23640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16897 res=0
[ 3316.217341] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3316.243295] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3316.272713] hfs: can't find a HFS filesystem on dev loop4
[ 3316.325817] minix_free_inode: bit 1 already cleared
[ 3316.347628] minix_free_inode: bit 1 already cleared
[ 3316.353232] hfs: can't find a HFS filesystem on dev loop4
14:56:33 executing program 0:
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x6097, &(0x7f0000000340), 0x2b, &(0x7f0000000180), 0x2}, 0x0)

14:56:34 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xc000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:34 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x42440000}}]})

14:56:34 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85", 0xd6}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:34 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

14:56:34 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="00000000f1"], 0x2}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:34 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3316.919047] audit: type=1800 audit(1576940194.354:875): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17169 res=0
[ 3316.948271] hfs: can't find a HFS filesystem on dev loop4
[ 3316.960782] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3316.984316] audit: type=1800 audit(1576940194.394:876): pid=23667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17249 res=0
[ 3317.059792] hfs: can't find a HFS filesystem on dev loop4
[ 3317.067386] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3317.095904] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:34 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x48000000}}]})

[ 3317.145566] minix_free_inode: bit 1 already cleared
14:56:34 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586", 0xe5}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3317.245516] minix_free_inode: bit 1 already cleared
[ 3317.253506] hfs: can't find a HFS filesystem on dev loop4
14:56:34 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3317.340049] hfs: can't find a HFS filesystem on dev loop4
[ 3317.389524] audit: type=1800 audit(1576940194.824:877): pid=23687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17235 res=0
14:56:34 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4c000000}}]})

[ 3317.531135] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3317.569621] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3317.598982] hfs: can't find a HFS filesystem on dev loop4
[ 3317.626147] minix_free_inode: bit 1 already cleared
[ 3317.644247] hfs: can't find a HFS filesystem on dev loop4
14:56:35 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:35 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="00000000f1"], 0x2}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3317.738469] minix_free_inode: bit 1 already cleared
[ 3317.907414] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3317.985451] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:35 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:35 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4d500000}}]})

14:56:35 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586", 0xe5}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:35 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

14:56:35 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3318.114864] minix_free_inode: bit 1 already cleared
[ 3318.194200] hfs: can't find a HFS filesystem on dev loop4
[ 3318.252404] hfs: can't find a HFS filesystem on dev loop4
[ 3318.274218] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:35 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4f000000}}]})

[ 3318.367077] minix_free_inode: bit 1 already cleared
[ 3318.388067] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:35 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3318.484918] hfs: can't find a HFS filesystem on dev loop4
14:56:36 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586", 0xe5}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:36 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x50000000}}]})

[ 3318.543601] hfs: can't find a HFS filesystem on dev loop4
[ 3318.569863] minix_free_inode: bit 1 already cleared
14:56:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="00000000f1"], 0x2}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3318.710800] hfs: can't find a HFS filesystem on dev loop4
[ 3318.757048] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3318.788364] hfs: can't find a HFS filesystem on dev loop4
[ 3318.804342] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:36 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x520e0000}}]})

[ 3318.848425] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3318.885969] minix_free_inode: bit 1 already cleared
[ 3318.905778] minix_free_inode: bit 1 already cleared
14:56:36 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 3318.990423] hfs: can't find a HFS filesystem on dev loop4
[ 3319.052972] hfs: can't find a HFS filesystem on dev loop4
14:56:36 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x60b30000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:36 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:36 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f31", 0xed}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:36 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x53540000}}]})

[ 3319.429375] hfs: can't find a HFS filesystem on dev loop4
[ 3319.500575] hfs: can't find a HFS filesystem on dev loop4
[ 3319.507453] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3319.519058] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:37 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x60000000}}]})

[ 3319.605416] minix_free_inode: bit 1 already cleared
[ 3319.612909] minix_free_inode: bit 1 already cleared
14:56:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:37 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f31", 0xed}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3319.735847] hfs: can't find a HFS filesystem on dev loop4
14:56:37 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3319.792246] hfs: can't find a HFS filesystem on dev loop4
[ 3319.803084] kauditd_printk_skb: 8 callbacks suppressed
[ 3319.803100] audit: type=1800 audit(1576940197.234:886): pid=23789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17281 res=0
[ 3319.859485] selinux_nlmsg_perm: 566 callbacks suppressed
[ 3319.859501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23791 comm=syz-executor.1
14:56:37 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x68000000}}]})

14:56:37 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 3319.959478] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3319.975821] audit: type=1800 audit(1576940197.414:887): pid=23795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17186 res=0
[ 3319.999508] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3320.047983] hfs: can't find a HFS filesystem on dev loop4
[ 3320.059091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23791 comm=syz-executor.1
[ 3320.087569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23791 comm=syz-executor.1
[ 3320.100899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23791 comm=syz-executor.1
[ 3320.116953] hfs: can't find a HFS filesystem on dev loop4
[ 3320.122757] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3320.123506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23791 comm=syz-executor.1
14:56:37 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

[ 3320.143071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23806 comm=syz-executor.0
[ 3320.162803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23806 comm=syz-executor.0
14:56:37 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f31", 0xed}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:37 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x6b6b6b00}}]})

[ 3320.202114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23791 comm=syz-executor.1
[ 3320.230741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23791 comm=syz-executor.1
[ 3320.246151] minix_free_inode: bit 1 already cleared
[ 3320.251558] minix_free_inode: bit 1 already cleared
[ 3320.263305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23806 comm=syz-executor.0
[ 3320.386330] hfs: can't find a HFS filesystem on dev loop4
[ 3320.418386] audit: type=1800 audit(1576940197.854:888): pid=23813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17329 res=0
14:56:37 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3320.459840] hfs: can't find a HFS filesystem on dev loop4
14:56:38 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x6c000000}}]})

[ 3320.576559] audit: type=1800 audit(1576940198.014:889): pid=23818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17346 res=0
[ 3320.603079] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:38 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3320.663115] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3320.671756] hfs: can't find a HFS filesystem on dev loop4
14:56:38 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3320.739136] hfs: can't find a HFS filesystem on dev loop4
[ 3320.759218] minix_free_inode: bit 1 already cleared
14:56:38 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x74000000}}]})

[ 3320.804970] minix_free_inode: bit 1 already cleared
[ 3320.818828] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:38 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r1)
socket$inet(0x10, 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

14:56:38 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3320.961787] audit: type=1800 audit(1576940198.394:890): pid=23833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17217 res=0
[ 3321.011718] hfs: can't find a HFS filesystem on dev loop4
[ 3321.036468] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3321.096007] audit: type=1800 audit(1576940198.534:891): pid=23843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17346 res=0
[ 3321.125758] minix_free_inode: bit 1 already cleared
[ 3321.133385] hfs: can't find a HFS filesystem on dev loop4
14:56:38 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x7a000000}}]})

14:56:38 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3321.295334] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3321.303720] hfs: can't find a HFS filesystem on dev loop4
[ 3321.386587] hfs: can't find a HFS filesystem on dev loop4
[ 3321.409093] audit: type=1800 audit(1576940198.844:892): pid=23853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17217 res=0
[ 3321.515674] minix_free_inode: bit 1 already cleared
[ 3321.545973] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:39 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:39 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x8cffffff}}]})

14:56:39 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:39 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:39 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3321.684819] minix_free_inode: bit 1 already cleared
[ 3321.752546] hfs: can't find a HFS filesystem on dev loop4
[ 3321.760040] audit: type=1800 audit(1576940199.194:893): pid=23863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16707 res=0
[ 3321.792604] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3321.834875] hfs: can't find a HFS filesystem on dev loop4
[ 3321.841651] audit: type=1800 audit(1576940199.274:894): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16817 res=0
[ 3321.867433] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:39 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xc0ed0000}}]})

14:56:39 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r1)
socket$inet(0x10, 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

[ 3321.933400] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3321.935289] minix_free_inode: bit 1 already cleared
[ 3322.047235] hfs: can't find a HFS filesystem on dev loop4
[ 3322.055768] minix_free_inode: bit 1 already cleared
14:56:39 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3322.135334] hfs: can't find a HFS filesystem on dev loop4
14:56:39 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xf5ffffff}}]})

14:56:39 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f3184", 0xee}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3322.187748] audit: type=1800 audit(1576940199.624:895): pid=23886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16707 res=0
[ 3322.277100] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3322.307777] hfs: can't find a HFS filesystem on dev loop4
[ 3322.348017] minix_free_inode: bit 1 already cleared
[ 3322.388534] hfs: can't find a HFS filesystem on dev loop4
[ 3322.403550] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:39 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xf6ffffff}}]})

[ 3322.515796] minix_free_inode: bit 1 already cleared
14:56:40 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3322.600949] hfs: can't find a HFS filesystem on dev loop4
[ 3322.676265] hfs: can't find a HFS filesystem on dev loop4
[ 3322.697172] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:40 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x106000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:40 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229", @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:40 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f3184", 0xee}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:40 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xfbffffff}}]})

[ 3322.776066] minix_free_inode: bit 1 already cleared
14:56:40 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3322.867824] hfs: can't find a HFS filesystem on dev loop4
[ 3322.885495] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:40 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r1)
socket$inet(0x10, 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

[ 3322.946904] hfs: can't find a HFS filesystem on dev loop4
[ 3322.964299] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:40 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xfcfdffff}}]})

[ 3323.065504] minix_free_inode: bit 1 already cleared
14:56:40 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f3184", 0xee}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3323.145404] hfs: can't find a HFS filesystem on dev loop4
[ 3323.196667] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3323.233569] hfs: can't find a HFS filesystem on dev loop4
14:56:40 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xfdfdffff}}]})

14:56:40 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3323.366121] minix_free_inode: bit 1 already cleared
[ 3323.392356] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3323.445630] hfs: can't find a HFS filesystem on dev loop4
14:56:40 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e0", 0xf0}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3323.508187] hfs: can't find a HFS filesystem on dev loop4
[ 3323.541813] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:41 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xff0f0000}}]})

[ 3323.575543] minix_free_inode: bit 1 already cleared
[ 3323.615861] minix_free_inode: bit 1 already cleared
[ 3323.708785] hfs: can't find a HFS filesystem on dev loop4
[ 3323.791040] hfs: can't find a HFS filesystem on dev loop4
[ 3323.799189] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3323.876490] minix_free_inode: bit 1 already cleared
14:56:41 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:41 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229", @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:41 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:41 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xffff1f00}}]})

14:56:41 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

14:56:41 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e0", 0xf0}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3324.012593] hfs: can't find a HFS filesystem on dev loop4
[ 3324.058632] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3324.078361] hfs: can't find a HFS filesystem on dev loop4
[ 3324.084011] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:41 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xfffffdfc}}]})

[ 3324.156627] minix_free_inode: bit 1 already cleared
[ 3324.206967] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3324.288772] hfs: can't find a HFS filesystem on dev loop4
[ 3324.304833] minix_free_inode: bit 1 already cleared
14:56:41 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e0", 0xf0}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:41 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3324.414228] hfs: can't find a HFS filesystem on dev loop4
14:56:41 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xfffffdfd}}]})

[ 3324.511153] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3324.537858] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3324.565755] minix_free_inode: bit 1 already cleared
[ 3324.584925] minix_free_inode: bit 1 already cleared
[ 3324.593271] hfs: can't find a HFS filesystem on dev loop4
14:56:42 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:42 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x1, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3324.755381] hfs: can't find a HFS filesystem on dev loop4
[ 3324.830864] kauditd_printk_skb: 11 callbacks suppressed
[ 3324.830879] audit: type=1800 audit(1576940202.264:907): pid=24011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16575 res=0
[ 3324.916924] audit: type=1800 audit(1576940202.324:908): pid=24013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16658 res=0
[ 3324.940395] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3324.964756] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3324.998123] minix_free_inode: bit 1 already cleared
[ 3325.039975] minix_free_inode: bit 1 already cleared
14:56:42 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229", @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:42 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x1, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:42 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

14:56:42 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xffffff7f}}]})

14:56:42 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

[ 3325.217484] hfs: can't find a HFS filesystem on dev loop4
[ 3325.226238] audit: type=1800 audit(1576940202.664:909): pid=24025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16595 res=0
[ 3325.290201] hfs: can't find a HFS filesystem on dev loop4
[ 3325.297670] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3325.306524] selinux_nlmsg_perm: 470 callbacks suppressed
[ 3325.306539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
[ 3325.339000] audit: type=1800 audit(1576940202.744:910): pid=24035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16707 res=0
[ 3325.360464] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3325.365186] minix_free_inode: bit 1 already cleared
14:56:42 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xffffff8c}}]})

[ 3325.397415] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:42 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3325.449853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
[ 3325.499883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
[ 3325.503577] hfs: can't find a HFS filesystem on dev loop4
[ 3325.531372] minix_free_inode: bit 1 already cleared
[ 3325.550827] audit: type=1800 audit(1576940202.984:911): pid=24050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16595 res=0
[ 3325.567938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
[ 3325.615771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
[ 3325.643732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
[ 3325.669615] hfs: can't find a HFS filesystem on dev loop4
[ 3325.676506] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3325.682888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
14:56:43 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x1, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3325.711942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
14:56:43 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xfffffff5}}]})

[ 3325.778961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
[ 3325.796545] minix_free_inode: bit 1 already cleared
[ 3325.832282] audit: type=1800 audit(1576940203.264:912): pid=24058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16534 res=0
[ 3325.863773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24041 comm=syz-executor.1
14:56:43 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3325.906401] hfs: can't find a HFS filesystem on dev loop4
[ 3325.926275] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3326.002726] hfs: can't find a HFS filesystem on dev loop4
[ 3326.025547] minix_free_inode: bit 1 already cleared
14:56:43 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xfffffff6}}]})

14:56:43 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 3326.060744] audit: type=1800 audit(1576940203.494:913): pid=24067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16595 res=0
14:56:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c205370763", @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

14:56:43 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3326.160747] hfs: can't find a HFS filesystem on dev loop4
[ 3326.166370] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3326.201369] audit: type=1800 audit(1576940203.634:914): pid=24077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16626 res=0
[ 3326.243198] hfs: can't find a HFS filesystem on dev loop4
[ 3326.260611] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3326.275881] minix_free_inode: bit 1 already cleared
14:56:43 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xfffffffb}}]})

14:56:43 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3326.334743] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3326.356759] minix_free_inode: bit 1 already cleared
[ 3326.443247] hfs: can't find a HFS filesystem on dev loop4
[ 3326.477484] audit: type=1800 audit(1576940203.914:915): pid=24090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16595 res=0
[ 3326.522031] hfs: can't find a HFS filesystem on dev loop4
[ 3326.609126] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:44 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300000002000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:44 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:44 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x1000000000}}]})

14:56:44 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(0x0, 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3326.734240] audit: type=1800 audit(1576940204.164:916): pid=24098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16549 res=0
[ 3326.775205] minix_free_inode: bit 1 already cleared
[ 3326.783059] hfs: can't find a HFS filesystem on dev loop4
[ 3326.874361] hfs: can't find a HFS filesystem on dev loop4
[ 3326.882449] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:44 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:44 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xedc000000000}}]})

14:56:44 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 3327.015958] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3327.024888] minix_free_inode: bit 1 already cleared
[ 3327.043925] minix_free_inode: bit 1 already cleared
14:56:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c205370763", @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3327.127094] hfs: can't find a HFS filesystem on dev loop4
14:56:44 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(0x0, 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3327.192977] hfs: can't find a HFS filesystem on dev loop4
[ 3327.240191] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3327.276568] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
14:56:44 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x1000000000000}}]})

[ 3327.348891] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3327.365842] minix_free_inode: bit 1 already cleared
[ 3327.400665] minix_free_inode: bit 1 already cleared
[ 3327.446618] hfs: can't find a HFS filesystem on dev loop4
14:56:44 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(0x0, 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:44 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3327.540417] hfs: can't find a HFS filesystem on dev loop4
[ 3327.737289] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3327.774005] minix_free_inode: bit 1 already cleared
[ 3327.810399] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3327.975473] minix_free_inode: bit 1 already cleared
14:56:45 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e155667018001000000000067a2b4ecb75c5280fbca3ce9bbdc7e507976393196a1469f19f444f39200881b8afef96dbcbe63cb975d3b9983c3d54c3a794ec359a42e9c72d1369f22ee5c50c84688e04a145104f2f518453bec82bd0b54fdcb0a7bc4ac6cc4ea5f6506cb8e7280b85b22b167"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

14:56:45 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:45 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x2000000000000}}]})

14:56:45 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

14:56:45 executing program 0:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000e00000800010063627100a40802000404"], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x1bc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x194, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x184, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x11, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}]]]}}}]}, 0x1bc}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

14:56:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c205370763", @ANYRES32, @ANYBLOB="00000000f1"], 0x3}}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0ff70000008000000000", @ANYRES32=r6], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 3328.126413] hfs: can't find a HFS filesystem on dev loop4
[ 3328.168006] hfs: can't find a HFS filesystem on dev loop4
[ 3328.201399] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3328.287867] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3328.309289] minix_free_inode: bit 1 already cleared
14:56:45 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x4000000000000}}]})

[ 3328.340364] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:45 executing program 3:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009", 0xf1}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3328.421009] hfs: can't find a HFS filesystem on dev loop4
14:56:45 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3328.476582] hfs: can't find a HFS filesystem on dev loop4
[ 3328.505134] minix_free_inode: bit 1 already cleared
14:56:46 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0x7ffffffffffff}}]})

[ 3328.620840] hfs: can't find a HFS filesystem on dev loop4
[ 3328.664154] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 3328.683296] minix_free_inode: bit 1 already cleared
[ 3328.700162] hfs: can't find a HFS filesystem on dev loop4
[ 3328.721560] MINIX-fs: mounting unchecked file system, running fsck is recommended
14:56:46 executing program 4:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@dir_umask={'dir_umask'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xe000000000000}}]})

[ 3328.886013] minix_free_inode: bit 1 already cleared
14:56:46 executing program 5:
unshare(0x8000000)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3e47a01c7b61fa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x610b847d078a6813}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x20)
r2 = socket$rds(0x15, 0x5, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="903be5a5ce1224ba5eca82514e07f43b3fc5ff8138b3df7452f9dc423a76b57179a467bb30df01f3919433b66641ec2476b93e6ecdf8f1598a37477cce9a6f064fa84df3dc4185f44dd5183c016a612335d7f2ac41840f3f5f60406c175b742b5b5c1ccb8e663a821226deebc3f9d420a980ce2222d1913492a3d6e5379c30ba48d55ee01c1544e0a3f8e20a", 0x8c}, {&(0x7f0000000900)="f9d5f359f8fdb448a13dbdcae710bb5834a9f496d55a960ea5a5887e54bd70239b24006ce5237c9524941a1cb98e936a1ec9e506cc824fd021bbc34d2ac5be74d42f4a1c273ab6d722ca8b30fb68665cc4bd159ced8cd06c3907a400fcd9c9abba100853de7fce7a53438b40531439a2af7ada1ab1c51c9c1df21d1c454f6c260e717e1e434fcaee6fcd961fb2482caecdffc53bdacfaf68d56a469bfbbb1780716fa16802ecf447d0c92adee0b8a0e309823af0f2328ca92598bb8a04fbff6e7d2ce77138c8a22bd32b05def03714e26a44c2cc5e85bf5c30bc1b596f9315fdae024cf586ad8b107e354b6f318479e009f602c9", 0xf4}], 0x2, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
r4 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x800000008000000}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r5}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000003c0))
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[ 3328.978415] hfs: can't find a HFS filesystem on dev loop4
[ 3329.048699] hfs: can't find a HFS filesystem on dev loop4
[ 3329.069666] ==================================================================
[ 3329.077064] BUG: KASAN: use-after-free in __lock_acquire+0x34ac/0x49c0
[ 3329.083732] Read of size 8 at addr ffff88807a948708 by task syz-executor.2/24168
[ 3329.091258] 
[ 3329.092894] CPU: 1 PID: 24168 Comm: syz-executor.2 Not tainted 4.19.91-syzkaller #0
[ 3329.100685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3329.110036] Call Trace:
[ 3329.112629]  dump_stack+0x197/0x210
[ 3329.116263]  ? __lock_acquire+0x34ac/0x49c0
[ 3329.120591]  print_address_description.cold+0x7c/0x20d
[ 3329.125874]  ? __lock_acquire+0x34ac/0x49c0
[ 3329.130198]  kasan_report.cold+0x8c/0x2ba
[ 3329.134352]  __asan_report_load8_noabort+0x14/0x20
[ 3329.139297]  __lock_acquire+0x34ac/0x49c0
[ 3329.143460]  ? finish_task_switch+0x146/0x7c0
[ 3329.147965]  ? _raw_spin_unlock_irq+0x28/0x90
[ 3329.152467]  ? finish_task_switch+0x146/0x7c0
[ 3329.156978]  ? mark_held_locks+0x100/0x100
[ 3329.161218]  ? trace_hardirqs_on+0x67/0x220
[ 3329.165546]  ? _raw_spin_unlock_irq+0x5e/0x90
[ 3329.170052]  ? finish_task_switch+0x146/0x7c0
[ 3329.174551]  ? finish_task_switch+0x118/0x7c0
[ 3329.179050]  ? switch_mm_irqs_off+0x2de/0x1360
[ 3329.183639]  ? __schedule+0x86e/0x1dc0
[ 3329.187570]  lock_acquire+0x16f/0x3f0
[ 3329.191376]  ? shmem_fault+0x5ba/0x760
[ 3329.195271]  _raw_spin_lock+0x2f/0x40
[ 3329.199073]  ? shmem_fault+0x5ba/0x760
[ 3329.202963]  shmem_fault+0x5ba/0x760
[ 3329.206680]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 3329.211961]  ? shmem_file_setup_with_mnt+0x90/0x90
[ 3329.216894]  ? pmd_val+0x85/0x100
[ 3329.220350]  ? add_mm_counter_fast.part.0+0x40/0x40
[ 3329.225369]  __do_fault+0x111/0x480
[ 3329.228999]  __handle_mm_fault+0x2b0e/0x3f80
[ 3329.233413]  ? copy_page_range+0x2030/0x2030
[ 3329.237833]  ? count_memcg_event_mm+0x2b1/0x4d0
[ 3329.242513]  handle_mm_fault+0x1b5/0x690
[ 3329.246583]  __do_page_fault+0x62a/0xe90
[ 3329.250648]  ? vmalloc_fault+0x740/0x740
[ 3329.254715]  ? trace_hardirqs_off_caller+0x65/0x220
[ 3329.259736]  ? trace_hardirqs_on_caller+0x6a/0x220
[ 3329.264671]  ? page_fault+0x8/0x30
[ 3329.268219]  do_page_fault+0x71/0x57d
[ 3329.272023]  ? page_fault+0x8/0x30
[ 3329.275569]  page_fault+0x1e/0x30
[ 3329.279021] RIP: 0033:0x441b61
[ 3329.282217] Code: 8d 15 e3 c3 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6
[ 3329.301122] RSP: 002b:00007ffd233146a8 EFLAGS: 00010202
[ 3329.306490] RAX: 0000000020000100 RBX: 0000000000000000 RCX: 000000000000002f
[ 3329.313761] RDX: 0000000000000009 RSI: 0000000000760248 RDI: 0000000020000100
[ 3329.321033] RBP: 0000000000760228 R08: 0000000000760228 R09: ffffffffffffffff
[ 3329.328302] R10: 00007ffd23314770 R11: 0000000000000246 R12: 000000000075bfc8
[ 3329.335569] R13: 0000000000000006 R14: 0000000000760230 R15: 000000000075bfd4
[ 3329.342841] 
[ 3329.344465] Allocated by task 24169:
[ 3329.348185]  save_stack+0x45/0xd0
[ 3329.351644]  kasan_kmalloc+0xce/0xf0
[ 3329.355360]  kasan_slab_alloc+0xf/0x20
[ 3329.359251]  kmem_cache_alloc+0x12e/0x700
[ 3329.363398]  shmem_alloc_inode+0x1c/0x50
[ 3329.367460]  alloc_inode+0x64/0x190
[ 3329.371091]  new_inode_pseudo+0x19/0xf0
[ 3329.375063]  new_inode+0x1f/0x40
[ 3329.378428]  shmem_get_inode+0x84/0x780
[ 3329.382403]  __shmem_file_setup.part.0+0x1e2/0x2b0
[ 3329.387332]  shmem_zero_setup+0xe2/0x474
[ 3329.391402]  mmap_region+0x1364/0x1760
[ 3329.395292]  do_mmap+0x8e2/0x1080
[ 3329.398746]  vm_mmap_pgoff+0x1c5/0x230
[ 3329.402637]  ksys_mmap_pgoff+0xf7/0x630
[ 3329.406610]  __x64_sys_mmap+0xe9/0x1b0
[ 3329.410503]  do_syscall_64+0xfd/0x620
[ 3329.414304]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3329.419490] 
[ 3329.421116] Freed by task 9:
[ 3329.424144]  save_stack+0x45/0xd0
[ 3329.427601]  __kasan_slab_free+0x102/0x150
[ 3329.431837]  kasan_slab_free+0xe/0x10
[ 3329.435636]  kmem_cache_free+0x86/0x260
[ 3329.439607]  shmem_destroy_callback+0x6e/0xc0
[ 3329.444104]  rcu_process_callbacks+0xba0/0x1a30
[ 3329.448776]  __do_softirq+0x25c/0x921
[ 3329.452570] 
[ 3329.454205] The buggy address belongs to the object at ffff88807a948568
[ 3329.454205]  which belongs to the cache shmem_inode_cache(65:syz2) of size 1192
[ 3329.468267] The buggy address is located 416 bytes inside of
[ 3329.468267]  1192-byte region [ffff88807a948568, ffff88807a948a10)
[ 3329.480233] The buggy address belongs to the page:
[ 3329.485177] page:ffffea0001ea5200 count:1 mapcount:0 mapping:ffff8880927b6d80 index:0xffff88807a948ffd
[ 3329.494618] flags: 0xfffe0000000100(slab)
[ 3329.498778] raw: 00fffe0000000100 ffffea000027ee08 ffffea00018d9048 ffff8880927b6d80
[ 3329.506665] raw: ffff88807a948ffd ffff88807a948040 0000000100000002 ffff888055e4c900
[ 3329.514543] page dumped because: kasan: bad access detected
[ 3329.520257] page->mem_cgroup:ffff888055e4c900
[ 3329.524752] 
[ 3329.526374] Memory state around the buggy address:
[ 3329.531306]  ffff88807a948600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3329.538668]  ffff88807a948680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3329.546030] >ffff88807a948700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3329.553381]                       ^
[ 3329.557010]  ffff88807a948780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3329.564369]  ffff88807a948800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3329.571728] ==================================================================
[ 3329.579083] Disabling lock debugging due to kernel taint
[ 3329.584532] Kernel panic - not syncing: panic_on_warn set ...
[ 3329.584532] 
[ 3329.591907] CPU: 1 PID: 24168 Comm: syz-executor.2 Tainted: G    B             4.19.91-syzkaller #0
[ 3329.601087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3329.610454] Call Trace:
[ 3329.613054]  dump_stack+0x197/0x210
[ 3329.616698]  ? __lock_acquire+0x34ac/0x49c0
[ 3329.621022]  panic+0x26a/0x50e
[ 3329.624216]  ? __warn_printk+0xf3/0xf3
[ 3329.628116]  ? lock_downgrade+0x880/0x880
[ 3329.632268]  ? trace_hardirqs_off+0x62/0x220
[ 3329.636701]  ? trace_hardirqs_off+0x59/0x220
[ 3329.641115]  ? __lock_acquire+0x34ac/0x49c0
[ 3329.645444]  kasan_end_report+0x47/0x4f
[ 3329.649424]  kasan_report.cold+0xa9/0x2ba
[ 3329.653580]  __asan_report_load8_noabort+0x14/0x20
[ 3329.658520]  __lock_acquire+0x34ac/0x49c0
[ 3329.662717]  ? finish_task_switch+0x146/0x7c0
[ 3329.667225]  ? _raw_spin_unlock_irq+0x28/0x90
[ 3329.671732]  ? finish_task_switch+0x146/0x7c0
[ 3329.676236]  ? mark_held_locks+0x100/0x100
[ 3329.680477]  ? trace_hardirqs_on+0x67/0x220
[ 3329.684802]  ? _raw_spin_unlock_irq+0x5e/0x90
[ 3329.689305]  ? finish_task_switch+0x146/0x7c0
[ 3329.693804]  ? finish_task_switch+0x118/0x7c0
[ 3329.698303]  ? switch_mm_irqs_off+0x2de/0x1360
[ 3329.702891]  ? __schedule+0x86e/0x1dc0
[ 3329.706791]  lock_acquire+0x16f/0x3f0
[ 3329.710597]  ? shmem_fault+0x5ba/0x760
[ 3329.714490]  _raw_spin_lock+0x2f/0x40
[ 3329.718294]  ? shmem_fault+0x5ba/0x760
[ 3329.722182]  shmem_fault+0x5ba/0x760
[ 3329.725899]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 3329.731178]  ? shmem_file_setup_with_mnt+0x90/0x90
[ 3329.736113]  ? pmd_val+0x85/0x100
[ 3329.739566]  ? add_mm_counter_fast.part.0+0x40/0x40
[ 3329.744582]  __do_fault+0x111/0x480
[ 3329.748215]  __handle_mm_fault+0x2b0e/0x3f80
[ 3329.752630]  ? copy_page_range+0x2030/0x2030
[ 3329.757051]  ? count_memcg_event_mm+0x2b1/0x4d0
[ 3329.761723]  handle_mm_fault+0x1b5/0x690
[ 3329.765789]  __do_page_fault+0x62a/0xe90
[ 3329.769858]  ? vmalloc_fault+0x740/0x740
[ 3329.773953]  ? trace_hardirqs_off_caller+0x65/0x220
[ 3329.778974]  ? trace_hardirqs_on_caller+0x6a/0x220
[ 3329.783928]  ? page_fault+0x8/0x30
[ 3329.787483]  do_page_fault+0x71/0x57d
[ 3329.791294]  ? page_fault+0x8/0x30
[ 3329.794838]  page_fault+0x1e/0x30
[ 3329.798289] RIP: 0033:0x441b61
[ 3329.801487] Code: 8d 15 e3 c3 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6
[ 3329.820399] RSP: 002b:00007ffd233146a8 EFLAGS: 00010202
[ 3329.825773] RAX: 0000000020000100 RBX: 0000000000000000 RCX: 000000000000002f
[ 3329.833046] RDX: 0000000000000009 RSI: 0000000000760248 RDI: 0000000020000100
[ 3329.840319] RBP: 0000000000760228 R08: 0000000000760228 R09: ffffffffffffffff
[ 3329.847588] R10: 00007ffd23314770 R11: 0000000000000246 R12: 000000000075bfc8
[ 3329.854860] R13: 0000000000000006 R14: 0000000000760230 R15: 000000000075bfd4
[ 3329.863490] Kernel Offset: disabled
[ 3329.867129] Rebooting in 86400 seconds..