x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(`qH\x00', 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)

10:54:57 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x24, 0x28, 0xd27}, 0x24}}, 0x0)

10:54:57 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x0, 0x1, "c2"}, 0x9)

10:54:57 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x6b, &(0x7f00000008c0), 0x8)

10:54:57 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x3, 0x0, 0x0)

10:55:00 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:00 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8201}}], 0x20}, 0x0)

10:55:00 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

10:55:00 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x1ffe00, @private2}], 0x1c)

10:55:00 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916", 0x13}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001d80)={0x0, 0x35, 0x0}, 0x0)

10:55:00 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:00 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x60, 0x0, &(0x7f0000000040))

10:55:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:00 executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d2, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0xfffffffffffff000, 0x2, 0x3, 0x6000, 0x0, [0x0, 0x0, 0x0, 0x7]})
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0)

10:55:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:03 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:03 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x808400, &(0x7f0000001780)={[{@fat=@sys_immutable='sys_immutable'}, {@nodots='nodots'}]})

10:55:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:03 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x1ffe00, @private2}], 0x1c)

10:55:03 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916fb", 0x14}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x35, 0x0}, 0x0)

10:55:03 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:03 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916fb", 0x14}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x35, 0x0}, 0x0)

10:55:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:03 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

10:55:03 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916fb", 0x14}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x35, 0x0}, 0x0)

10:55:03 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

10:55:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:06 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916fb", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)

10:55:06 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

10:55:06 executing program 2:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:06 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa114271", 0x32}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:06 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:06 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x1ffe00, @private2}], 0x1c)

10:55:06 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916fb", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)

10:55:06 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

10:55:06 executing program 2:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:06 executing program 2:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:06 executing program 4:
copy_file_range(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0x0)

10:55:06 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916fb", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)

10:55:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:06 executing program 4:
copy_file_range(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0x0)

10:55:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:09 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa114271", 0x32}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:09 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
socket(0x1, 0x3, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfddf)

10:55:09 executing program 4:
copy_file_range(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0x0)

10:55:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:09 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:09 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x1ffe00, @private2}], 0x1c)

10:55:09 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:09 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

10:55:09 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x1ffe00, @private2}], 0x1c)

10:55:09 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:09 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

10:55:10 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
socket(0x1, 0x3, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfddf)

10:55:12 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa114271", 0x32}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:12 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x1ffe00, @private2}], 0x1c)

10:55:12 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:12 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

10:55:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:12 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0)

10:55:12 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

[ 2860.297082][T23069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2860.319202][T23073] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
10:55:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:12 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x1ffe00, @private2}], 0x1c)

10:55:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0)

[ 2860.487552][T23084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
10:55:13 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

10:55:15 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0", 0x4b}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:15 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x1ffe00, @private2}], 0x1c)

10:55:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0)

10:55:15 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080), r0, 0x0, 0x0, 0x0)

10:55:15 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

10:55:15 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x1ffe00, @private2}], 0x1c)

[ 2863.399230][T23104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
10:55:16 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0)

10:55:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

10:55:16 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0)

[ 2863.654028][T23117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
10:55:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

10:55:18 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0)

10:55:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:18 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0)

10:55:18 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0", 0x4b}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:18 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:19 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0x0)

10:55:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:19 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0)

10:55:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)

10:55:19 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0", 0x4b}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:19 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0x0)

10:55:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:19 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0)

10:55:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)

10:55:19 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0x0)

10:55:19 executing program 1:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:19 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:19 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000), 0x0)

10:55:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)

10:55:19 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc074510c, 0x0)

10:55:19 executing program 1:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:22 executing program 1:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:22 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='xino=off'])

10:55:22 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000), 0x0)

10:55:22 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3", 0x58}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:22 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

[ 2869.794497][T23201] overlayfs: missing 'lowerdir'
10:55:22 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000), 0x0)

[ 2869.833175][T23201] overlayfs: missing 'lowerdir'
10:55:22 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

10:55:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:22 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c)

10:55:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:22 executing program 4:

10:55:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3", 0x58}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:25 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:25 executing program 4:

10:55:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:25 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:25 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c)

10:55:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:25 executing program 4:

10:55:25 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0)

10:55:25 executing program 4:

10:55:25 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:28 executing program 4:

10:55:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0)

10:55:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, 0x0, 0x0)

10:55:28 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:28 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3", 0x58}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:28 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c)

10:55:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0)

10:55:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, 0x0, 0x0)

10:55:28 executing program 4:

10:55:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, 0x0, 0x0)

10:55:28 executing program 4:

10:55:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x28}}, 0x0)

10:55:28 executing program 4:

10:55:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

10:55:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x28}}, 0x0)

10:55:29 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

10:55:31 executing program 4:

10:55:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x28}}, 0x0)

10:55:31 executing program 3:

10:55:31 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d73369065", 0x5e}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:31 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:31 executing program 4:

10:55:31 executing program 3:

10:55:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

10:55:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @multicast1}}]}, 0x30}}, 0x0)

10:55:31 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d73369065", 0x5e}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x2c}}, 0x0)

10:55:31 executing program 4:

10:55:31 executing program 3:

10:55:31 executing program 2:

10:55:31 executing program 4:

10:55:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x2c}}, 0x0)

10:55:32 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a", 0x11}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:32 executing program 3:

10:55:32 executing program 2:

10:55:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x2c}}, 0x0)

10:55:32 executing program 4:

[ 2880.052692][T23345] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:34 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d73369065", 0x5e}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:34 executing program 2:

10:55:34 executing program 3:

10:55:34 executing program 4:

10:55:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0)

10:55:34 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a", 0x11}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:34 executing program 3:

10:55:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0)

10:55:34 executing program 4:

10:55:34 executing program 2:

10:55:34 executing program 3:

[ 2882.428182][T23361] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:35 executing program 4:

10:55:37 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f", 0x61}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0)

10:55:37 executing program 3:

10:55:37 executing program 2:

10:55:37 executing program 4:

10:55:37 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a", 0x11}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0)

10:55:38 executing program 3:

10:55:38 executing program 4:

10:55:38 executing program 2:

[ 2885.494684][T23381] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:38 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f", 0x61}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0)

10:55:38 executing program 2:

10:55:38 executing program 4:

10:55:38 executing program 3:

10:55:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0)

10:55:38 executing program 4:

10:55:38 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a800000002843089100", 0x1a}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:38 executing program 2:

10:55:38 executing program 3:

10:55:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000"], 0x2c}}, 0x0)

10:55:38 executing program 4:

[ 2886.402779][T23414] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:41 executing program 2:

10:55:41 executing program 3:

10:55:41 executing program 4:

10:55:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000"], 0x2c}}, 0x0)

10:55:41 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f", 0x61}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:41 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a800000002843089100", 0x1a}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:41 executing program 3:

10:55:41 executing program 4:

10:55:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000"], 0x2c}}, 0x0)

10:55:41 executing program 2:

[ 2888.781229][T23427] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:41 executing program 4:

10:55:41 executing program 3:

10:55:41 executing program 2:

10:55:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000"], 0x2c}}, 0x0)

10:55:41 executing program 4:

10:55:41 executing program 3:

10:55:44 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f5466", 0x63}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000"], 0x2c}}, 0x0)

10:55:44 executing program 2:

10:55:44 executing program 3:

10:55:44 executing program 4:

10:55:44 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a800000002843089100", 0x1a}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:44 executing program 2:

10:55:44 executing program 3:

10:55:44 executing program 4:

10:55:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000"], 0x2c}}, 0x0)

[ 2891.888698][T23460] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:44 executing program 3:

10:55:44 executing program 2:

10:55:47 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f5466", 0x63}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:47 executing program 4:

10:55:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d0000000000000000"], 0x2c}}, 0x0)

10:55:47 executing program 3:

10:55:47 executing program 2:

10:55:47 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00", 0x1e}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:47 executing program 3:

10:55:47 executing program 4:

10:55:47 executing program 2:

10:55:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d0000000000000000"], 0x2c}}, 0x0)

[ 2894.975600][T23481] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:47 executing program 3:

10:55:47 executing program 2:

10:55:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f5466", 0x63}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:50 executing program 4:

10:55:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d0000000000000000"], 0x2c}}, 0x0)

10:55:50 executing program 3:

10:55:50 executing program 2:

10:55:50 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00", 0x1e}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:50 executing program 4:

10:55:50 executing program 2:

10:55:50 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0xffa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000980)={'syzkaller1\x00', @link_local})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c00)='memory.current\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0xb, 0x2, 0x0, &(0x7f00000000c0))
write$cgroup_freezer_state(r0, &(0x7f0000000380)='FROZEN\x00', 0x77)
socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

10:55:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

[ 2898.053453][T23506] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:50 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)

10:55:50 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x3e110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c000000120081f87059ae08060c04000a026b04000103fe0503000f00000100001b4e0000a6bd7c493872f750375ed08a562ad6e74703c48f93b82affffffff461eb886a5e54e8f566da388", 0x4c}], 0x1}, 0x0)

10:55:53 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x3, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:53 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)

10:55:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)

10:55:53 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00", 0x1e}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:53 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0xffa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000980)={'syzkaller1\x00', @link_local})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c00)='memory.current\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0xb, 0x2, 0x0, &(0x7f00000000c0))
write$cgroup_freezer_state(r0, &(0x7f0000000380)='FROZEN\x00', 0x77)
socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

10:55:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

[ 2901.171123][T23561] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:53 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)

10:55:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)

10:55:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:54 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)

10:55:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:56 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x3, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:56 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)

10:55:56 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000000800000065000000000000000f000000000000009500000000000000bd3733777963a95950dbd61fb2ee19db89d11ed591b70fa0d3189cc03f54d5a7f8d154c664f9ecf587448faeebe3f5604ddec5f8718339dd1364b0589ec706688dab643df3c7b88e3c838cf839b97e44142baec3ab37b61365410393bf294f71f69628e1fbfbde627eeda46d7c4af3ab8f8a5ccbaf01c569f9825194cc3fb7451f48d739d9a663f5ce615d90ebd2f5c8f2ec6855d78779aba46c5e8798df149a3c6b2636df407a6a9f82b8b5d6fdbb93a4f20c0f798a1824d957ee646a28cb59da4bbe8cba65286a548af018707a6da143f8398dcddc7bde39e65851050964ad72651decd21fbc17be4027de76675abaabbfbe140e502a496b0b3ce0f3134e3fa7e132e1000132e4890440f6eba16bf287cd6849df33bf006de47127b963b2f8c2ad8c104ae463eec0f81407241617d7c740a1ce22a8b369782967543c26c7a5f758eb61edbe547d9f1eebc13dac5f90650ebadfc7c7abfd0c443e1b04fb24ae976b2274ae27"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r0, 0x0, 0x0, 0x0}, 0x30)

10:55:56 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e000800", 0x20}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:56 executing program 3:
socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffeca, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x942614271ecad7f9)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)

10:55:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:56 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)=@vsock, 0x80, 0x0, 0x0, 0x0, 0x1f8}, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="ee002e39566f18963f0ea3", 0xb}, {0x0}], 0x2}, 0x40000)
sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1, 0x0, 0x0, 0x1100}, 0x6d70)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x1, 0x70, 0x8, 0xff, 0x7, 0xff, 0x0, 0xffffffff, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_config_ext={0x0, 0xffffffff}, 0x800, 0x8, 0x6, 0x5, 0xffffffff, 0x0, 0x4})
socketpair(0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(0x0, r3, 0x3, 0xffffffffffffffff, 0x0)

10:55:56 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

[ 2904.282584][T23601] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:55:56 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252962cb18f6e2e2aba000000012e8b3836005404b0e0301a4ce875f2e3ff5f003ee340b767b6db2d7e8140554a000101013c585bf5ff1b0816f3f6db1c000100000000000000ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000024000105000000000000000000000012", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a000100636f64656c0000001c0002"], 0x54}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0)

10:55:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

[ 2904.499618][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2904.537797][T23610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
10:55:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)

10:55:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:55:59 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

10:55:59 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e000800", 0x20}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:55:59 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x3, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:55:59 executing program 3:
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

10:55:59 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

10:55:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)

10:55:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

[ 2907.358249][T23634] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:00 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

10:56:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)

10:56:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:56:00 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

10:56:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:56:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:00 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e000800", 0x20}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 2908.197068][T23664] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:02 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x3, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:02 executing program 4:
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

10:56:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:56:02 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

10:56:02 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:02 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008", 0x21}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:56:03 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:03 executing program 4:
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

[ 2910.448024][T23676] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:03 executing program 4:
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

10:56:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:56:03 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

10:56:05 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x3, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:05 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)

10:56:05 executing program 2:
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:56:05 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

10:56:05 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008", 0x21}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:06 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00', {0x8001}})

10:56:06 executing program 2:
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="fd7d00000000000000001b"], 0x2c}}, 0x0)

10:56:06 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c020000250007d002b44a051e00000f01000000", @ANYRES32=r1], 0x2}}, 0x0)
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))

[ 2913.581622][T23711] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:06 executing program 2:
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:06 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0)

10:56:09 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x3, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:09 executing program 1:
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$9p(r0, &(0x7f0000000180)="ce", 0x1)
close(r0)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x444582, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = gettid()
tkill(r1, 0x13)

10:56:09 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c020000250007d002b44a051e00000f01000000", @ANYRES32=r1], 0x2}}, 0x0)
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))

10:56:09 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0)

10:56:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:09 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008", 0x21}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:09 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0)

10:56:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

[ 2916.624974][T23743] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:09 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c020000250007d002b44a051e00000f01000000", @ANYRES32=r1], 0x2}}, 0x0)
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))

10:56:09 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00'})

10:56:09 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8ba5faa363ef8376cf9582a2a15affc5390cbf"})

10:56:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:12 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x3, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:12 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c020000250007d002b44a051e00000f01000000", @ANYRES32=r1], 0x2}}, 0x0)
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))

10:56:12 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00'})

10:56:12 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8ba5faa363ef8376cf9582a2a15affc5390cbf"})

10:56:12 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:12 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

10:56:12 executing program 3:
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0x7)
close(r0)
openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x444582, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = gettid()
tkill(r1, 0x13)

10:56:12 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00'})

10:56:12 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:12 executing program 1:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x0)

10:56:12 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCXONC(r0, 0x5450, 0x0)

10:56:12 executing program 1:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f0000000280)="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", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00')

10:56:15 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x3, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:15 executing program 4:

10:56:15 executing program 3:

10:56:15 executing program 1:

10:56:15 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

10:56:15 executing program 3:

10:56:15 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x0, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:15 executing program 4:

10:56:15 executing program 1:

10:56:15 executing program 3:

10:56:15 executing program 4:

10:56:18 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x3, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x0, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:18 executing program 1:

10:56:18 executing program 3:

10:56:18 executing program 4:

10:56:18 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

10:56:18 executing program 3:

10:56:18 executing program 1:

10:56:18 executing program 4:

10:56:18 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x0, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:18 executing program 3:

10:56:18 executing program 1:

10:56:21 executing program 3:

10:56:21 executing program 4:

10:56:21 executing program 1:

10:56:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:21 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:21 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:21 executing program 1:

10:56:21 executing program 4:

10:56:21 executing program 3:

10:56:21 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:21 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:21 executing program 1:

10:56:21 executing program 3:

10:56:21 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:21 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:21 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)

10:56:21 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:21 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:21 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:22 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:22 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:22 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:22 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:22 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

[ 2929.842090][T23896] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:22 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)

10:56:22 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:22 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:23 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:23 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:23 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:23 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:23 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
fanotify_init(0x8, 0x0)

10:56:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

[ 2930.833713][T23929] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2931.104673][   T28] audit: type=1800 audit(1600167383.614:124): pid=23919 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17295 res=0 errno=0
[ 2931.271831][T23919] syz-executor.1 (23919) used greatest stack depth: 23096 bytes left
10:56:25 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:25 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
fanotify_init(0x8, 0x0)

10:56:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)

10:56:25 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:25 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
fanotify_init(0x8, 0x0)

10:56:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

[ 2933.136753][T23956] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:25 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

10:56:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:25 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)

10:56:25 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:26 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)

10:56:28 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:28 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)

10:56:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:28 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:28 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)

10:56:28 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, 0x0, 0x0)

10:56:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:28 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

[ 2936.261661][T23992] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:28 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x0)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:29 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, 0x0, 0x0)

10:56:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:29 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:29 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:29 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, 0x0, 0x0)

10:56:29 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:29 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:29 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:29 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000140)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40086602, &(0x7f00000000c0)=ANY=[])

[ 2937.254895][   T28] audit: type=1804 audit(1600167389.764:125): pid=24028 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir906490195/syzkaller.6q9q2x/2968/bus/file0" dev="sda1" ino=17329 res=1 errno=0
10:56:31 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x0)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:31 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:31 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:31 executing program 2:

10:56:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)

10:56:31 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:32 executing program 2:

10:56:32 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

[ 2939.549257][T24052] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:32 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:32 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x0)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:32 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$KDSKBENT(r1, 0x560a, &(0x7f0000000180)={0x20, 0x1, 0x6})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x560a, 0x0)

10:56:32 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:32 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:32 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)

10:56:32 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:32 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x38}})

10:56:32 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:32 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:32 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:32 executing program 2:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='h'])

10:56:32 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

[ 2940.399097][T24092] tmpfs: Unknown parameter 'h'
[ 2940.444538][T24092] tmpfs: Unknown parameter 'h'
[ 2940.482960][T24095] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:35 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:35 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:35 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

10:56:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)

10:56:35 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

[ 2942.861681][T24109] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:35 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

10:56:35 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:35 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

[ 2943.080085][   T28] audit: type=1800 audit(1600167395.595:126): pid=24111 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16754 res=0 errno=0
10:56:35 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:38 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
unshare(0x0)

10:56:38 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

10:56:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

10:56:38 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:38 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
close(0xffffffffffffffff)

10:56:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fanotify_init(0x8, 0x0)

[ 2945.950952][T24143] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:38 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
close(0xffffffffffffffff)

10:56:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
unshare(0x0)

10:56:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:41 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:41 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
fanotify_init(0x8, 0x0)

10:56:41 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
close(0xffffffffffffffff)

10:56:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
unshare(0x0)

10:56:41 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:41 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
fanotify_init(0x8, 0x0)

[ 2949.028900][T24176] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:41 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:56:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:41 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
fanotify_init(0x8, 0x0)

10:56:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:44 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:56:44 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x0, 0x0)

10:56:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:44 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:44 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

[ 2952.111463][T24207] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:44 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x0, 0x0)

10:56:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r0)

10:56:44 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:44 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fanotify_init(0x0, 0x0)

10:56:47 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:47 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r0)

10:56:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:47 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$KDSKBENT(r1, 0x560a, &(0x7f0000000180)={0x0, 0x1})
dup(0xffffffffffffffff)

10:56:47 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:47 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:47 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r0)

10:56:47 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

[ 2955.251777][T24240] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:47 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$KDSKBENT(r1, 0x4b4d, &(0x7f0000000180))

10:56:47 executing program 2:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:56:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:50 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$KDSKBENT(r1, 0x4b4d, &(0x7f0000000180))

10:56:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:50 executing program 2:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:56:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:50 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300), 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:50 executing program 2:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:56:50 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

[ 2958.406776][T24276] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:51 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

10:56:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300), 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
ftruncate(0xffffffffffffffff, 0x208200)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:53 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

10:56:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300), 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
ftruncate(0xffffffffffffffff, 0x208200)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:53 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:53 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:56:53 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
ftruncate(0xffffffffffffffff, 0x208200)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{0x0}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:54 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

[ 2961.508428][T24309] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{0x0}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:56:54 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:56:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:56:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{0x0}], 0x1, 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:56 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:56:56 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:56:56 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:56:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:56 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:56:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:57 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

[ 2964.632873][T24351] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'.
10:56:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:57 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:56:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:56:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:56:57 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:57:00 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:57:00 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)

10:57:00 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:57:00 executing program 0:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0)

10:57:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)

10:57:00 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:57:00 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
preadv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)

[ 2967.829221][   T28] audit: type=1800 audit(1600167420.347:127): pid=24383 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17411 res=0 errno=0
10:57:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:00 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

[ 2968.410338][   T28] audit: type=1800 audit(1600167420.927:128): pid=24404 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16304 res=0 errno=0
10:57:03 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:57:03 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r1)

10:57:03 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0x1d6})

10:57:03 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:03 executing program 0:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0)

10:57:03 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

10:57:03 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006)

10:57:03 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:03 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

10:57:03 executing program 1:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:03 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
socket$inet(0x2, 0x0, 0x0)

10:57:06 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:57:06 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(r2)

10:57:06 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e2", 0x1f}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

10:57:06 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:06 executing program 1:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:06 executing program 0:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0)

10:57:06 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r2)

[ 2973.873173][T24462] ptrace attach of "/root/syz-executor.4"[24460] was attempted by "/root/syz-executor.4"[24462]
10:57:06 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:06 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33}})

10:57:06 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r2)

10:57:06 executing program 1:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:06 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:09 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r2)

10:57:09 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:09 executing program 4:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00')
r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0)
ftruncate(r3, 0xa89e)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
r5 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x145042, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000004})
sendfile(r1, r1, 0x0, 0x7fffffff)

10:57:09 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:09 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:57:09 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

10:57:09 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:09 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(0xffffffffffffffff)

10:57:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000b00)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}], 0x10}}], 0x1, 0x0)

10:57:09 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:09 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:09 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(0xffffffffffffffff)

10:57:09 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x3b)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
writev(r0, &(0x7f0000001380)=[{&(0x7f0000000200)="8f", 0x1}], 0x1)

10:57:09 executing program 3:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:10 executing program 4:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0)

10:57:10 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
close(0xffffffffffffffff)

10:57:12 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="10040004f200", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

10:57:12 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, 0x0)
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:57:12 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:12 executing program 3:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:12 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

10:57:12 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x100000400000003a)
r1 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x0, 0x0}, 0x30)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
writev(r0, &(0x7f0000001380)=[{&(0x7f0000000200)="8f202adb7a5a8de9df00"/24, 0x187}], 0x1)

10:57:12 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:12 executing program 3:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:12 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="10040004f200", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

10:57:12 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x100000400000003a)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
writev(r0, &(0x7f0000001380)=[{&(0x7f0000000200)="8f202adb", 0x4}], 0x1)

10:57:12 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:12 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="10040004f200", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

10:57:12 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:15 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, 0x0)
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:57:15 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:15 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:15 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="10040004f200", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

10:57:15 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:15 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

10:57:15 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:15 executing program 2:
socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="10040004f200", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

10:57:15 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:15 executing program 2:
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="10040004f200", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

10:57:15 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:15 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:18 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, 0x0)
ptrace$cont(0x1f, r2, 0x0, 0x0)

10:57:18 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:18 executing program 2:
syz_emit_ethernet(0x0, 0x0, 0x0)

10:57:18 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:18 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:18 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

10:57:18 executing program 2:
syz_emit_ethernet(0x0, 0x0, 0x0)

10:57:18 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:19 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:19 executing program 2:
syz_emit_ethernet(0x0, 0x0, 0x0)

10:57:19 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:19 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:21 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0)

10:57:21 executing program 2:
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="10040004f200", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

10:57:21 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:21 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:21 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:21 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

10:57:21 executing program 2:
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="10040004f200", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

10:57:21 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:22 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:22 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:22 executing program 2:
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="10040004f200", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

10:57:24 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:24 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:24 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0)

10:57:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:24 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000000001000000000b0000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000000500110006"], 0x28}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000800", 0x22}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

10:57:24 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x200000a5}])

10:57:25 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:25 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x200000a5}])

10:57:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:25 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:25 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:25 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x200000a5}])

10:57:25 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:25 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:28 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0)

10:57:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:28 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(0x0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x200000a5}])

10:57:28 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x34e, 0x1000000, 0x0)

10:57:28 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:28 executing program 0:
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b0e000000ecffffff0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1800120008000100707070000c00020008000100", @ANYRES32=r1], 0x40}}, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:57:28 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, 0x0, 0x0, 0x1000000, 0x0)

10:57:28 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0)

10:57:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:28 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(0x0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x200000a5}])

10:57:28 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:28 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, 0x0, 0x0, 0x1000000, 0x0)

[ 2995.995664][   T28] audit: type=1800 audit(1600167448.519:129): pid=24761 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17497 res=0 errno=0
10:57:31 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, 0x0, 0x0, 0x0)

10:57:31 executing program 0:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00')
r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0)
ftruncate(r3, 0xa89e)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
r5 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x145042, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001})
sendfile(r1, r1, 0x0, 0x7fffffff)

10:57:31 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, 0x0, 0x0, 0x1000000, 0x0)

10:57:31 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(0x0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x200000a5}])

10:57:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:31 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000007c0)=[{0x0, 0x0, 0x7fff}, {&(0x7f0000000300)='1', 0x1, 0x10}, {&(0x7f0000000500)="5ee94d5c5e54517a09cab017b78e1d", 0xf}], 0x0, &(0x7f00000008c0)={[{@utf8='utf8=1'}]})

10:57:31 executing program 4:
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:31 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0)

[ 2998.864210][T24804] FAT-fs (loop0): invalid media value (0x00)
[ 2998.870696][T24804] FAT-fs (loop0): Can't find a valid FAT filesystem
10:57:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000007c0)=[{0x0, 0x0, 0x7fff}, {&(0x7f0000000300)='1', 0x1, 0x10}, {&(0x7f0000000500)="5ee94d5c5e54517a09cab017b78e1d", 0xf}], 0x0, &(0x7f00000008c0)={[{@utf8='utf8=1'}]})

10:57:31 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0)

[ 2999.289399][T24823] FAT-fs (loop0): invalid media value (0x00)
[ 2999.299311][T24823] FAT-fs (loop0): Can't find a valid FAT filesystem
10:57:34 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, 0x0, 0x0, 0x0)

10:57:34 executing program 4:
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:34 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:34 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0)

10:57:34 executing program 0:
inotify_init1(0x400)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4044874}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
r1 = dup(0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MPATH(r1, 0x0, 0x24008801)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x19, 0x0, "00000000000000000000000000000000000005000000000000008000000000000000000000000000439a00000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x0, 0xf000}, @window, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x7fffffdf}, 0x14)

10:57:34 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:34 executing program 3:
r0 = socket(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0)

10:57:34 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:34 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

[ 3001.955368][   T28] audit: type=1800 audit(1600167454.479:130): pid=24840 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17538 res=0 errno=0
10:57:34 executing program 3:
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))

10:57:34 executing program 4:
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:34 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

[ 3002.328462][   T28] audit: type=1800 audit(1600167454.849:131): pid=24862 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17522 res=0 errno=0
10:57:37 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="67e037f81ced25cc0220384896f1ac1dea61a7a765760036f300000000007d7cff30f363089c2840925900760000fa11427140722ddea3218fe55deb78d067d4329e000000d68dc712faa0fa3c0d0000000d4cea4e7793f3419d733690651edd8f546605", 0x64}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, 0x0, 0x0, 0x0)

10:57:37 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:37 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:37 executing program 4:
open(0x0, 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:37 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:37 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:37 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:37 executing program 4:
open(0x0, 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:37 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:37 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:40 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:40 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:40 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:40 executing program 4:
open(0x0, 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:40 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:40 executing program 5:

10:57:40 executing program 5:

10:57:40 executing program 3:
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4)

10:57:40 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:40 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:40 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:40 executing program 3:
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4)

10:57:41 executing program 5:

10:57:41 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:41 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:41 executing program 3:
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4)

10:57:41 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0xffffffffffffffff, 0x0)

10:57:41 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:41 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:41 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:41 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:41 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')

10:57:41 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(0x0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x200000a5}])

10:57:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:41 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:41 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(0x0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x200000a5}])

10:57:42 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:42 executing program 0:
msgsnd(0x0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(0x0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:42 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r1, &(0x7f0000000700)=[{&(0x7f0000000680)="ed", 0x1}], 0x1, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10080003)

10:57:42 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(0x0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x200000a5}])

10:57:42 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:42 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:42 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:42 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=a'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:42 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

10:57:42 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

[ 3010.387150][T25051] tmpfs: Bad value for 'huge'
10:57:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3010.561309][   T28] audit: type=1800 audit(1600167463.090:132): pid=25051 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17576 res=0 errno=0
10:57:43 executing program 0:
msgsnd(0x0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(0x0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:43 executing program 3:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4)

10:57:43 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=a'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:43 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:43 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3011.069615][T25076] tmpfs: Bad value for 'huge'
10:57:43 executing program 3:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4)

10:57:43 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

[ 3011.226260][   T28] audit: type=1800 audit(1600167463.750:133): pid=25076 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17588 res=0 errno=0
10:57:43 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=a'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:43 executing program 3:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4)

10:57:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:44 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(r0, 0x0, 0x0)

[ 3011.682635][T25105] tmpfs: Bad value for 'huge'
10:57:44 executing program 0:
msgsnd(0x0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(0x0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:44 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:44 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(r0, 0x0, 0x0)

10:57:44 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alwa'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:44 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:44 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)

10:57:44 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_DESTROY(r0, 0x0, 0x0)

10:57:44 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

[ 3012.206153][T25129] tmpfs: Bad value for 'huge'
10:57:45 executing program 3:
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@func_proto, @int, @typedef, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x6a}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

10:57:45 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:45 executing program 3:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082404009e40000108030109023f000101000000090400000342ba0100052406000005240000000d240f010000000000000000000424130009058202f7000000000905030234"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x2, "fec4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3012.780766][T25157] ptrace attach of "/root/syz-executor.3"[25155] was attempted by "/root/syz-executor.3"[25157]
[ 3012.849815][   T28] audit: type=1800 audit(1600167465.370:134): pid=25129 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17566 res=0 errno=0
[ 3012.881507][T25129] syz-executor.1 (25129) used greatest stack depth: 22392 bytes left
10:57:45 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:45 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alwa'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)

10:57:45 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:45 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

[ 3013.138491][T25172] tmpfs: Bad value for 'huge'
[ 3013.180398][T22030] usb 4-1: new high-speed USB device number 2 using dummy_hcd
10:57:45 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alwa'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

[ 3013.237950][   T28] audit: type=1800 audit(1600167465.760:135): pid=25172 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17539 res=0 errno=0
10:57:45 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

[ 3013.430623][T22030] usb 4-1: Using ep0 maxpacket: 8
10:57:46 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

[ 3013.529033][T25186] tmpfs: Bad value for 'huge'
[ 3013.551783][T22030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247
[ 3013.596863][T22030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 52
[ 3013.619580][T22030] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
10:57:46 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alway'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

[ 3013.700527][   T28] audit: type=1800 audit(1600167466.230:136): pid=25189 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16516 res=0 errno=0
10:57:46 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

[ 3013.801037][T22030] usb 4-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40
[ 3013.820278][T22030] usb 4-1: New USB device strings: Mfr=1, Product=8, SerialNumber=3
[ 3013.828323][T22030] usb 4-1: Product: syz
[ 3013.861227][T22030] usb 4-1: Manufacturer: syz
[ 3013.865937][T22030] usb 4-1: SerialNumber: syz
10:57:46 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

[ 3013.937624][T22030] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 3014.020803][T25199] tmpfs: Bad value for 'huge'
[ 3014.402683][   T28] audit: type=1800 audit(1600167466.930:137): pid=25199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16580 res=0 errno=0
10:57:48 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x93, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xafs\xcb7\xf9\xae\x82\xe4\xc0\xa5veMin\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4l\x94\xa1\xdb\x8d9\x87\xdf #W\x10\x17\xae\xa3iTY\xaf\x96\xee\xfb\x0ef\x00\xb6\xeeU\x95\x8d\xde\x9dS\xbb\x92\x1f\x1dS\xb5\xc2Z\xf6\v>t\xc9H1\x8f4\xefl\x10\x0e\x92\xad@m\xd3\x84\xd5\xe8Oo\xc7\x81X\x1f}\xc9h\xd4\xb1a\xef.bK\x0e\x9a\xfe\x99\t\xfa\xbd8\x06+\x02\xa1\xec09\xfb\x92Y\xad\xed\xf5\x88x\x95\xf3HU\x84r\xa7\x16\xbf\xe0\xb5\xdd+*\xcb$f]\xb3\xdc .\a\xad)\xf90\x1b\x1b9\xae\b\xa1 \xe7\xd8\x9exS\xe6\xbf\xe3P\xe5\x7f\xc1\x93\x8f\x04\x81q\t5[\xca\xfc\x94\x82\xde\x00\xc1:\xbd{98\x9e\xaa\xc3&\x8a\xbe\xf2r)\x01\x1a#bQY\xe1\xfb\x88V\xad\xca\xbeS\xcc\xaa\x01\x00\x00\x00\x00\x00\x00\x00.\n\xbb\xd33.=\xdd\xaa\xa8\xa0\fV\xb8\x15\xa68\x9e\x1f\xbdW\r\x1cV\x14\x12\xe0\x86mN.\xfe\x8e\xd4\xd3xM\xe1P\xceH:\xdc\x06\xfckg\x95\x9dO\v\xc7\a\x92\n$\x82\x00\x00\x00\x00\x14\x90\xc7\x14\xd9l\x02\xad\b\xb6\x03<pj\x1c\v\xfe\xa4\xa8\x10\xb3\vOX\x10%\xeb\xdbf', 0x0)
ftruncate(r1, 0x40003)
sendfile(r0, r1, 0x0, 0x2008000fffffffb)

10:57:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)

10:57:48 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:48 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:48 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alway'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:48 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

[ 3015.883611][T22030] usb 4-1: USB disconnect, device number 2
10:57:48 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000))
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

[ 3016.024743][   T28] audit: type=1800 audit(1600167468.550:138): pid=25225 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16913 res=0 errno=0
[ 3016.062945][T25220] tmpfs: Bad value for 'huge'
[ 3016.120473][   T28] audit: type=1800 audit(1600167468.620:139): pid=25225 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16913 res=0 errno=0
10:57:48 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alway'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:48 executing program 3:
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x4c, 0x0})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r3 = gettid()
read$char_usb(r2, &(0x7f00000001c0)=""/157, 0x9d)
tkill(r3, 0x25)

10:57:48 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000))
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

[ 3016.327015][T25236] tmpfs: Bad value for 'huge'
[ 3016.362599][T25239] ptrace attach of "/root/syz-executor.3"[25238] was attempted by "/root/syz-executor.3"[25239]
10:57:49 executing program 3:
pipe(&(0x7f0000000300))
clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x92, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x25)

10:57:49 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000))
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:49 executing program 3:
pipe(&(0x7f0000000300))
clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x92, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x25)

[ 3016.697001][T25250] ptrace attach of "/root/syz-executor.3"[25249] was attempted by "/root/syz-executor.3"[25250]
10:57:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:49 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:49 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
fcntl$setown(r0, 0x8, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:49 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(0x0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x200000a5}])

[ 3016.963488][T25257] ptrace attach of "/root/syz-executor.3"[25255] was attempted by "/root/syz-executor.3"[25257]
10:57:49 executing program 3:
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080))

[ 3017.111436][   T28] audit: type=1800 audit(1600167469.640:140): pid=25236 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16661 res=0 errno=0
10:57:49 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(0x0)
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:49 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0)

10:57:49 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(0x0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x200000a5}])

10:57:50 executing program 3:
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)

10:57:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(0x0)
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:50 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(0x0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x200000a5}])

10:57:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:50 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:50 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
fcntl$setown(r0, 0x8, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:50 executing program 3:
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040)='/dev/fuse\x00', 0x2, 0x0)

10:57:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(0x0)
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:50 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x0, 0x0)

10:57:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:50 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:50 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x0, 0x0)

10:57:50 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:50 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:51 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x0, 0x0)

10:57:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:51 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
fcntl$setown(r0, 0x8, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:51 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:51 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:51 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x0, &(0x7f0000000280))

10:57:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(0x0, 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:51 executing program 3:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:51 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x0, &(0x7f0000000280))

10:57:51 executing program 3:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x208200)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:51 executing program 3:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x208200)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:52 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:52 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x0, &(0x7f0000000280))

10:57:52 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x208200)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:52 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0), 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:52 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:52 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x1, &(0x7f0000000280)=[0x0])

10:57:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:52 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:52 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)

10:57:53 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x1, &(0x7f0000000280)=[0x0])

10:57:53 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:53 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)

10:57:53 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x1, &(0x7f0000000280)=[0x0])

10:57:53 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0), 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:53 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)

10:57:53 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

10:57:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:53 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:53 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

10:57:54 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(0x0, 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:54 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:54 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

10:57:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:54 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0), 0x8, 0x0)
msgrcv(r0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:54 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

10:57:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(0x0, 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:54 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0x200000a5}])

10:57:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:54 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

10:57:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(0x0, 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:55 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:55 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

10:57:55 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x200000a5}])

10:57:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:55 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(0x0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:55 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:55 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x200000a5}])

10:57:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:55 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:55 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:56 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x200000a5}])

10:57:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:56 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(0x0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r1, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:56 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}])

10:57:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r1, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:56 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:57:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r1, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:56 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}])

10:57:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:57 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(0x0, &(0x7f00000010c0)={0x0, ""/173}, 0xb5, 0x0, 0x0)

10:57:57 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x74}}, 0x0)

10:57:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:57 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_setup(0x5e, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002})
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}])

10:57:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:57 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x74}}, 0x0)

10:57:57 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:57 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:57:57 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x74}}, 0x0)

10:57:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:57 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0)

10:57:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:58 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)

10:57:58 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:57:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:58 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0)

10:57:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:58 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0)

[ 3026.056926][   T28] audit: type=1800 audit(1600167478.581:141): pid=25706 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17251 res=0 errno=0
10:57:58 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:58 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)

10:57:58 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:57:58 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0)

10:57:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:58 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0)

10:57:58 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)

10:57:58 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:57:59 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:59 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0)

10:57:59 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

[ 3026.908121][   T28] audit: type=1800 audit(1600167479.431:142): pid=25754 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17611 res=0 errno=0
10:57:59 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:57:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:57:59 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:57:59 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0)

10:57:59 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:57:59 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:57:59 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0)

10:57:59 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:00 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0)

10:58:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:58:00 executing program 5:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:00 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:00 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:00 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0)

10:58:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x208000)
unshare(0x0)

10:58:00 executing program 5:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:00 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:00 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0)

10:58:00 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:00 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:00 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:01 executing program 5:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(0x0, 0x208000)
unshare(0x0)

10:58:01 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0)

10:58:01 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:01 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:01 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:01 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x74}}, 0x0)

10:58:01 executing program 4:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:01 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:01 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x74}}, 0x0)

10:58:01 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(0x0, 0x208000)
unshare(0x0)

10:58:01 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:01 executing program 4:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:01 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x74}}, 0x0)

10:58:01 executing program 0:
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:01 executing program 4:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:01 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0)

10:58:01 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:01 executing program 0:
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:02 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:02 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:02 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0)

10:58:02 executing program 0:
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(0x0, 0x208000)
unshare(0x0)

10:58:02 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:02 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:02 executing program 0:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:02 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0)

10:58:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x0)
unshare(0x0)

10:58:02 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x74}}, 0x0)

10:58:02 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:03 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:03 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:03 executing program 0:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:03 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:03 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x74}}, 0x0)

10:58:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x0)
unshare(0x0)

10:58:03 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x74}}, 0x0)

10:58:03 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:03 executing program 0:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:03 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:03 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0)

10:58:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x0)
unshare(0x0)

10:58:04 executing program 2:
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(0xffffffffffffffff, &(0x7f0000000740)=""/372, 0x174)
close(0xffffffffffffffff)
r0 = inotify_init1(0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x43c00)
r1 = gettid()
fcntl$setown(0xffffffffffffffff, 0x8, r1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r0, 0xa, 0x20)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:04 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:04 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:04 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:04 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0)

10:58:04 executing program 1:
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
fchmodat(0xffffffffffffff9c, 0x0, 0x0)

10:58:04 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0)

10:58:04 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:04 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='7dev/auts~G\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000007, 0x11, r0, 0x0)

10:58:04 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:04 executing program 2:
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(0xffffffffffffffff, &(0x7f0000000740)=""/372, 0x174)
close(0xffffffffffffffff)
r0 = inotify_init1(0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x43c00)
r1 = gettid()
fcntl$setown(0xffffffffffffffff, 0x8, r1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r0, 0xa, 0x20)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:04 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0)

10:58:04 executing program 1:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x2, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x1}, 0x20)

10:58:04 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:04 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:04 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:04 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0)

10:58:04 executing program 2:
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(0xffffffffffffffff, &(0x7f0000000740)=""/372, 0x174)
close(0xffffffffffffffff)
r0 = inotify_init1(0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x43c00)
r1 = gettid()
fcntl$setown(0xffffffffffffffff, 0x8, r1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r0, 0xa, 0x20)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:04 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

10:58:04 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:04 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:04 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0)

10:58:05 executing program 1:
open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65)
getpid()
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)

[ 3032.441533][T26017] ptrace attach of "/root/syz-executor.1"[26015] was attempted by "/root/syz-executor.1"[26017]
10:58:05 executing program 2:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:05 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:05 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0)

10:58:05 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10:58:05 executing program 2:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:05 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:05 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0)

10:58:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:05 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:05 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

[ 3033.510713][   T28] audit: type=1804 audit(1600167486.031:143): pid=26067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir203711042/syzkaller.IG9T1f/2769/bus" dev="sda1" ino=16393 res=1 errno=0
[ 3033.547662][   T28] audit: type=1804 audit(1600167486.061:144): pid=26070 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir203711042/syzkaller.IG9T1f/2769/bus" dev="sda1" ino=16393 res=1 errno=0
10:58:06 executing program 1:
open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65)
getpid()
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)

10:58:06 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:06 executing program 2:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:06 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0)

10:58:06 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(0x0, 0x0, 0x0)

10:58:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:06 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0)

10:58:06 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(0x0, 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:06 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(0x0, 0x0, 0x0)

10:58:06 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:06 executing program 3:
open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65)
getpid()
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)

10:58:07 executing program 1:
open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65)
getpid()
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)

10:58:07 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

10:58:07 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chown(0x0, 0x0, 0x0)

10:58:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:07 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

10:58:07 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(0x0, 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:07 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0)
ftruncate(r1, 0x2008002)
sendfile(r0, r1, 0x0, 0x200fff)
open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)

10:58:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:07 executing program 1:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}])

10:58:07 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

10:58:07 executing program 3:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x0, 0x2)
write$P9_RMKNOD(r0, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x20}}, 0x14)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)
lseek(0xffffffffffffffff, 0x0, 0x2)
open(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
times(0x0)
fcntl$addseals(r0, 0x409, 0x8)
syz_emit_ethernet(0xd6, 0x0, 0x0)

[ 3035.351496][   T28] audit: type=1800 audit(1600167487.871:145): pid=26129 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16399 res=0 errno=0
[ 3035.442636][   T28] audit: type=1804 audit(1600167487.931:146): pid=26135 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir350592181/syzkaller.N45Ez0/2298/bus" dev="sda1" ino=16399 res=1 errno=0
10:58:08 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500, 0x0)

[ 3035.636992][   T28] audit: type=1804 audit(1600167488.151:147): pid=26141 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir021669944/syzkaller.v8qWZE/2722/bus" dev="sda1" ino=17636 res=1 errno=0
10:58:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:08 executing program 1:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}])

10:58:08 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

10:58:08 executing program 4:
open(0x0, 0xc4042, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65)
getpid()
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)

10:58:08 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(0x0, 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:08 executing program 1:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}])

[ 3036.391903][   T28] audit: type=1804 audit(1600167488.912:148): pid=26146 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir021669944/syzkaller.v8qWZE/2722/bus" dev="sda1" ino=17636 res=1 errno=0
[ 3036.494265][   T28] audit: type=1804 audit(1600167488.922:149): pid=26141 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir021669944/syzkaller.v8qWZE/2722/bus" dev="sda1" ino=17636 res=1 errno=0
[ 3037.299151][   T28] audit: type=1804 audit(1600167489.822:150): pid=26135 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir350592181/syzkaller.N45Ez0/2298/bus" dev="sda1" ino=16399 res=1 errno=0
10:58:09 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0)
ftruncate(r1, 0x2008002)
sendfile(r0, r1, 0x0, 0x200fff)
open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)

10:58:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:09 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

10:58:09 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(0xffffffffffffffff, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:09 executing program 4:
open(0x0, 0xc4042, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65)
getpid()
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)

10:58:09 executing program 1:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}])

[ 3037.408720][   T28] audit: type=1800 audit(1600167489.852:151): pid=26135 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16399 res=0 errno=0
10:58:10 executing program 3:
open(0x0, 0xc4042, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65)
getpid()
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)

[ 3037.531753][T26186] fuse: Invalid rootmode
[ 3037.540548][T26190] fuse: Invalid rootmode
10:58:10 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(0xffffffffffffffff, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3037.949322][   T28] audit: type=1800 audit(1600167490.472:152): pid=26202 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17425 res=0 errno=0
10:58:10 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(0xffffffffffffffff, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:10 executing program 1:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a000000}])

10:58:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3038.848692][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 3038.848716][   T28] audit: type=1800 audit(1600167491.372:154): pid=26205 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17425 res=0 errno=0
10:58:11 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x1)
setresuid(0x0, r1, 0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

10:58:11 executing program 4:
open(0x0, 0xc4042, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65)
getpid()
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)

10:58:11 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, 0x0, 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:11 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65)
sendfile(r0, r0, &(0x7f0000000240), 0x7fff)

10:58:11 executing program 1:
r0 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0)
ioctl$FITRIM(r0, 0xc0045878, 0x0)

10:58:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3039.079228][   T28] audit: type=1800 audit(1600167491.592:155): pid=26233 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17075 res=0 errno=0
10:58:11 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000400)=[&(0x7f00000001c0)='\x00', &(0x7f00000003c0)=')\'F,\x00'], 0x100)

10:58:11 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, 0x0, 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

[ 3039.234284][   T28] audit: type=1800 audit(1600167491.602:156): pid=26233 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17075 res=0 errno=0
10:58:12 executing program 0:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff})
ioctl$FICLONE(r1, 0x40049409, r0)

10:58:12 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:12 executing program 1:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x79, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}])

10:58:12 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, 0x0, 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="3800000010000507000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r2], 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

10:58:12 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)

10:58:12 executing program 3:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x201, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000001a00)={0x226c, 0x38, 0x0, 0x70bd28, 0x9, {0x16}, [@generic="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", @nested={0xc, 0x3e, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @ipv4=@empty}]}, @generic="82087957399e6a754ab2959858330c22d6d3d08487bc5961f45f263bb6728cc9fd1a8b522d5a4cba2617c1b6dd2fcd0ffc0bc167aa26dbe48a84cfcf7c2bfed1e280d63494621c3f96a0c392b02b6fe0a720d0", @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@local}, @generic="70a6ff89c9ab67ff951e18503fdb49c21d80a3c0724044728a3c7c3f917ac69058e2f54f3579fcee3d4f290bce2d3a4240fdd7ef17c17c86cd67c46e96decc", @generic="fbae105a5b51499a1249c99d1740d6ce64319d2bd87911a05e36ee664938ec7043d7ff31f63627f408a3415c56012b15340162b1caf604ca7182cead57b8a6676ada221be5e2890b7bbc9fc7ba8aed9c557d569ccb34a823f6f5e0daeacca4a9ed756ec90b98dd7f4672", @generic="8c79da4770e4252814f1f3cd8efa42a6990de6091c14592f57cca841a8be1e70bf70582f0dc7f9074dcefc6c47a222e1d0ce9466e3cc795bd9987d1824d33f95505e5bdf10eac76a7ff730b9c88204b405cfa1cbeaac9cd4", @nested={0x10e2, 0x17, 0x0, 0x1, [@generic="72dcded5420e4f6751784300cf0b4a6190eaf0cb89cb8ffe75dd68c0751a6d0609a3eabdf22a6796d35f686f1df1ca9a97b0e672d2a186116f26c5739bd3ec92d9b0d5f99dd77e513fa21b40e1130191c4217cb58055c15ccc1ce320ba4eeeb63883a33441f2b2f07cc48a209fd491f774142d0b2603aa3e5413c05c57d0800a5f151a183773ec7936816dfd408724fd60b2fb368a39e4b48052bd", @generic="088a3885b7d08791035eb2066406339020b03caaade5e076137aae6763f6c1ef68f2c6ebaf105dd81b6c8767407e98070ccf59641b1a070a2f8ceff4a7aca4a456f107", @generic="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"]}]}, 0x226c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8008000)
io_submit(0x0, 0x0, &(0x7f0000001340))
creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

10:58:12 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:12 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(0xffffffffffffffff)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

[ 3040.136227][   T28] audit: type=1804 audit(1600167492.652:157): pid=26272 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir021669944/syzkaller.v8qWZE/2726/file0" dev="sda1" ino=17318 res=1 errno=0
10:58:12 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="3800000010000507000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c000200080002", @ANYRES32=r4], 0x38}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x0, r4})

[ 3040.252796][   T28] audit: type=1804 audit(1600167492.692:158): pid=26272 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir021669944/syzkaller.v8qWZE/2726/file0" dev="sda1" ino=17318 res=1 errno=0
10:58:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="3800000010000507000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r2], 0x38}}, 0x0)

10:58:12 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup3(r2, r4, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:13 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0)
ftruncate(r3, 0x2008002)
sendfile(r2, r3, 0x0, 0x200fff)
r4 = open(&(0x7f0000000400)='./bus\x00', 0x14183e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0)
read(r4, &(0x7f0000000180)=""/19, 0xfffffe47)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 3040.684076][   T28] audit: type=1800 audit(1600167493.202:159): pid=26307 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=17668 res=0 errno=0
[ 3040.759476][   T28] audit: type=1804 audit(1600167493.202:160): pid=26272 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir021669944/syzkaller.v8qWZE/2726/file0" dev="sda1" ino=17318 res=1 errno=0
10:58:13 executing program 1:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000480)}, 0x20)

10:58:13 executing program 3:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)

10:58:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:13 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(0xffffffffffffffff)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:13 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x65)
r2 = getpid()
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5)
sendfile(r1, r1, &(0x7f0000000240), 0x7fff)
sendfile(r0, r0, 0x0, 0x7fff)

10:58:13 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)

10:58:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:14 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0)
ftruncate(r1, 0x2008002)
sendfile(r0, r1, 0x0, 0x200fff)

[ 3041.573123][   T28] audit: type=1800 audit(1600167494.092:161): pid=26341 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17671 res=0 errno=0
10:58:14 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x600, 0x0)

[ 3041.812964][   T28] audit: type=1800 audit(1600167494.332:162): pid=26341 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17671 res=0 errno=0
[ 3041.968015][   T28] audit: type=1800 audit(1600167494.482:163): pid=26307 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=17668 res=0 errno=0
10:58:15 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
read(r0, &(0x7f0000000140)=""/161, 0xa1)
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

10:58:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:15 executing program 0:
clock_settime(0x3, 0x0)

10:58:15 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(0xffffffffffffffff)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:15 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0)
ftruncate(r3, 0x2008002)
sendfile(r2, r3, 0x0, 0x200fff)
r4 = open(&(0x7f0000000400)='./bus\x00', 0x14183e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0)
read(r4, &(0x7f0000000180)=""/19, 0xfffffe47)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

10:58:15 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x65)
r2 = getpid()
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5)
sendfile(r1, r1, &(0x7f0000000240), 0x7fff)
sendfile(r0, r0, 0x0, 0x7fff)

10:58:16 executing program 0:
clock_settime(0x3, 0x0)

10:58:16 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [], 0x11}})

10:58:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3043.863961][T26381] fuse: Unknown parameter ''
[ 3043.892630][T26382] fuse: Unknown parameter ''
10:58:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67)
sendfile(r1, r2, &(0x7f0000000000), 0xffff)
fcntl$addseals(r2, 0x409, 0x8)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$P9_RLERROR(r3, 0x0, 0x0)
write$P9_RMKDIR(r3, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x80, 0x4, 0x2}}, 0x14)

10:58:16 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f0100000000090503020002"], 0x0)

10:58:16 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67)
sendfile(r1, r2, &(0x7f0000000000), 0xffff)
fcntl$addseals(r2, 0x409, 0x8)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$P9_RLERROR(r3, 0x0, 0x0)
write$P9_RMKDIR(r3, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x80, 0x4, 0x2}}, 0x14)

10:58:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67)
sendfile(r1, r2, &(0x7f0000000000), 0xffff)
fcntl$addseals(r2, 0x409, 0x8)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$P9_RLERROR(r3, 0x0, 0x0)
write$P9_RMKDIR(r3, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x80, 0x4, 0x2}}, 0x14)

[ 3044.458002][ T5141] usb 1-1: new high-speed USB device number 2 using dummy_hcd
10:58:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:17 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0)
ftruncate(r3, 0x2008002)
sendfile(r2, r3, 0x0, 0x200fff)
r4 = open(&(0x7f0000000400)='./bus\x00', 0x14183e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0)
read(r4, &(0x7f0000000180)=""/19, 0xfffffe47)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

10:58:17 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
dup3(r1, r0, 0x0)

10:58:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67)
sendfile(r1, r2, &(0x7f0000000000), 0xffff)
fcntl$addseals(r2, 0x409, 0x8)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$P9_RLERROR(r3, 0x0, 0x0)
write$P9_RMKDIR(r3, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x80, 0x4, 0x2}}, 0x14)

10:58:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3044.858874][ T5141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3044.870266][ T5141] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 3044.958862][ T5141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3044.978717][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 3045.010950][ T5141] usb 1-1: SerialNumber: syz
10:58:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r1, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:17 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

[ 3045.036368][ T5141] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[ 3045.273027][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 3045.273041][   T28] audit: type=1800 audit(1600167497.792:166): pid=26432 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16196 res=0 errno=0
10:58:19 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syncfs(r0)
close(r0)
socket(0x10, 0x802, 0x0)

10:58:19 executing program 3:
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@func_proto, @int, @typedef]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x46}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

10:58:19 executing program 1:
pipe(&(0x7f0000000300))
clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x92, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r3 = gettid()
tkill(r3, 0x25)

10:58:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r1, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:19 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:19 executing program 4:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syncfs(r1)
close(r1)
ioctl$KDENABIO(r0, 0x5450)

[ 3047.098677][T18042] usb 1-1: USB disconnect, device number 2
10:58:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r1, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3047.219205][   T28] audit: type=1804 audit(1600167499.742:167): pid=26450 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir791112065/syzkaller.O7Fv5V/2510/file0" dev="sda1" ino=17708 res=1 errno=0
[ 3047.252705][T26458] ptrace attach of "/root/syz-executor.1"[26457] was attempted by "/root/syz-executor.1"[26458]
[ 3047.263784][T26453] ptrace attach of "/root/syz-executor.3"[26452] was attempted by "/root/syz-executor.3"[26453]
10:58:19 executing program 3:
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)

10:58:19 executing program 4:
r0 = socket(0x2, 0x3, 0x6)
sendmmsg$sock(r0, &(0x7f0000005d40)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0)

10:58:19 executing program 1:
syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x54}, @local, {[@timestamp={0x44, 0x4, 0x23}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mss={0x2, 0x4}, @fastopen={0x22, 0x8, "2c322e60060e"}, @fastopen={0x8, 0x11, "b5b6539efaf2e6879b503cde746801"}, @mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0x2}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0)

[ 3047.323839][   T28] audit: type=1804 audit(1600167499.742:168): pid=26450 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir791112065/syzkaller.O7Fv5V/2510/file0" dev="sda1" ino=17708 res=1 errno=0
10:58:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x3c}}, 0x0)

10:58:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3047.505857][T26474] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it!
10:58:20 executing program 4:

10:58:20 executing program 1:

10:58:20 executing program 0:

10:58:20 executing program 4:

10:58:20 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:20 executing program 0:

10:58:20 executing program 3:

10:58:20 executing program 1:

10:58:20 executing program 4:

10:58:20 executing program 0:

10:58:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x110004, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:20 executing program 0:

10:58:21 executing program 1:

10:58:21 executing program 4:

10:58:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:21 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:21 executing program 3:

10:58:21 executing program 4:

10:58:21 executing program 1:

10:58:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:21 executing program 0:

10:58:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:21 executing program 3:

10:58:21 executing program 1:

10:58:21 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, &(0x7f0000000040))

10:58:21 executing program 4:

10:58:21 executing program 3:

10:58:22 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:22 executing program 1:

10:58:22 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, &(0x7f0000000040))

10:58:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:22 executing program 4:

10:58:22 executing program 3:

10:58:22 executing program 1:

10:58:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:22 executing program 3:

10:58:22 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, &(0x7f0000000040))

10:58:22 executing program 4:

10:58:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:23 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:23 executing program 1:

10:58:23 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, &(0x7f0000000040))

10:58:23 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:23 executing program 3:

10:58:23 executing program 4:

10:58:23 executing program 1:

10:58:23 executing program 3:

10:58:23 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:23 executing program 4:

10:58:23 executing program 0:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040))

10:58:23 executing program 1:

10:58:24 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(0xffffffffffffffff, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:24 executing program 3:

10:58:24 executing program 0:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040))

10:58:24 executing program 4:

10:58:24 executing program 1:

10:58:24 executing program 0:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040))

10:58:24 executing program 1:

10:58:24 executing program 3:

10:58:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:24 executing program 4:

10:58:24 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, &(0x7f0000000040))

10:58:25 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(0xffffffffffffffff, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:25 executing program 1:

10:58:25 executing program 3:

10:58:25 executing program 4:

10:58:25 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, &(0x7f0000000040))

10:58:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:25 executing program 3:

10:58:25 executing program 4:

10:58:25 executing program 1:

10:58:25 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, &(0x7f0000000040))

10:58:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:25 executing program 4:

10:58:26 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(0xffffffffffffffff, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:26 executing program 3:

10:58:26 executing program 1:

10:58:26 executing program 0:
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040))

10:58:26 executing program 4:

10:58:26 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:26 executing program 4:

10:58:26 executing program 3:

10:58:26 executing program 1:

10:58:26 executing program 0:
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040))

10:58:26 executing program 4:

10:58:26 executing program 3:
r0 = socket(0x2, 0x1, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4c1d0)

10:58:27 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
gettid()
fcntl$setown(r0, 0x8, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:27 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000015c0)={'batadv_slave_0\x00'})

10:58:27 executing program 0:
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040))

10:58:27 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:27 executing program 3:
set_mempolicy(0x1, &(0x7f0000000100), 0x401)

10:58:27 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:27 executing program 1:
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:27 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:27 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, 0x0)

10:58:27 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x90000, 0x4)

10:58:27 executing program 3:
r0 = socket(0x2, 0x1, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x30, 0x0, &(0x7f0000000080))

10:58:27 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:28 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
gettid()
fcntl$setown(r0, 0x8, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:28 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, 0x0)

10:58:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:28 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:28 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:28 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, 0x0)

10:58:28 executing program 1:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x29, 0x13, 0x0, 0x300)

10:58:28 executing program 4:
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:28 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0xb, &(0x7f0000000100), 0x4)

10:58:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:28 executing program 4:
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:29 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
gettid()
fcntl$setown(r0, 0x8, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:29 executing program 0:
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={0x0, 0x0, 0xc}, 0x10)

10:58:29 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0)
read$rfkill(r0, 0x0, 0x7ffffffff000)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045002, &(0x7f0000000340))

10:58:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:29 executing program 4:
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:29 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:29 executing program 0:
open$dir(&(0x7f0000000080)='./file0\x00', 0x20240, 0x0)
futimesat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0))

10:58:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:29 executing program 0:
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, &(0x7f0000000080))

10:58:29 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:30 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:30 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00'}, 0x10)

10:58:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:30 executing program 1:
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x171, 0xffffffffffffffff, 0x0)

10:58:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:30 executing program 3:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:30 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:30 executing program 1:
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x71, 0xffffffffffffffff, 0x0)

10:58:30 executing program 0:
r0 = socket(0x18, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local, 0x700}})

10:58:30 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:30 executing program 3:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:31 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:31 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x3, 0x0, 0x0)

10:58:31 executing program 0:
r0 = socket$inet(0xa, 0x5, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x1300f1347fc7dd01, 0x0, &(0x7f00000000c0))

10:58:31 executing program 3:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:31 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a000000", 0x10)

10:58:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:31 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x0)

10:58:31 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x1, 0x0)
write$hidraw(r0, &(0x7f0000000100)="520d6828890598867e", 0x9)

10:58:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:31 executing program 0:
r0 = socket$inet(0xa, 0x5, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x1300f1347fc7dd01, 0x0, &(0x7f00000000c0))

10:58:31 executing program 1:
r0 = socket$inet(0xa, 0x5, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x8916, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @remote}})

10:58:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:32 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:32 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x0)

10:58:32 executing program 0:
io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x81a58e6fa4cc355c})

10:58:32 executing program 1:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x8001, 0x0)
write$hidraw(r0, &(0x7f00000000c0)="aa", 0x1)

10:58:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0), 0x0)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:32 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x0)

[ 3059.734857][T26865] nvme_fabrics: unknown parameter or missing value 'ª' in ctrl creation request
10:58:32 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket(0x1000000010, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007250000004007a2a30005000003", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

10:58:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
alarm(0xd2)
alarm(0x0)

10:58:32 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040), 0x0)

[ 3059.927580][T26881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
10:58:32 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

[ 3060.033765][T26884] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
10:58:33 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:33 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040), 0x0)

10:58:33 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0x541b, 0x0)

10:58:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket(0x1000000010, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007250000004007a2a30005000003", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

10:58:33 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:33 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0), 0x0)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:33 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f00000000c0)=""/4096, 0x1000)

[ 3060.667761][T26905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
10:58:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0)

10:58:33 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040), 0x0)

10:58:33 executing program 0:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x24102, 0x0)

10:58:33 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0)

10:58:34 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:34 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d", 0x8)

10:58:34 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0)

10:58:34 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0x80045104, 0x0)

10:58:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0), 0x0)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

10:58:34 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d", 0x8)

10:58:34 executing program 0:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}}, 0x0)

10:58:34 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

10:58:34 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d", 0x8)

10:58:34 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:34 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:34 executing program 1:
read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:34 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf6", 0xc)

10:58:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

10:58:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:35 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf6", 0xc)

10:58:35 executing program 1:
read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:58:35 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf6", 0xc)

10:58:35 executing program 1:
read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:58:35 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:35 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a00", 0xe)

10:58:35 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$proc_mixer(r0, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:58:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:35 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:36 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$proc_mixer(r0, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:36 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a00", 0xe)

10:58:36 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:36 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$proc_mixer(r0, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:36 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a00", 0xe)

10:58:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:36 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:36 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a0000", 0xf)

10:58:36 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:36 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:36 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:36 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a0000", 0xf)

10:58:36 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:36 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x0)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:36 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:36 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="39ed419165982a0d5eee2cf60a0000", 0xf)

10:58:37 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(r0, 0x0, 0x0)

10:58:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x0)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:37 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(r0, 0x0, 0x0)

10:58:37 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:37 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x29, 0x4a, 0x0, 0x300)

10:58:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}}, 0x0)

10:58:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x0)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:37 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
read$proc_mixer(r0, 0x0, 0x0)

10:58:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x20}}, 0x0)

10:58:37 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x9}]}]}}, &(0x7f00000002c0)=""/4096, 0x32, 0x1000, 0x1}, 0x20)

10:58:37 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
mmap$usbmon(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)

10:58:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x20}}, 0x0)

10:58:38 executing program 4:
r0 = socket(0x23, 0x80805, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)

10:58:38 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:38 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x29, 0x22, 0x0, 0x300)

10:58:38 executing program 4:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

10:58:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x20}}, 0x0)

10:58:38 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:38 executing program 1:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x890b)

10:58:38 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:38 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x54, r1, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0x54}}, 0x0)

10:58:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x24}}, 0x0)

10:58:38 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:38 executing program 1:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x890b)

10:58:39 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:39 executing program 1:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x890b)

10:58:39 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:39 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x24}}, 0x0)

10:58:39 executing program 1:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x890b)

10:58:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:39 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:39 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x24}}, 0x0)

10:58:39 executing program 1:
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x890b)

10:58:39 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:40 executing program 1:
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x890b)

10:58:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

10:58:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:40 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0)

10:58:40 executing program 1:
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x890b)

10:58:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

10:58:40 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, 0x0, 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:40 executing program 1:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x890b)

10:58:40 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0)

10:58:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

10:58:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0)

10:58:41 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x0, 0x0)

10:58:41 executing program 1:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x890b)

10:58:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

10:58:41 executing program 1:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x890b)

10:58:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:41 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, 0x0, 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x30}}, 0x0)

10:58:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

10:58:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

10:58:41 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080))
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x30}}, 0x0)

10:58:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

10:58:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

10:58:42 executing program 1:
r0 = epoll_create(0xa58)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0000011})
epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x1)

10:58:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080))
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x30}}, 0x0)

10:58:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, 0x0, 0xa4000960)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

10:58:42 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

10:58:42 executing program 1:
r0 = socket$inet(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0)

10:58:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x34}}, 0x0)

10:58:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080))
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x34}}, 0x0)

10:58:43 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

10:58:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0))

10:58:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140), 0x0, 0x0, 0x0)

10:58:43 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

10:58:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x34}}, 0x0)

10:58:43 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x0)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:43 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140), 0x0, 0x0, 0x0)

10:58:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:43 executing program 3:
r0 = eventfd2(0xffffffff, 0x0)
read$eventfd(r0, &(0x7f00000000c0), 0x8)

10:58:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140), 0x0, 0x0, 0x0)

10:58:44 executing program 3:
r0 = eventfd2(0xffffffff, 0x0)
read$eventfd(r0, &(0x7f00000000c0), 0x8)

10:58:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:44 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0)

10:58:44 executing program 3:
r0 = eventfd2(0xffffffff, 0x0)
read$eventfd(r0, &(0x7f00000000c0), 0x8)

[ 3071.711973][T27358] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3071.750409][T27358] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3071.839287][T27358] F2FS-fs (loop1): invalid crc_offset: 0
[ 3072.144879][T27358] attempt to access beyond end of device
[ 3072.160115][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.171116][T27358] attempt to access beyond end of device
[ 3072.180871][T27358] loop1: rw=12288, want=20496, limit=16368
[ 3072.191686][T27358] attempt to access beyond end of device
[ 3072.203604][T27358] loop1: rw=12288, want=20504, limit=16368
10:58:44 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x0)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

[ 3072.248298][T27358] attempt to access beyond end of device
[ 3072.258534][T27358] loop1: rw=12288, want=20512, limit=16368
[ 3072.280616][T27358] attempt to access beyond end of device
[ 3072.296199][T27358] loop1: rw=12288, want=20520, limit=16368
[ 3072.302078][T27358] attempt to access beyond end of device
[ 3072.313667][T27358] loop1: rw=12288, want=20528, limit=16368
[ 3072.324052][T27358] attempt to access beyond end of device
[ 3072.334147][T27358] loop1: rw=12288, want=20536, limit=16368
[ 3072.355260][T27358] attempt to access beyond end of device
[ 3072.372446][T27358] loop1: rw=12288, want=20544, limit=16368
[ 3072.381744][T27358] attempt to access beyond end of device
[ 3072.391825][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.400568][T27358] attempt to access beyond end of device
[ 3072.410074][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.419132][T27358] attempt to access beyond end of device
[ 3072.424860][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.438674][T27358] attempt to access beyond end of device
[ 3072.444550][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.458459][T27358] attempt to access beyond end of device
[ 3072.464239][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.475267][T27358] attempt to access beyond end of device
[ 3072.483773][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.492534][T27358] attempt to access beyond end of device
[ 3072.501063][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.510657][T27358] attempt to access beyond end of device
[ 3072.519395][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.525380][T27358] attempt to access beyond end of device
[ 3072.536016][T27358] loop1: rw=12288, want=20488, limit=16368
[ 3072.542332][T27358] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3072.558427][T27358] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:45 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:45 executing program 3:
r0 = eventfd2(0xffffffff, 0x0)
read$eventfd(r0, &(0x7f00000000c0), 0x8)

10:58:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0)

10:58:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0)

10:58:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:45 executing program 3:
read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)

10:58:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3072.962951][T27414] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3073.006796][T27414] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3073.078426][T27414] F2FS-fs (loop1): invalid crc_offset: 0
10:58:45 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x0)
open(&(0x7f0000000040)='./control\x00', 0x0, 0x0)

10:58:45 executing program 3:
read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)

[ 3073.433586][T27414] attempt to access beyond end of device
[ 3073.452891][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.465031][T27414] attempt to access beyond end of device
[ 3073.483158][T27414] loop1: rw=12288, want=20496, limit=16368
[ 3073.492670][T27414] attempt to access beyond end of device
[ 3073.502188][T27414] loop1: rw=12288, want=20504, limit=16368
[ 3073.520864][T27414] attempt to access beyond end of device
[ 3073.533877][T27414] loop1: rw=12288, want=20512, limit=16368
[ 3073.551748][T27414] attempt to access beyond end of device
[ 3073.577440][T27414] loop1: rw=12288, want=20520, limit=16368
[ 3073.584248][T27414] attempt to access beyond end of device
[ 3073.617110][T27414] loop1: rw=12288, want=20528, limit=16368
[ 3073.623889][T27414] attempt to access beyond end of device
[ 3073.640508][T27414] loop1: rw=12288, want=20536, limit=16368
[ 3073.649422][T27414] attempt to access beyond end of device
[ 3073.655248][T27414] loop1: rw=12288, want=20544, limit=16368
[ 3073.666177][T27414] attempt to access beyond end of device
[ 3073.671991][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.682982][T27414] attempt to access beyond end of device
[ 3073.691582][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.705699][T27414] attempt to access beyond end of device
[ 3073.728870][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.745562][T27414] attempt to access beyond end of device
[ 3073.760613][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.774014][T27414] attempt to access beyond end of device
[ 3073.782610][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.791332][T27414] attempt to access beyond end of device
[ 3073.799716][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.805693][T27414] attempt to access beyond end of device
[ 3073.819259][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.825240][T27414] attempt to access beyond end of device
[ 3073.835916][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.842526][T27414] attempt to access beyond end of device
[ 3073.854010][T27414] loop1: rw=12288, want=20488, limit=16368
[ 3073.862707][T27414] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3073.872243][T27414] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:46 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:46 executing program 3:
read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)

10:58:46 executing program 3:
r0 = eventfd2(0x0, 0x0)
read$eventfd(r0, &(0x7f00000000c0), 0x8)

10:58:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

10:58:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:46 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(0x0, 0x0, 0x0)

[ 3074.308631][T27465] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3074.317701][T27465] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3074.345500][T27465] F2FS-fs (loop1): invalid crc_offset: 0
10:58:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

[ 3074.879342][T27465] attempt to access beyond end of device
[ 3074.905932][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3074.907213][T27465] attempt to access beyond end of device
[ 3074.935840][T27465] loop1: rw=12288, want=20496, limit=16368
[ 3074.942862][T27465] attempt to access beyond end of device
[ 3074.965735][T27465] loop1: rw=12288, want=20504, limit=16368
[ 3074.971587][T27465] attempt to access beyond end of device
[ 3075.001711][T27465] loop1: rw=12288, want=20512, limit=16368
[ 3075.023188][T27465] attempt to access beyond end of device
[ 3075.042747][T27465] loop1: rw=12288, want=20520, limit=16368
[ 3075.064962][T27465] attempt to access beyond end of device
[ 3075.079442][T27465] loop1: rw=12288, want=20528, limit=16368
[ 3075.085487][T27465] attempt to access beyond end of device
[ 3075.093666][T27465] loop1: rw=12288, want=20536, limit=16368
[ 3075.100210][T27465] attempt to access beyond end of device
[ 3075.106300][T27465] loop1: rw=12288, want=20544, limit=16368
[ 3075.112331][T27465] attempt to access beyond end of device
[ 3075.120508][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3075.126992][T27465] attempt to access beyond end of device
[ 3075.132815][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3075.140123][T27465] attempt to access beyond end of device
[ 3075.146238][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3075.152267][T27465] attempt to access beyond end of device
[ 3075.164313][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3075.178172][T27465] attempt to access beyond end of device
[ 3075.184590][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3075.197757][T27465] attempt to access beyond end of device
[ 3075.203409][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3075.209367][T27465] attempt to access beyond end of device
[ 3075.215391][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3075.223154][T27465] attempt to access beyond end of device
[ 3075.230446][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3075.238774][T27465] attempt to access beyond end of device
[ 3075.244420][T27465] loop1: rw=12288, want=20488, limit=16368
[ 3075.253694][T27465] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3075.262913][T27465] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:47 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:47 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

10:58:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x0, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:47 executing program 3:
r0 = eventfd2(0x0, 0x0)
read$eventfd(r0, &(0x7f00000000c0), 0x8)

10:58:47 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(0x0, 0x0, 0x0)

10:58:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:48 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:48 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x0, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3075.713697][T27508] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3075.722524][T27508] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:58:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

[ 3075.758063][T27508] F2FS-fs (loop1): invalid crc_offset: 0
10:58:48 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

[ 3076.076924][T27508] attempt to access beyond end of device
[ 3076.084729][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.092819][T27508] attempt to access beyond end of device
[ 3076.099225][T27508] loop1: rw=12288, want=20496, limit=16368
[ 3076.108190][T27508] attempt to access beyond end of device
[ 3076.114212][T27508] loop1: rw=12288, want=20504, limit=16368
[ 3076.122081][T27508] attempt to access beyond end of device
[ 3076.129110][T27508] loop1: rw=12288, want=20512, limit=16368
[ 3076.152541][T27508] attempt to access beyond end of device
[ 3076.158796][T27508] loop1: rw=12288, want=20520, limit=16368
[ 3076.173870][T27508] attempt to access beyond end of device
[ 3076.180631][T27508] loop1: rw=12288, want=20528, limit=16368
[ 3076.194399][T27508] attempt to access beyond end of device
[ 3076.231597][T27508] loop1: rw=12288, want=20536, limit=16368
[ 3076.265332][T27508] attempt to access beyond end of device
[ 3076.307013][T27508] loop1: rw=12288, want=20544, limit=16368
[ 3076.313536][T27508] attempt to access beyond end of device
[ 3076.343289][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.361917][T27508] attempt to access beyond end of device
[ 3076.372929][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.390567][T27508] attempt to access beyond end of device
[ 3076.401431][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.415110][T27508] attempt to access beyond end of device
[ 3076.431151][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.440921][T27508] attempt to access beyond end of device
[ 3076.455253][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.493462][T27508] attempt to access beyond end of device
[ 3076.502940][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.519481][T27508] attempt to access beyond end of device
[ 3076.525164][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.548049][T27508] attempt to access beyond end of device
[ 3076.553747][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.565863][T27508] attempt to access beyond end of device
[ 3076.586934][T27508] loop1: rw=12288, want=20488, limit=16368
[ 3076.592835][T27508] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3076.626916][T27508] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:49 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))

10:58:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x0, &(0x7f0000000300)=0x2000000000000020)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:49 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:49 executing program 3:
r0 = eventfd2(0x0, 0x0)
read$eventfd(r0, &(0x7f00000000c0), 0x8)

10:58:49 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
read(r0, &(0x7f0000000740)=""/372, 0x174)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x43c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x20)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
open(0x0, 0x0, 0x0)

10:58:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0)

10:58:49 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

10:58:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0)

10:58:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

[ 3077.359682][T27553] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3077.369340][T27553] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3077.415431][T27553] F2FS-fs (loop1): invalid crc_offset: 0
[ 3077.707480][T27553] attempt to access beyond end of device
[ 3077.713182][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3077.731078][T27553] attempt to access beyond end of device
[ 3077.744675][T27553] loop1: rw=12288, want=20496, limit=16368
[ 3077.759082][T27553] attempt to access beyond end of device
[ 3077.764866][T27553] loop1: rw=12288, want=20504, limit=16368
[ 3077.787271][T27553] attempt to access beyond end of device
[ 3077.793092][T27553] loop1: rw=12288, want=20512, limit=16368
[ 3077.812711][T27553] attempt to access beyond end of device
[ 3077.841904][T27553] loop1: rw=12288, want=20520, limit=16368
[ 3077.861168][T27553] attempt to access beyond end of device
[ 3077.877343][T27553] loop1: rw=12288, want=20528, limit=16368
[ 3077.884986][T27553] attempt to access beyond end of device
[ 3077.910609][T27553] loop1: rw=12288, want=20536, limit=16368
[ 3077.930913][T27553] attempt to access beyond end of device
[ 3077.939667][T27553] loop1: rw=12288, want=20544, limit=16368
[ 3077.949588][T27553] attempt to access beyond end of device
[ 3077.955346][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3077.966676][T27553] attempt to access beyond end of device
[ 3077.972449][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3077.984241][T27553] attempt to access beyond end of device
[ 3077.999868][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3078.010411][T27553] attempt to access beyond end of device
[ 3078.019084][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3078.025070][T27553] attempt to access beyond end of device
[ 3078.036886][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3078.042884][T27553] attempt to access beyond end of device
[ 3078.054466][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3078.063443][T27553] attempt to access beyond end of device
[ 3078.072124][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3078.081259][T27553] attempt to access beyond end of device
[ 3078.089931][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3078.100727][T27553] attempt to access beyond end of device
[ 3078.109082][T27553] loop1: rw=12288, want=20488, limit=16368
[ 3078.114991][T27553] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3078.126780][T27553] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:50 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))

10:58:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

10:58:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0)

10:58:50 executing program 3:
eventfd2(0xffffffff, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)

10:58:50 executing program 2:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x29, 0x2a, 0x0, 0x0)

10:58:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

10:58:50 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x113, 0x3, 0x0, 0x0)

10:58:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

10:58:50 executing program 3:
eventfd2(0xffffffff, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)

10:58:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

[ 3078.941919][T27602] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3078.951241][T27602] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3078.983853][T27602] F2FS-fs (loop1): invalid crc_offset: 0
[ 3079.213562][T27602] attempt to access beyond end of device
[ 3079.220044][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.226438][T27602] attempt to access beyond end of device
[ 3079.232188][T27602] loop1: rw=12288, want=20496, limit=16368
[ 3079.240311][T27602] attempt to access beyond end of device
[ 3079.258104][T27602] loop1: rw=12288, want=20504, limit=16368
[ 3079.271376][T27602] attempt to access beyond end of device
[ 3079.282882][T27602] loop1: rw=12288, want=20512, limit=16368
[ 3079.290741][T27602] attempt to access beyond end of device
[ 3079.297031][T27602] loop1: rw=12288, want=20520, limit=16368
[ 3079.303981][T27602] attempt to access beyond end of device
[ 3079.311316][T27602] loop1: rw=12288, want=20528, limit=16368
[ 3079.318059][T27602] attempt to access beyond end of device
[ 3079.324451][T27602] loop1: rw=12288, want=20536, limit=16368
[ 3079.330828][T27602] attempt to access beyond end of device
[ 3079.337604][T27602] loop1: rw=12288, want=20544, limit=16368
[ 3079.343865][T27602] attempt to access beyond end of device
[ 3079.352063][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.363726][T27602] attempt to access beyond end of device
[ 3079.385446][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.391340][T27602] attempt to access beyond end of device
[ 3079.405476][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.411381][T27602] attempt to access beyond end of device
[ 3079.417211][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.423093][T27602] attempt to access beyond end of device
[ 3079.430673][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.444789][T27602] attempt to access beyond end of device
[ 3079.450839][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.464478][T27602] attempt to access beyond end of device
[ 3079.484926][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.491909][T27602] attempt to access beyond end of device
[ 3079.499491][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.506365][T27602] attempt to access beyond end of device
[ 3079.512023][T27602] loop1: rw=12288, want=20488, limit=16368
[ 3079.518011][T27602] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3079.524814][T27602] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:52 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))

10:58:52 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8911, &(0x7f0000000000)={'wg2\x00'})

10:58:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

10:58:52 executing program 3:
eventfd2(0xffffffff, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)

10:58:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

10:58:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300))
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:52 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000080))

10:58:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

10:58:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

10:58:52 executing program 3:
r0 = eventfd2(0xffffffff, 0x0)
read$eventfd(r0, 0x0, 0x0)

10:58:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300))
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1)

[ 3080.224363][T27643] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3080.244789][T27643] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3080.306619][T27643] F2FS-fs (loop1): invalid crc_offset: 0
[ 3080.575498][T27643] attempt to access beyond end of device
[ 3080.581204][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.594790][T27643] attempt to access beyond end of device
[ 3080.603290][T27643] loop1: rw=12288, want=20496, limit=16368
[ 3080.612298][T27643] attempt to access beyond end of device
[ 3080.620823][T27643] loop1: rw=12288, want=20504, limit=16368
[ 3080.629843][T27643] attempt to access beyond end of device
[ 3080.638361][T27643] loop1: rw=12288, want=20512, limit=16368
[ 3080.644267][T27643] attempt to access beyond end of device
[ 3080.655180][T27643] loop1: rw=12288, want=20520, limit=16368
[ 3080.664016][T27643] attempt to access beyond end of device
[ 3080.673652][T27643] loop1: rw=12288, want=20528, limit=16368
[ 3080.684739][T27643] attempt to access beyond end of device
[ 3080.703025][T27643] loop1: rw=12288, want=20536, limit=16368
[ 3080.713281][T27643] attempt to access beyond end of device
[ 3080.729434][T27643] loop1: rw=12288, want=20544, limit=16368
[ 3080.740732][T27643] attempt to access beyond end of device
[ 3080.754556][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.771390][T27643] attempt to access beyond end of device
[ 3080.786307][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.792284][T27643] attempt to access beyond end of device
[ 3080.804325][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.814822][T27643] attempt to access beyond end of device
[ 3080.823597][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.832406][T27643] attempt to access beyond end of device
[ 3080.841299][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.850221][T27643] attempt to access beyond end of device
[ 3080.859036][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.865009][T27643] attempt to access beyond end of device
[ 3080.876176][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.882171][T27643] attempt to access beyond end of device
[ 3080.893214][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.902866][T27643] attempt to access beyond end of device
[ 3080.911631][T27643] loop1: rw=12288, want=20488, limit=16368
[ 3080.922362][T27643] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
10:58:53 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

10:58:53 executing program 3:
r0 = eventfd2(0xffffffff, 0x0)
read$eventfd(r0, 0x0, 0x0)

10:58:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0)

10:58:53 executing program 2:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x5}]})

10:58:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r3, 0x0, r5, 0x0, 0x110004, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300))
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3080.934273][T27643] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

10:58:53 executing program 3:
r0 = eventfd2(0xffffffff, 0x0)
read$eventfd(r0, 0x0, 0x0)

10:58:53 executing program 2:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', 0x0})

10:58:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0)

10:58:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:53 executing program 3:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x29, 0x8, 0x0, 0x300)

[ 3081.247070][T27693] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3081.277736][T27693] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3081.339103][T27693] F2FS-fs (loop1): invalid crc_offset: 0
[ 3081.420751][T27693] attempt to access beyond end of device
[ 3081.445307][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.451282][T27693] attempt to access beyond end of device
[ 3081.465321][T27693] loop1: rw=12288, want=20496, limit=16368
[ 3081.474209][T27693] attempt to access beyond end of device
[ 3081.487581][T27693] loop1: rw=12288, want=20504, limit=16368
[ 3081.495432][T27693] attempt to access beyond end of device
[ 3081.501322][T27693] loop1: rw=12288, want=20512, limit=16368
[ 3081.518780][T27693] attempt to access beyond end of device
[ 3081.526081][T27693] loop1: rw=12288, want=20520, limit=16368
[ 3081.533047][T27693] attempt to access beyond end of device
[ 3081.538924][T27693] loop1: rw=12288, want=20528, limit=16368
[ 3081.544886][T27693] attempt to access beyond end of device
[ 3081.550726][T27693] loop1: rw=12288, want=20536, limit=16368
[ 3081.556762][T27693] attempt to access beyond end of device
[ 3081.562481][T27693] loop1: rw=12288, want=20544, limit=16368
[ 3081.579484][T27693] attempt to access beyond end of device
[ 3081.586187][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.592716][T27693] attempt to access beyond end of device
[ 3081.599289][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.605276][T27693] attempt to access beyond end of device
[ 3081.610998][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.617035][T27693] attempt to access beyond end of device
[ 3081.622751][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.628729][T27693] attempt to access beyond end of device
[ 3081.634452][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.640534][T27693] attempt to access beyond end of device
[ 3081.646329][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.652426][T27693] attempt to access beyond end of device
[ 3081.658344][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.664296][T27693] attempt to access beyond end of device
[ 3081.670177][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.677910][T27693] attempt to access beyond end of device
[ 3081.684253][T27693] loop1: rw=12288, want=20488, limit=16368
[ 3081.690335][T27693] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3081.710619][T27693] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:54 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0)

10:58:54 executing program 2:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x4bfafc58e591bdfd)

10:58:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

10:58:54 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000004c80)='/dev/dri/renderD128\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0x4020940d, 0x0)

10:58:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

10:58:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:54 executing program 3:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)

10:58:54 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x6, 0x0, 0x0)

[ 3082.104865][T27727] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3082.123652][T27727] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:58:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

[ 3082.160759][T27727] F2FS-fs (loop1): invalid crc_offset: 0
10:58:54 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

[ 3082.241711][T27727] attempt to access beyond end of device
[ 3082.273430][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.316666][T27727] attempt to access beyond end of device
[ 3082.344301][T27727] loop1: rw=12288, want=20496, limit=16368
[ 3082.379565][T27727] attempt to access beyond end of device
[ 3082.388268][T27727] loop1: rw=12288, want=20504, limit=16368
[ 3082.394325][T27727] attempt to access beyond end of device
[ 3082.405559][T27727] loop1: rw=12288, want=20512, limit=16368
[ 3082.411520][T27727] attempt to access beyond end of device
[ 3082.422884][T27727] loop1: rw=12288, want=20520, limit=16368
[ 3082.431493][T27727] attempt to access beyond end of device
[ 3082.439737][T27727] loop1: rw=12288, want=20528, limit=16368
[ 3082.450112][T27727] attempt to access beyond end of device
[ 3082.458172][T27727] loop1: rw=12288, want=20536, limit=16368
[ 3082.464218][T27727] attempt to access beyond end of device
[ 3082.476201][T27727] loop1: rw=12288, want=20544, limit=16368
[ 3082.482143][T27727] attempt to access beyond end of device
[ 3082.492859][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.501333][T27727] attempt to access beyond end of device
[ 3082.525213][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.531139][T27727] attempt to access beyond end of device
[ 3082.566253][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.572181][T27727] attempt to access beyond end of device
[ 3082.615937][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.623165][T27727] attempt to access beyond end of device
[ 3082.639628][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.652403][T27727] attempt to access beyond end of device
[ 3082.664976][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.677708][T27727] attempt to access beyond end of device
[ 3082.683685][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.700459][T27727] attempt to access beyond end of device
[ 3082.723637][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.751198][T27727] attempt to access beyond end of device
[ 3082.773401][T27727] loop1: rw=12288, want=20488, limit=16368
[ 3082.791514][T27727] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3082.808125][T27727] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:55 executing program 3:
r0 = socket(0x2, 0x6, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000080))

10:58:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x40}}, 0x0)

10:58:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

10:58:55 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:58:55 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:55 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0)

10:58:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0xc3b}, 0x20}}, 0x0)

10:58:55 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:58:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x0, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

[ 3083.141476][T27766] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3083.168453][T27766] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3083.244795][T27766] F2FS-fs (loop1): invalid crc_offset: 0
10:58:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='M', 0x1}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x110004, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x2000000000000020)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

10:58:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x0, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

10:58:55 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

[ 3083.373734][T27766] attempt to access beyond end of device
[ 3083.407489][T27766] loop1: rw=12288, want=20488, limit=16368
10:58:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0xc3b}, 0x20}}, 0x0)

[ 3083.449830][T27766] attempt to access beyond end of device
[ 3083.490951][T27766] loop1: rw=12288, want=20496, limit=16368
[ 3083.525299][T27766] attempt to access beyond end of device
10:58:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x0, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

[ 3083.549541][T27766] loop1: rw=12288, want=20504, limit=16368
[ 3083.574002][T27766] attempt to access beyond end of device
[ 3083.593295][T27766] loop1: rw=12288, want=20512, limit=16368
[ 3083.628507][T27766] attempt to access beyond end of device
[ 3083.658386][T27766] loop1: rw=12288, want=20520, limit=16368
10:58:56 executing program 2:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

[ 3083.692533][T27766] attempt to access beyond end of device
10:58:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0xc3b}, 0x20}}, 0x0)

[ 3083.738069][T27766] loop1: rw=12288, want=20528, limit=16368
[ 3083.771969][T27766] attempt to access beyond end of device
[ 3083.795539][T27766] loop1: rw=12288, want=20536, limit=16368
[ 3083.846068][T27766] attempt to access beyond end of device
[ 3083.867931][T27766] loop1: rw=12288, want=20544, limit=16368
[ 3083.894590][T27766] attempt to access beyond end of device
[ 3083.918659][T27766] loop1: rw=12288, want=20488, limit=16368
[ 3083.924587][T27766] attempt to access beyond end of device
[ 3083.963074][T27766] loop1: rw=12288, want=20488, limit=16368
[ 3083.983893][T27766] attempt to access beyond end of device
[ 3084.011423][T27766] loop1: rw=12288, want=20488, limit=16368
[ 3084.035203][T27766] attempt to access beyond end of device
[ 3084.040900][T27766] loop1: rw=12288, want=20488, limit=16368
[ 3084.077023][T27766] attempt to access beyond end of device
[ 3084.090262][T27766] loop1: rw=12288, want=20488, limit=16368
[ 3084.106753][T27766] attempt to access beyond end of device
[ 3084.119595][T27766] loop1: rw=12288, want=20488, limit=16368
[ 3084.131036][T27766] attempt to access beyond end of device
[ 3084.137373][T27766] loop1: rw=12288, want=20488, limit=16368
[ 3084.144091][T27766] attempt to access beyond end of device
[ 3084.150138][T27766] loop1: rw=12288, want=20488, limit=16368
[ 3084.157146][T27766] attempt to access beyond end of device
[ 3084.163106][T27766] loop1: rw=12288, want=20488, limit=16368
[ 3084.169383][T27766] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3084.176649][T27766] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:56 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_mreqn(r0, 0x0, 0x1, 0x0, &(0x7f0000000080))

10:58:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x14, r1, 0x711, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)

10:58:56 executing program 2:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:58:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)

10:58:56 executing program 5:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio1\x00', 0x163f81, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0)

10:58:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x14, r1, 0x711, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)

10:58:57 executing program 2:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:58:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x26, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0x54}}, 0x0)

10:58:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)

[ 3084.615199][T27821] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'.
10:58:57 executing program 5:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio1\x00', 0x163f81, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0)

10:58:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x14, r1, 0x711, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)

[ 3084.675625][T27827] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'.
10:58:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)

10:58:57 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x88402, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:58:57 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

[ 3085.003671][T27816] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3085.040831][T27816] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3085.159502][T27816] F2FS-fs (loop1): invalid crc_offset: 0
[ 3085.300002][T27816] attempt to access beyond end of device
[ 3085.334387][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.346794][T27816] attempt to access beyond end of device
[ 3085.352737][T27816] loop1: rw=12288, want=20496, limit=16368
[ 3085.367660][T27816] attempt to access beyond end of device
[ 3085.380665][T27816] loop1: rw=12288, want=20504, limit=16368
[ 3085.391168][T27816] attempt to access beyond end of device
[ 3085.404067][T27816] loop1: rw=12288, want=20512, limit=16368
[ 3085.414599][T27816] attempt to access beyond end of device
[ 3085.428639][T27816] loop1: rw=12288, want=20520, limit=16368
[ 3085.456469][T27816] attempt to access beyond end of device
[ 3085.476837][T27816] loop1: rw=12288, want=20528, limit=16368
[ 3085.498552][T27816] attempt to access beyond end of device
[ 3085.511165][T27816] loop1: rw=12288, want=20536, limit=16368
[ 3085.536615][T27816] attempt to access beyond end of device
[ 3085.556228][T27816] loop1: rw=12288, want=20544, limit=16368
[ 3085.579083][T27816] attempt to access beyond end of device
[ 3085.605686][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.623189][T27816] attempt to access beyond end of device
[ 3085.631848][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.639102][T27816] attempt to access beyond end of device
[ 3085.644902][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.661353][T27816] attempt to access beyond end of device
[ 3085.678180][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.684647][T27816] attempt to access beyond end of device
[ 3085.695394][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.701434][T27816] attempt to access beyond end of device
[ 3085.712111][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.722319][T27816] attempt to access beyond end of device
[ 3085.730808][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.739929][T27816] attempt to access beyond end of device
[ 3085.749676][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.758399][T27816] attempt to access beyond end of device
[ 3085.764345][T27816] loop1: rw=12288, want=20488, limit=16368
[ 3085.776550][T27816] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3085.783389][T27816] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

10:58:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000600)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

10:58:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0)

10:58:58 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x88402, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:58:58 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

10:58:58 executing program 5:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000004c80)='/dev/dri/renderD128\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x9}, &(0x7f00000002c0), 0x0)

10:58:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0)

10:58:58 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x88402, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:58:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

[ 3086.285816][T27860] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3086.293808][T27860] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3086.324043][T27860] F2FS-fs (loop1): invalid crc_offset: 0
10:58:58 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f00000000c0)=""/4096, 0x1000)

10:58:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0)

[ 3086.830643][T27860] attempt to access beyond end of device
[ 3086.836621][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3086.843472][T27860] attempt to access beyond end of device
[ 3086.857823][T27860] loop1: rw=12288, want=20496, limit=16368
[ 3086.863842][T27860] attempt to access beyond end of device
[ 3086.874793][T27860] loop1: rw=12288, want=20504, limit=16368
[ 3086.883283][T27860] attempt to access beyond end of device
[ 3086.891568][T27860] loop1: rw=12288, want=20512, limit=16368
[ 3086.903685][T27860] attempt to access beyond end of device
[ 3086.912010][T27860] loop1: rw=12288, want=20520, limit=16368
[ 3086.920376][T27860] attempt to access beyond end of device
[ 3086.930318][T27860] loop1: rw=12288, want=20528, limit=16368
[ 3086.939021][T27860] attempt to access beyond end of device
[ 3086.944676][T27860] loop1: rw=12288, want=20536, limit=16368
[ 3086.955622][T27860] attempt to access beyond end of device
[ 3086.961313][T27860] loop1: rw=12288, want=20544, limit=16368
[ 3086.971936][T27860] attempt to access beyond end of device
[ 3086.980062][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3086.992182][T27860] attempt to access beyond end of device
[ 3087.001171][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3087.012213][T27860] attempt to access beyond end of device
[ 3087.026016][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3087.031893][T27860] attempt to access beyond end of device
[ 3087.054887][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3087.060768][T27860] attempt to access beyond end of device
[ 3087.087916][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3087.093836][T27860] attempt to access beyond end of device
[ 3087.104897][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3087.110830][T27860] attempt to access beyond end of device
[ 3087.130425][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3087.139078][T27860] attempt to access beyond end of device
[ 3087.144748][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3087.157703][T27860] attempt to access beyond end of device
[ 3087.163373][T27860] loop1: rw=12288, want=20488, limit=16368
[ 3087.184994][T27860] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3087.191799][T27860] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:58:59 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:58:59 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:58:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00')

10:58:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

10:58:59 executing program 5:
r0 = socket(0x23, 0x80805, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

10:58:59 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

10:58:59 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10123, 0x0)

10:58:59 executing program 4:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x29, 0x10, 0x0, 0x300)

10:59:00 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:59:00 executing program 0:
syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2a4000, &(0x7f00000002c0))

10:59:00 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x17, 0x0, 0x0)

10:59:00 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x29, 0x18, 0x0, 0x300)

[ 3087.994374][T27904] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3088.002504][T27904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3088.051265][T27904] F2FS-fs (loop1): invalid crc_offset: 0
[ 3088.298023][T27904] attempt to access beyond end of device
[ 3088.303918][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.317215][T27904] attempt to access beyond end of device
[ 3088.323145][T27904] loop1: rw=12288, want=20496, limit=16368
[ 3088.335822][T27904] attempt to access beyond end of device
[ 3088.341785][T27904] loop1: rw=12288, want=20504, limit=16368
[ 3088.355862][T27904] attempt to access beyond end of device
[ 3088.361621][T27904] loop1: rw=12288, want=20512, limit=16368
[ 3088.371896][T27904] attempt to access beyond end of device
[ 3088.378162][T27904] loop1: rw=12288, want=20520, limit=16368
[ 3088.384080][T27904] attempt to access beyond end of device
[ 3088.397795][T27904] loop1: rw=12288, want=20528, limit=16368
[ 3088.403728][T27904] attempt to access beyond end of device
[ 3088.424854][T27904] loop1: rw=12288, want=20536, limit=16368
[ 3088.430802][T27904] attempt to access beyond end of device
[ 3088.464312][T27904] loop1: rw=12288, want=20544, limit=16368
[ 3088.474211][T27904] attempt to access beyond end of device
[ 3088.492368][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.502171][T27904] attempt to access beyond end of device
[ 3088.513149][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.525043][T27904] attempt to access beyond end of device
[ 3088.530736][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.536906][T27904] attempt to access beyond end of device
[ 3088.543555][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.549898][T27904] attempt to access beyond end of device
[ 3088.564788][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.571266][T27904] attempt to access beyond end of device
[ 3088.577024][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.583975][T27904] attempt to access beyond end of device
[ 3088.599350][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.607992][T27904] attempt to access beyond end of device
[ 3088.613670][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.621784][T27904] attempt to access beyond end of device
[ 3088.630011][T27904] loop1: rw=12288, want=20488, limit=16368
[ 3088.638594][T27904] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3088.648041][T27904] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:01 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:01 executing program 4:
r0 = socket(0xa, 0x80803, 0x9)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, 0xfffffffffffffda8, {0x80fe, 0x0, 0x0, @empty}}, 0x24)

10:59:01 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10)

10:59:01 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:59:01 executing program 0:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x84, 0x64, 0x0, 0x0)

10:59:01 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

10:59:01 executing program 2:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:59:01 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "986dda77"}, 0x0, 0x0, @planes=0x0})

10:59:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:01 executing program 5:
r0 = socket(0x29, 0x2, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delrule={0x1c}, 0x1c}}, 0x0)

10:59:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:01 executing program 0:
keyctl$join(0x1, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x0)

[ 3089.331596][T27936] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3089.355659][T27936] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3089.427877][T27936] F2FS-fs (loop1): invalid crc_offset: 0
[ 3089.698531][T27936] attempt to access beyond end of device
[ 3089.704298][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3089.725696][T27936] attempt to access beyond end of device
[ 3089.741363][T27936] loop1: rw=12288, want=20496, limit=16368
[ 3089.757286][T27936] attempt to access beyond end of device
[ 3089.770509][T27936] loop1: rw=12288, want=20504, limit=16368
[ 3089.781348][T27936] attempt to access beyond end of device
[ 3089.794443][T27936] loop1: rw=12288, want=20512, limit=16368
[ 3089.810723][T27936] attempt to access beyond end of device
[ 3089.821379][T27936] loop1: rw=12288, want=20520, limit=16368
[ 3089.838521][T27936] attempt to access beyond end of device
[ 3089.852676][T27936] loop1: rw=12288, want=20528, limit=16368
[ 3089.864065][T27936] attempt to access beyond end of device
[ 3089.879088][T27936] loop1: rw=12288, want=20536, limit=16368
[ 3089.892201][T27936] attempt to access beyond end of device
[ 3089.902801][T27936] loop1: rw=12288, want=20544, limit=16368
[ 3089.926960][T27936] attempt to access beyond end of device
[ 3089.932926][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3089.954714][T27936] attempt to access beyond end of device
[ 3089.960524][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3089.974459][T27936] attempt to access beyond end of device
[ 3089.989107][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3089.997836][T27936] attempt to access beyond end of device
[ 3090.003521][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3090.014936][T27936] attempt to access beyond end of device
[ 3090.020741][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3090.032051][T27936] attempt to access beyond end of device
[ 3090.040808][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3090.049481][T27936] attempt to access beyond end of device
[ 3090.057994][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3090.064004][T27936] attempt to access beyond end of device
[ 3090.078447][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3090.092547][T27936] attempt to access beyond end of device
[ 3090.108081][T27936] loop1: rw=12288, want=20488, limit=16368
[ 3090.122630][T27936] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
10:59:02 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:02 executing program 2:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:59:02 executing program 0:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x29, 0x6, 0x0, 0x300)

10:59:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:02 executing program 3:
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

10:59:02 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x29, 0x4, 0x0, 0x300)

[ 3090.147073][T27936] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a1c0)='ethtool\x00')
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0)

10:59:02 executing program 3:
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

10:59:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:02 executing program 2:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all='unlock all\x00', 0x20000189)

10:59:02 executing program 0:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x29, 0x42, 0x0, 0x300)

10:59:03 executing program 3:
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

[ 3090.653439][T27981] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3090.698707][T27981] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3090.765288][T27981] F2FS-fs (loop1): invalid crc_offset: 0
[ 3091.049984][T27981] attempt to access beyond end of device
[ 3091.056238][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.063189][T27981] attempt to access beyond end of device
[ 3091.072837][T27981] loop1: rw=12288, want=20496, limit=16368
[ 3091.081914][T27981] attempt to access beyond end of device
[ 3091.088589][T27981] loop1: rw=12288, want=20504, limit=16368
[ 3091.097811][T27981] attempt to access beyond end of device
[ 3091.103832][T27981] loop1: rw=12288, want=20512, limit=16368
[ 3091.112415][T27981] attempt to access beyond end of device
[ 3091.119608][T27981] loop1: rw=12288, want=20520, limit=16368
[ 3091.127519][T27981] attempt to access beyond end of device
[ 3091.134174][T27981] loop1: rw=12288, want=20528, limit=16368
[ 3091.142029][T27981] attempt to access beyond end of device
[ 3091.149028][T27981] loop1: rw=12288, want=20536, limit=16368
[ 3091.162277][T27981] attempt to access beyond end of device
[ 3091.168897][T27981] loop1: rw=12288, want=20544, limit=16368
[ 3091.184702][T27981] attempt to access beyond end of device
[ 3091.190370][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.204809][T27981] attempt to access beyond end of device
[ 3091.210496][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.233406][T27981] attempt to access beyond end of device
[ 3091.240971][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.254913][T27981] attempt to access beyond end of device
[ 3091.260602][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.276813][T27981] attempt to access beyond end of device
[ 3091.282749][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.298587][T27981] attempt to access beyond end of device
[ 3091.304271][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.319092][T27981] attempt to access beyond end of device
[ 3091.329191][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.341804][T27981] attempt to access beyond end of device
[ 3091.352252][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.364328][T27981] attempt to access beyond end of device
[ 3091.374354][T27981] loop1: rw=12288, want=20488, limit=16368
[ 3091.395008][T27981] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3091.401839][T27981] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:04 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:04 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x29, 0x38, 0x0, 0x300)

10:59:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:04 executing program 3:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

10:59:04 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)

10:59:04 executing program 0:
r0 = socket(0x23, 0x80805, 0x0)
bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @null]}, 0x48)

10:59:04 executing program 3:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

10:59:04 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x24}}, 0x0)

10:59:04 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)

10:59:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:04 executing program 0:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x29, 0x35, 0x0, 0x300)

10:59:04 executing program 3:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

[ 3091.976692][T28020] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3092.017581][T28020] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3092.096460][T28020] F2FS-fs (loop1): invalid crc_offset: 0
[ 3092.344117][T28020] attempt to access beyond end of device
[ 3092.350563][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.358574][T28020] attempt to access beyond end of device
[ 3092.364392][T28020] loop1: rw=12288, want=20496, limit=16368
[ 3092.371405][T28020] attempt to access beyond end of device
[ 3092.382063][T28020] loop1: rw=12288, want=20504, limit=16368
[ 3092.394508][T28020] attempt to access beyond end of device
[ 3092.401870][T28020] loop1: rw=12288, want=20512, limit=16368
[ 3092.409509][T28020] attempt to access beyond end of device
[ 3092.415673][T28020] loop1: rw=12288, want=20520, limit=16368
[ 3092.422577][T28020] attempt to access beyond end of device
[ 3092.428951][T28020] loop1: rw=12288, want=20528, limit=16368
[ 3092.435981][T28020] attempt to access beyond end of device
[ 3092.441717][T28020] loop1: rw=12288, want=20536, limit=16368
[ 3092.455308][T28020] attempt to access beyond end of device
[ 3092.461010][T28020] loop1: rw=12288, want=20544, limit=16368
[ 3092.467141][T28020] attempt to access beyond end of device
[ 3092.472982][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.478991][T28020] attempt to access beyond end of device
[ 3092.486437][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.492944][T28020] attempt to access beyond end of device
[ 3092.498851][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.515092][T28020] attempt to access beyond end of device
[ 3092.520894][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.534629][T28020] attempt to access beyond end of device
[ 3092.540349][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.564643][T28020] attempt to access beyond end of device
[ 3092.570330][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.589512][T28020] attempt to access beyond end of device
[ 3092.604772][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.610688][T28020] attempt to access beyond end of device
[ 3092.630697][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.643731][T28020] attempt to access beyond end of device
10:59:05 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:05 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x88402, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)

10:59:05 executing program 0:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8930, &(0x7f0000000100)={'erspan0\x00', 0x0})

10:59:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:05 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_opts(r0, 0x0, 0x15, 0x0, &(0x7f0000000040))

10:59:05 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

[ 3092.674502][T28020] loop1: rw=12288, want=20488, limit=16368
[ 3092.687748][T28020] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3092.695373][T28020] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:05 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x42)

10:59:05 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:05 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x8980, 0x0)

10:59:05 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

10:59:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1}})

[ 3093.010994][T28060] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
10:59:05 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

[ 3093.056234][T28060] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3093.108980][T28060] F2FS-fs (loop1): invalid crc_offset: 0
[ 3093.159144][T28060] attempt to access beyond end of device
[ 3093.172286][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.198520][T28060] attempt to access beyond end of device
[ 3093.204218][T28060] loop1: rw=12288, want=20496, limit=16368
[ 3093.252140][T28060] attempt to access beyond end of device
[ 3093.268425][T28060] loop1: rw=12288, want=20504, limit=16368
[ 3093.280396][T28060] attempt to access beyond end of device
[ 3093.304498][T28060] loop1: rw=12288, want=20512, limit=16368
[ 3093.310440][T28060] attempt to access beyond end of device
[ 3093.334882][T28060] loop1: rw=12288, want=20520, limit=16368
[ 3093.340826][T28060] attempt to access beyond end of device
[ 3093.353355][T28060] loop1: rw=12288, want=20528, limit=16368
[ 3093.362381][T28060] attempt to access beyond end of device
[ 3093.373740][T28060] loop1: rw=12288, want=20536, limit=16368
[ 3093.382730][T28060] attempt to access beyond end of device
[ 3093.391889][T28060] loop1: rw=12288, want=20544, limit=16368
[ 3093.400940][T28060] attempt to access beyond end of device
[ 3093.409692][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.419864][T28060] attempt to access beyond end of device
[ 3093.428626][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.437878][T28060] attempt to access beyond end of device
[ 3093.443558][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.455084][T28060] attempt to access beyond end of device
[ 3093.460765][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.481985][T28060] attempt to access beyond end of device
[ 3093.493416][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.512808][T28060] attempt to access beyond end of device
[ 3093.521702][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.538479][T28060] attempt to access beyond end of device
[ 3093.544175][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.564533][T28060] attempt to access beyond end of device
[ 3093.570230][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.593244][T28060] attempt to access beyond end of device
[ 3093.603616][T28060] loop1: rw=12288, want=20488, limit=16368
[ 3093.616759][T28060] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3093.623587][T28060] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:06 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:06 executing program 2:
r0 = socket(0x1, 0x3, 0x0)
connect$llc(r0, 0x0, 0x0)

10:59:06 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001140)={0x0, 0x0})

10:59:06 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000100), 0x4)

10:59:06 executing program 5:
r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0)
read$midi(r0, 0x0, 0xf0ffffff7f0000)

10:59:06 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:06 executing program 2:
r0 = socket(0x2, 0x1, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x8, 0x0, &(0x7f0000000080))

10:59:06 executing program 5:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x84, 0x0, 0x0, 0x2)

10:59:06 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0)

10:59:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:06 executing program 0:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, {}, 0x2c, 0x0, 0x0, 0x1000000})

[ 3093.950599][T28097] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3093.967106][T28097] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3093.998334][T28097] F2FS-fs (loop1): invalid crc_offset: 0
10:59:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xc41, 0x4)

[ 3094.148920][T28097] attempt to access beyond end of device
[ 3094.194514][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.209451][T28097] attempt to access beyond end of device
[ 3094.230339][T28097] loop1: rw=12288, want=20496, limit=16368
[ 3094.242119][T28097] attempt to access beyond end of device
[ 3094.252616][T28097] loop1: rw=12288, want=20504, limit=16368
[ 3094.263129][T28097] attempt to access beyond end of device
[ 3094.273171][T28097] loop1: rw=12288, want=20512, limit=16368
[ 3094.289188][T28097] attempt to access beyond end of device
[ 3094.312060][T28097] loop1: rw=12288, want=20520, limit=16368
[ 3094.329707][T28097] attempt to access beyond end of device
[ 3094.359584][T28097] loop1: rw=12288, want=20528, limit=16368
[ 3094.377608][T28097] attempt to access beyond end of device
[ 3094.386196][T28097] loop1: rw=12288, want=20536, limit=16368
[ 3094.392179][T28097] attempt to access beyond end of device
[ 3094.409518][T28097] loop1: rw=12288, want=20544, limit=16368
[ 3094.422781][T28097] attempt to access beyond end of device
[ 3094.433045][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.449507][T28097] attempt to access beyond end of device
[ 3094.459824][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.468455][T28097] attempt to access beyond end of device
[ 3094.475216][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.481153][T28097] attempt to access beyond end of device
[ 3094.493563][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.500688][T28097] attempt to access beyond end of device
[ 3094.515025][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.520989][T28097] attempt to access beyond end of device
[ 3094.537992][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.550584][T28097] attempt to access beyond end of device
[ 3094.563214][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.573918][T28097] attempt to access beyond end of device
[ 3094.587953][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.593915][T28097] attempt to access beyond end of device
[ 3094.602660][T28097] loop1: rw=12288, want=20488, limit=16368
[ 3094.609777][T28097] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3094.617062][T28097] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:07 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:07 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0)

10:59:07 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x15, 0x0, &(0x7f0000000080))

10:59:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:07 executing program 0:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

10:59:07 executing program 2:
bpf$MAP_CREATE(0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

10:59:07 executing program 5:
msgctl$MSG_STAT(0x0, 0xb, 0xffffffffffffffff)

10:59:07 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r0, &(0x7f0000002580)=@can={0x1d, <r1=>0x0}, &(0x7f0000001440)=0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002680)={0x0, 0x1, &(0x7f0000000400)=@raw=[@jmp], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

10:59:07 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0)

10:59:07 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x101001, 0x0)
write$hidraw(r0, &(0x7f0000000100)="520d682889", 0x5)
write$hidraw(r0, &(0x7f00000001c0)='9', 0x1)

10:59:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

[ 3094.938139][T28130] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3094.982657][T28130] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:07 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

[ 3095.057931][T28130] F2FS-fs (loop1): invalid crc_offset: 0
[ 3095.156754][T28130] attempt to access beyond end of device
[ 3095.181460][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.203195][T28130] attempt to access beyond end of device
[ 3095.238661][T28130] loop1: rw=12288, want=20496, limit=16368
[ 3095.258191][T28130] attempt to access beyond end of device
[ 3095.273681][T28130] loop1: rw=12288, want=20504, limit=16368
[ 3095.282500][T28130] attempt to access beyond end of device
[ 3095.291752][T28130] loop1: rw=12288, want=20512, limit=16368
[ 3095.300773][T28130] attempt to access beyond end of device
[ 3095.309716][T28130] loop1: rw=12288, want=20520, limit=16368
[ 3095.318700][T28130] attempt to access beyond end of device
[ 3095.327709][T28130] loop1: rw=12288, want=20528, limit=16368
[ 3095.333720][T28130] attempt to access beyond end of device
[ 3095.347550][T28130] loop1: rw=12288, want=20536, limit=16368
[ 3095.353683][T28130] attempt to access beyond end of device
[ 3095.365725][T28130] loop1: rw=12288, want=20544, limit=16368
[ 3095.371809][T28130] attempt to access beyond end of device
[ 3095.384041][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.393116][T28130] attempt to access beyond end of device
[ 3095.401971][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.410735][T28130] attempt to access beyond end of device
[ 3095.431723][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.447511][T28130] attempt to access beyond end of device
[ 3095.463227][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.472240][T28130] attempt to access beyond end of device
[ 3095.483443][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.493274][T28130] attempt to access beyond end of device
[ 3095.515290][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.530793][T28130] attempt to access beyond end of device
[ 3095.542555][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.551709][T28130] attempt to access beyond end of device
[ 3095.560621][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.571175][T28130] attempt to access beyond end of device
[ 3095.579879][T28130] loop1: rw=12288, want=20488, limit=16368
[ 3095.588893][T28130] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3095.599522][T28130] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:08 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:08 executing program 3:
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xffffffff}, 0x8)

10:59:08 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

10:59:08 executing program 0:
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmmsg$nfc_llcp(r0, &(0x7f0000002740), 0x3af, 0x0)

10:59:08 executing program 2:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8924, &(0x7f0000000100)={'erspan0\x00', 0x0})

10:59:08 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:08 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:08 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8946, &(0x7f0000000000)={'wg2\x00'})

10:59:08 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x19, 0x0, &(0x7f0000000080))

10:59:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a1c0)='ethtool\x00')
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)

[ 3095.909914][T28167] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3095.935596][T28167] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3095.960417][T28167] F2FS-fs (loop1): invalid crc_offset: 0
10:59:08 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x3, 0x7)
splice(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

10:59:08 executing program 2:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000100)={'erspan0\x00', 0x0})

[ 3096.064744][T28167] attempt to access beyond end of device
[ 3096.094913][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.126692][T28167] attempt to access beyond end of device
[ 3096.152600][T28167] loop1: rw=12288, want=20496, limit=16368
[ 3096.174775][T28167] attempt to access beyond end of device
[ 3096.193879][T28167] loop1: rw=12288, want=20504, limit=16368
[ 3096.213647][T28167] attempt to access beyond end of device
[ 3096.234270][T28167] loop1: rw=12288, want=20512, limit=16368
[ 3096.240148][T28167] attempt to access beyond end of device
[ 3096.264234][T28167] loop1: rw=12288, want=20520, limit=16368
[ 3096.270151][T28167] attempt to access beyond end of device
[ 3096.304229][T28167] loop1: rw=12288, want=20528, limit=16368
[ 3096.310142][T28167] attempt to access beyond end of device
[ 3096.324450][T28167] loop1: rw=12288, want=20536, limit=16368
[ 3096.330797][T28167] attempt to access beyond end of device
[ 3096.340606][T28167] loop1: rw=12288, want=20544, limit=16368
[ 3096.347310][T28167] attempt to access beyond end of device
[ 3096.353320][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.361328][T28167] attempt to access beyond end of device
[ 3096.368989][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.376837][T28167] attempt to access beyond end of device
[ 3096.382741][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.390546][T28167] attempt to access beyond end of device
[ 3096.397124][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.405769][T28167] attempt to access beyond end of device
[ 3096.412865][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.419427][T28167] attempt to access beyond end of device
[ 3096.426049][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.433050][T28167] attempt to access beyond end of device
[ 3096.439611][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.448703][T28167] attempt to access beyond end of device
10:59:09 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:09 executing program 5:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x29, 0x4b, 0x0, 0x0)

10:59:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x0)

[ 3096.455247][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.461748][T28167] attempt to access beyond end of device
[ 3096.469371][T28167] loop1: rw=12288, want=20488, limit=16368
[ 3096.478135][T28167] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3096.486966][T28167] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:09 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0xa, 0x7, 0xfd5, 0x1}, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, 0x0, &(0x7f0000000340)=""/76}, 0x20)

10:59:09 executing program 2:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x84, 0x21, 0x0, 0x0)

10:59:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x0)

10:59:09 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@loopback}, 0x10)

[ 3096.685066][T28194] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
10:59:09 executing program 2:
r0 = socket(0x2, 0x1, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x101)

[ 3096.745640][T28194] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3096.785231][T28194] F2FS-fs (loop1): invalid crc_offset: 0
10:59:09 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

10:59:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x0)

[ 3096.888509][T28194] attempt to access beyond end of device
[ 3096.942743][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3096.985041][T28194] attempt to access beyond end of device
[ 3097.035885][T28194] loop1: rw=12288, want=20496, limit=16368
[ 3097.068424][T28194] attempt to access beyond end of device
[ 3097.092133][T28194] loop1: rw=12288, want=20504, limit=16368
[ 3097.115032][T28194] attempt to access beyond end of device
[ 3097.121718][T28194] loop1: rw=12288, want=20512, limit=16368
[ 3097.133391][T28194] attempt to access beyond end of device
[ 3097.142183][T28194] loop1: rw=12288, want=20520, limit=16368
[ 3097.160552][T28194] attempt to access beyond end of device
[ 3097.185404][T28194] loop1: rw=12288, want=20528, limit=16368
[ 3097.201305][T28194] attempt to access beyond end of device
[ 3097.215059][T28194] loop1: rw=12288, want=20536, limit=16368
[ 3097.221070][T28194] attempt to access beyond end of device
[ 3097.232254][T28194] loop1: rw=12288, want=20544, limit=16368
[ 3097.241191][T28194] attempt to access beyond end of device
[ 3097.249810][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3097.259331][T28194] attempt to access beyond end of device
[ 3097.277047][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3097.292996][T28194] attempt to access beyond end of device
[ 3097.314360][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3097.321029][T28194] attempt to access beyond end of device
[ 3097.333665][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3097.344623][T28194] attempt to access beyond end of device
[ 3097.350446][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3097.359161][T28194] attempt to access beyond end of device
[ 3097.364939][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3097.370769][T28194] attempt to access beyond end of device
[ 3097.377816][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3097.383671][T28194] attempt to access beyond end of device
[ 3097.389791][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3097.396481][T28194] attempt to access beyond end of device
[ 3097.402166][T28194] loop1: rw=12288, want=20488, limit=16368
[ 3097.408112][T28194] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3097.416867][T28194] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:11 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x3, 0x7)
splice(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

10:59:11 executing program 5:
r0 = socket$inet(0x2, 0x5, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x891b, 0x0)

10:59:11 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

10:59:11 executing program 0:
r0 = socket(0x1, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a)
recvfrom(r1, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38)

10:59:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

10:59:11 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:11 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

10:59:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

[ 3099.327740][T28229] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
10:59:11 executing program 5:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000004c80)='/dev/dri/renderD128\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0x10, 0x0)

[ 3099.388003][T28229] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3099.449537][T28229] F2FS-fs (loop1): invalid crc_offset: 0
10:59:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

[ 3099.507226][T28229] attempt to access beyond end of device
[ 3099.528039][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3099.548712][T28229] attempt to access beyond end of device
[ 3099.569754][T28229] loop1: rw=12288, want=20496, limit=16368
[ 3099.591988][T28229] attempt to access beyond end of device
10:59:12 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

10:59:12 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0x29, 0x40, 0x1, 0x101, 0x0, @ipv4={[], [], @multicast1}, @private1, 0x7881, 0x1, 0x7, 0x8}})
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x4, 0x20, 0x7f, 0x4, 0x21, @remote, @rand_addr=' \x01\x00', 0x20, 0x40, 0x8, 0x4}})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
r2 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r3, 0x8913, &(0x7f0000000000)={'batadv_slave_1\x00', @ifru_names='hsr0\x00'})
syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00')
ioctl$BINDER_WRITE_READ(r2, 0x4018620d, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000180)={0x1})

[ 3099.622328][T28229] loop1: rw=12288, want=20504, limit=16368
[ 3099.660612][T28229] attempt to access beyond end of device
[ 3099.700309][T28229] loop1: rw=12288, want=20512, limit=16368
[ 3099.730857][T28229] attempt to access beyond end of device
[ 3099.757661][T28229] loop1: rw=12288, want=20520, limit=16368
[ 3099.798471][T28229] attempt to access beyond end of device
[ 3099.824433][T28229] loop1: rw=12288, want=20528, limit=16368
[ 3099.849501][T28229] attempt to access beyond end of device
[ 3099.875331][T28255] binder: 28253:28255 ioctl 4018620d 0 returned -22
[ 3099.885478][T28229] loop1: rw=12288, want=20536, limit=16368
[ 3099.906847][T28255] binder: 28253:28255 ioctl c018620c 20000180 returned -1
[ 3099.908537][T28229] attempt to access beyond end of device
[ 3099.934689][T28229] loop1: rw=12288, want=20544, limit=16368
[ 3099.957692][T28229] attempt to access beyond end of device
[ 3099.962779][T28257] binder: 28253:28257 ioctl 4018620d 0 returned -22
[ 3099.966410][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3099.989183][T28229] attempt to access beyond end of device
[ 3100.002866][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3100.030356][T28229] attempt to access beyond end of device
[ 3100.058721][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3100.105962][T28229] attempt to access beyond end of device
[ 3100.111700][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3100.141114][T28229] attempt to access beyond end of device
[ 3100.174043][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3100.189232][T28229] attempt to access beyond end of device
[ 3100.216691][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3100.222647][T28229] attempt to access beyond end of device
[ 3100.249429][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3100.281734][T28229] attempt to access beyond end of device
[ 3100.311144][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3100.321445][T28229] attempt to access beyond end of device
[ 3100.339522][T28229] loop1: rw=12288, want=20488, limit=16368
[ 3100.351002][T28229] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3100.369547][T28229] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:14 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x89ee, 0x0)

10:59:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

10:59:14 executing program 3:
setuid(0xee00)
r0 = socket$inet(0x2, 0x6, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x894c, 0x0)

10:59:14 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x11, 0x0, 0x0)

10:59:14 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x7, 0x0, &(0x7f0000000080))

10:59:14 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:14 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x89ee, 0x0)

10:59:14 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x79, 0x0, 0x0)

10:59:14 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "986dda77"}, 0x0, 0x0, @planes=0x0})

[ 3102.354606][T28275] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3102.371928][T28275] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3102.384348][T28275] F2FS-fs (loop1): invalid crc_offset: 0
10:59:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

[ 3102.439182][T28275] attempt to access beyond end of device
[ 3102.455056][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3102.461331][T28275] attempt to access beyond end of device
[ 3102.473879][T28275] loop1: rw=12288, want=20496, limit=16368
10:59:15 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

[ 3102.489065][T28275] attempt to access beyond end of device
[ 3102.508525][T28275] loop1: rw=12288, want=20504, limit=16368
[ 3102.521608][T28275] attempt to access beyond end of device
[ 3102.533404][T28275] loop1: rw=12288, want=20512, limit=16368
[ 3102.548556][T28275] attempt to access beyond end of device
[ 3102.575883][T28275] loop1: rw=12288, want=20520, limit=16368
10:59:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

10:59:15 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x89ee, 0x0)

[ 3102.602217][T28275] attempt to access beyond end of device
[ 3102.649303][T28275] loop1: rw=12288, want=20528, limit=16368
[ 3102.687549][T28275] attempt to access beyond end of device
10:59:15 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x24, 0x0, 0x0)

10:59:15 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

[ 3102.716365][T28275] loop1: rw=12288, want=20536, limit=16368
[ 3102.738830][T28275] attempt to access beyond end of device
10:59:15 executing program 0:
r0 = socket$inet(0xa, 0x5, 0x0)
setsockopt$inet_dccp_int(r0, 0x84, 0x1, 0x0, 0x0)

[ 3102.764531][T28275] loop1: rw=12288, want=20544, limit=16368
[ 3102.811505][T28275] attempt to access beyond end of device
10:59:15 executing program 2:
r0 = socket(0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

[ 3102.852640][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3102.884219][T28275] attempt to access beyond end of device
[ 3102.919609][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3102.970222][T28275] attempt to access beyond end of device
[ 3102.993189][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3103.022102][T28275] attempt to access beyond end of device
[ 3103.039002][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3103.052756][T28275] attempt to access beyond end of device
[ 3103.080762][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3103.098678][T28275] attempt to access beyond end of device
[ 3103.112460][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3103.146051][T28275] attempt to access beyond end of device
[ 3103.151755][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3103.171379][T28275] attempt to access beyond end of device
[ 3103.180633][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3103.192292][T28275] attempt to access beyond end of device
[ 3103.202102][T28275] loop1: rw=12288, want=20488, limit=16368
[ 3103.211010][T28275] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3103.230199][T28275] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:15 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:15 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae80, 0x0)

10:59:15 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x1, 0x0)
write$hidraw(r0, &(0x7f0000000100)="520d682889", 0x5)

10:59:15 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:15 executing program 2:
r0 = socket(0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

10:59:15 executing program 0:
r0 = socket(0x29, 0x5, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

10:59:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:16 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:16 executing program 2:
r0 = socket(0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

[ 3103.551779][T28327] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3103.581307][T28327] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3103.591836][T28327] F2FS-fs (loop1): invalid crc_offset: 0
10:59:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

[ 3103.656286][T28327] attempt to access beyond end of device
[ 3103.663734][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3103.683140][T28327] attempt to access beyond end of device
[ 3103.700262][T28327] loop1: rw=12288, want=20496, limit=16368
[ 3103.725379][T28327] attempt to access beyond end of device
[ 3103.762238][T28327] loop1: rw=12288, want=20504, limit=16368
[ 3103.802398][T28327] attempt to access beyond end of device
[ 3103.833838][T28327] loop1: rw=12288, want=20512, limit=16368
[ 3103.855044][T28327] attempt to access beyond end of device
[ 3103.877019][T28327] loop1: rw=12288, want=20520, limit=16368
[ 3103.893455][T28327] attempt to access beyond end of device
[ 3103.918509][T28327] loop1: rw=12288, want=20528, limit=16368
[ 3103.958644][T28327] attempt to access beyond end of device
[ 3103.971618][T28327] loop1: rw=12288, want=20536, limit=16368
[ 3103.980754][T28327] attempt to access beyond end of device
[ 3103.989371][T28327] loop1: rw=12288, want=20544, limit=16368
[ 3103.998288][T28327] attempt to access beyond end of device
[ 3104.007934][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3104.039673][T28327] attempt to access beyond end of device
[ 3104.061479][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3104.078208][T28327] attempt to access beyond end of device
[ 3104.087215][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3104.093196][T28327] attempt to access beyond end of device
[ 3104.104683][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3104.110777][T28327] attempt to access beyond end of device
[ 3104.122831][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3104.133844][T28327] attempt to access beyond end of device
[ 3104.139596][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3104.151758][T28327] attempt to access beyond end of device
[ 3104.162163][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3104.171372][T28327] attempt to access beyond end of device
[ 3104.180126][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3104.189067][T28327] attempt to access beyond end of device
[ 3104.197864][T28327] loop1: rw=12288, want=20488, limit=16368
[ 3104.206861][T28327] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3104.217167][T28327] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:16 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:16 executing program 0:
r0 = socket(0x2, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f0000000100)={'erspan0\x00', 0x0})

10:59:16 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae80, 0x0)

10:59:16 executing program 3:
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:16 executing program 2:
r0 = socket(0x23, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

10:59:17 executing program 3:
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0)

10:59:17 executing program 2:
r0 = socket(0x23, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

10:59:17 executing program 0:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080))

[ 3104.523114][T28372] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
10:59:17 executing program 2:
r0 = socket(0x23, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89ee, 0x0)

[ 3104.585475][T28372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0)

[ 3104.650178][T28372] F2FS-fs (loop1): invalid crc_offset: 0
[ 3104.685859][T28372] attempt to access beyond end of device
[ 3104.700939][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3104.717271][T28372] attempt to access beyond end of device
[ 3104.734558][T28372] loop1: rw=12288, want=20496, limit=16368
[ 3104.749551][T28372] attempt to access beyond end of device
[ 3104.782373][T28372] loop1: rw=12288, want=20504, limit=16368
[ 3104.801790][T28372] attempt to access beyond end of device
[ 3104.822864][T28372] loop1: rw=12288, want=20512, limit=16368
[ 3104.846638][T28372] attempt to access beyond end of device
[ 3104.865600][T28372] loop1: rw=12288, want=20520, limit=16368
[ 3104.880934][T28372] attempt to access beyond end of device
[ 3104.908736][T28372] loop1: rw=12288, want=20528, limit=16368
[ 3104.923095][T28372] attempt to access beyond end of device
[ 3104.954915][T28372] loop1: rw=12288, want=20536, limit=16368
[ 3104.969587][T28372] attempt to access beyond end of device
[ 3104.987859][T28372] loop1: rw=12288, want=20544, limit=16368
[ 3105.003054][T28372] attempt to access beyond end of device
[ 3105.020869][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3105.038345][T28372] attempt to access beyond end of device
[ 3105.051744][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3105.069315][T28372] attempt to access beyond end of device
[ 3105.078537][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3105.087928][T28372] attempt to access beyond end of device
[ 3105.097153][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3105.103139][T28372] attempt to access beyond end of device
[ 3105.115637][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3105.121653][T28372] attempt to access beyond end of device
[ 3105.147333][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3105.161074][T28372] attempt to access beyond end of device
[ 3105.177335][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3105.192631][T28372] attempt to access beyond end of device
[ 3105.201796][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3105.212217][T28372] attempt to access beyond end of device
[ 3105.221409][T28372] loop1: rw=12288, want=20488, limit=16368
[ 3105.230536][T28372] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3105.240943][T28372] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:17 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:17 executing program 3:
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:17 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae80, 0x0)

10:59:17 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x9, 0x0, 0x0)

10:59:17 executing program 2:
socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x89ee, 0x0)

10:59:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0)

10:59:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0)

10:59:18 executing program 0:
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
creat(&(0x7f0000000140)='./bus/file0\x00', 0x0)
rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000100)='./bus/file1\x00')
listxattr(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0)

10:59:18 executing program 2:
socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x89ee, 0x0)

10:59:18 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:18 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae80, 0x0)

[ 3105.688037][T28411] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3105.707024][T28411] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0)

[ 3105.847383][T28411] F2FS-fs (loop1): invalid crc_offset: 0
[ 3106.058496][T28411] attempt to access beyond end of device
[ 3106.085884][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.092050][T28411] attempt to access beyond end of device
[ 3106.110491][T28411] loop1: rw=12288, want=20496, limit=16368
[ 3106.120307][T28411] attempt to access beyond end of device
[ 3106.127292][T28411] loop1: rw=12288, want=20504, limit=16368
[ 3106.134003][T28411] attempt to access beyond end of device
[ 3106.139777][T28411] loop1: rw=12288, want=20512, limit=16368
[ 3106.147387][T28411] attempt to access beyond end of device
[ 3106.153137][T28411] loop1: rw=12288, want=20520, limit=16368
[ 3106.160341][T28411] attempt to access beyond end of device
[ 3106.166830][T28411] loop1: rw=12288, want=20528, limit=16368
[ 3106.194088][T28411] attempt to access beyond end of device
[ 3106.199816][T28411] loop1: rw=12288, want=20536, limit=16368
[ 3106.206731][T28411] attempt to access beyond end of device
[ 3106.213151][T28411] loop1: rw=12288, want=20544, limit=16368
[ 3106.251118][T28411] attempt to access beyond end of device
[ 3106.256989][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.263218][T28411] attempt to access beyond end of device
[ 3106.298039][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.316846][T28411] attempt to access beyond end of device
[ 3106.322556][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.332453][T28411] attempt to access beyond end of device
[ 3106.351299][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.359168][T28411] attempt to access beyond end of device
[ 3106.373112][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.380875][T28411] attempt to access beyond end of device
[ 3106.393508][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.399389][T28411] attempt to access beyond end of device
[ 3106.413577][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.419446][T28411] attempt to access beyond end of device
[ 3106.431564][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.441589][T28411] attempt to access beyond end of device
[ 3106.474694][T28411] loop1: rw=12288, want=20488, limit=16368
[ 3106.480606][T28411] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3106.504524][T28411] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:19 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:19 executing program 2:
socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x89ee, 0x0)

10:59:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:19 executing program 0:

10:59:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0)

10:59:19 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:19 executing program 2:

10:59:19 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0)

10:59:19 executing program 0:

[ 3106.868779][T28453] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3106.878482][T28453] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:19 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

[ 3106.910853][T28453] F2FS-fs (loop1): invalid crc_offset: 0
[ 3107.062165][T28453] attempt to access beyond end of device
[ 3107.068617][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.084548][T28453] attempt to access beyond end of device
[ 3107.091033][T28453] loop1: rw=12288, want=20496, limit=16368
[ 3107.117861][T28453] attempt to access beyond end of device
[ 3107.130287][T28453] loop1: rw=12288, want=20504, limit=16368
[ 3107.138388][T28453] attempt to access beyond end of device
[ 3107.173721][T28453] loop1: rw=12288, want=20512, limit=16368
[ 3107.180045][T28453] attempt to access beyond end of device
[ 3107.223565][T28453] loop1: rw=12288, want=20520, limit=16368
[ 3107.229966][T28453] attempt to access beyond end of device
[ 3107.260018][T28453] loop1: rw=12288, want=20528, limit=16368
[ 3107.288727][T28453] attempt to access beyond end of device
[ 3107.302103][T28453] loop1: rw=12288, want=20536, limit=16368
[ 3107.317729][T28453] attempt to access beyond end of device
[ 3107.327994][T28453] loop1: rw=12288, want=20544, limit=16368
[ 3107.339745][T28453] attempt to access beyond end of device
[ 3107.350258][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.360129][T28453] attempt to access beyond end of device
[ 3107.370941][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.381561][T28453] attempt to access beyond end of device
[ 3107.390973][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.401099][T28453] attempt to access beyond end of device
[ 3107.410635][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.420487][T28453] attempt to access beyond end of device
[ 3107.432118][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.441963][T28453] attempt to access beyond end of device
[ 3107.452452][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.462397][T28453] attempt to access beyond end of device
[ 3107.472230][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.482087][T28453] attempt to access beyond end of device
[ 3107.491352][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.501519][T28453] attempt to access beyond end of device
[ 3107.510974][T28453] loop1: rw=12288, want=20488, limit=16368
[ 3107.521877][T28453] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3107.532722][T28453] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:20 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:20 executing program 4:

10:59:20 executing program 2:

10:59:20 executing program 0:

10:59:20 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:20 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:20 executing program 4:

10:59:20 executing program 0:

10:59:20 executing program 2:

10:59:20 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:20 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:20 executing program 4:

[ 3108.109525][T28488] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3108.192138][T28488] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3108.269472][T28488] F2FS-fs (loop1): invalid crc_offset: 0
[ 3108.416943][T28488] attempt to access beyond end of device
[ 3108.422957][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.453805][T28488] attempt to access beyond end of device
[ 3108.459662][T28488] loop1: rw=12288, want=20496, limit=16368
[ 3108.475532][T28488] attempt to access beyond end of device
[ 3108.481364][T28488] loop1: rw=12288, want=20504, limit=16368
[ 3108.494667][T28488] attempt to access beyond end of device
[ 3108.500448][T28488] loop1: rw=12288, want=20512, limit=16368
[ 3108.524001][T28488] attempt to access beyond end of device
[ 3108.529871][T28488] loop1: rw=12288, want=20520, limit=16368
[ 3108.553514][T28488] attempt to access beyond end of device
[ 3108.559389][T28488] loop1: rw=12288, want=20528, limit=16368
[ 3108.578515][T28488] attempt to access beyond end of device
[ 3108.590434][T28488] loop1: rw=12288, want=20536, limit=16368
[ 3108.609468][T28488] attempt to access beyond end of device
[ 3108.644136][T28488] loop1: rw=12288, want=20544, limit=16368
[ 3108.668493][T28488] attempt to access beyond end of device
[ 3108.682630][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.705480][T28488] attempt to access beyond end of device
[ 3108.722687][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.737697][T28488] attempt to access beyond end of device
[ 3108.747260][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.758045][T28488] attempt to access beyond end of device
[ 3108.773744][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.779642][T28488] attempt to access beyond end of device
[ 3108.791644][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.800636][T28488] attempt to access beyond end of device
[ 3108.811489][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.820114][T28488] attempt to access beyond end of device
[ 3108.839836][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.848645][T28488] attempt to access beyond end of device
[ 3108.857810][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.867063][T28488] attempt to access beyond end of device
[ 3108.872732][T28488] loop1: rw=12288, want=20488, limit=16368
[ 3108.882363][T28488] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3108.891120][T28488] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:21 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:21 executing program 2:

10:59:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, 0x0)

10:59:21 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:21 executing program 4:

10:59:21 executing program 0:

10:59:21 executing program 0:

10:59:21 executing program 4:

10:59:21 executing program 2:

10:59:21 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, 0x0)

[ 3109.203424][T28520] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3109.224707][T28520] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:21 executing program 0:

[ 3109.267467][T28520] F2FS-fs (loop1): invalid crc_offset: 0
[ 3109.570052][T28520] attempt to access beyond end of device
[ 3109.584547][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.606386][T28520] attempt to access beyond end of device
[ 3109.624195][T28520] loop1: rw=12288, want=20496, limit=16368
[ 3109.641425][T28520] attempt to access beyond end of device
[ 3109.670299][T28520] loop1: rw=12288, want=20504, limit=16368
[ 3109.688227][T28520] attempt to access beyond end of device
[ 3109.699838][T28520] loop1: rw=12288, want=20512, limit=16368
[ 3109.713916][T28520] attempt to access beyond end of device
[ 3109.720090][T28520] loop1: rw=12288, want=20520, limit=16368
[ 3109.734913][T28520] attempt to access beyond end of device
[ 3109.740860][T28520] loop1: rw=12288, want=20528, limit=16368
[ 3109.756816][T28520] attempt to access beyond end of device
[ 3109.762799][T28520] loop1: rw=12288, want=20536, limit=16368
[ 3109.777648][T28520] attempt to access beyond end of device
[ 3109.787220][T28520] loop1: rw=12288, want=20544, limit=16368
[ 3109.797616][T28520] attempt to access beyond end of device
[ 3109.808367][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.820963][T28520] attempt to access beyond end of device
[ 3109.830956][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.842134][T28520] attempt to access beyond end of device
[ 3109.852296][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.864074][T28520] attempt to access beyond end of device
[ 3109.870129][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.885493][T28520] attempt to access beyond end of device
[ 3109.895537][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.902476][T28520] attempt to access beyond end of device
[ 3109.915698][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.922609][T28520] attempt to access beyond end of device
[ 3109.938402][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.951831][T28520] attempt to access beyond end of device
[ 3109.961323][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.970816][T28520] attempt to access beyond end of device
[ 3109.980445][T28520] loop1: rw=12288, want=20488, limit=16368
[ 3109.990043][T28520] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3110.001012][T28520] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:22 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:22 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:22 executing program 4:

10:59:22 executing program 0:

10:59:22 executing program 2:

10:59:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, 0x0)

10:59:22 executing program 4:

10:59:22 executing program 0:

10:59:22 executing program 2:

10:59:22 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:22 executing program 2:

[ 3110.502860][T28553] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3110.544138][T28553] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3110.577954][T28553] F2FS-fs (loop1): invalid crc_offset: 0
[ 3110.599080][T28553] attempt to access beyond end of device
[ 3110.613209][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3110.619244][T28553] attempt to access beyond end of device
[ 3110.653862][T28553] loop1: rw=12288, want=20496, limit=16368
[ 3110.659812][T28553] attempt to access beyond end of device
[ 3110.681099][T28553] loop1: rw=12288, want=20504, limit=16368
[ 3110.703388][T28553] attempt to access beyond end of device
[ 3110.709086][T28553] loop1: rw=12288, want=20512, limit=16368
[ 3110.715964][T28553] attempt to access beyond end of device
[ 3110.722094][T28553] loop1: rw=12288, want=20520, limit=16368
[ 3110.746058][T28553] attempt to access beyond end of device
[ 3110.751788][T28553] loop1: rw=12288, want=20528, limit=16368
[ 3110.773529][T28553] attempt to access beyond end of device
[ 3110.779225][T28553] loop1: rw=12288, want=20536, limit=16368
[ 3110.797119][T28553] attempt to access beyond end of device
[ 3110.802819][T28553] loop1: rw=12288, want=20544, limit=16368
[ 3110.831168][T28553] attempt to access beyond end of device
[ 3110.856049][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3110.862135][T28553] attempt to access beyond end of device
[ 3110.873629][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3110.879609][T28553] attempt to access beyond end of device
[ 3110.885587][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3110.891440][T28553] attempt to access beyond end of device
[ 3110.913267][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3110.933605][T28553] attempt to access beyond end of device
[ 3110.939285][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3110.953247][T28553] attempt to access beyond end of device
[ 3110.958936][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3110.975430][T28553] attempt to access beyond end of device
[ 3111.003426][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3111.010547][T28553] attempt to access beyond end of device
[ 3111.035430][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3111.053952][T28553] attempt to access beyond end of device
[ 3111.059741][T28553] loop1: rw=12288, want=20488, limit=16368
[ 3111.078498][T28553] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3111.093020][T28553] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:23 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:23 executing program 0:

10:59:23 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:23 executing program 4:

10:59:23 executing program 2:

10:59:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:23 executing program 2:

10:59:23 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:23 executing program 0:

10:59:23 executing program 4:

10:59:24 executing program 2:

[ 3111.420509][T28580] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3111.450160][T28580] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3111.500417][T28580] F2FS-fs (loop1): invalid crc_offset: 0
[ 3111.603986][T28580] attempt to access beyond end of device
[ 3111.609692][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3111.631671][T28580] attempt to access beyond end of device
[ 3111.639822][T28580] loop1: rw=12288, want=20496, limit=16368
[ 3111.649391][T28580] attempt to access beyond end of device
[ 3111.657250][T28580] loop1: rw=12288, want=20504, limit=16368
[ 3111.667035][T28580] attempt to access beyond end of device
[ 3111.673060][T28580] loop1: rw=12288, want=20512, limit=16368
[ 3111.684196][T28580] attempt to access beyond end of device
[ 3111.690285][T28580] loop1: rw=12288, want=20520, limit=16368
[ 3111.707340][T28580] attempt to access beyond end of device
[ 3111.717457][T28580] loop1: rw=12288, want=20528, limit=16368
[ 3111.728132][T28580] attempt to access beyond end of device
[ 3111.744642][T28580] loop1: rw=12288, want=20536, limit=16368
[ 3111.757223][T28580] attempt to access beyond end of device
[ 3111.764030][T28580] loop1: rw=12288, want=20544, limit=16368
[ 3111.781923][T28580] attempt to access beyond end of device
[ 3111.789865][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3111.822685][T28580] attempt to access beyond end of device
[ 3111.844907][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3111.871391][T28580] attempt to access beyond end of device
[ 3111.903175][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3111.909143][T28580] attempt to access beyond end of device
[ 3111.917339][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3111.933307][T28580] attempt to access beyond end of device
[ 3111.938976][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3111.954090][T28580] attempt to access beyond end of device
[ 3111.960113][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3111.987192][T28580] attempt to access beyond end of device
[ 3111.992969][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3112.023004][T28580] attempt to access beyond end of device
[ 3112.033154][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3112.042980][T28580] attempt to access beyond end of device
[ 3112.052745][T28580] loop1: rw=12288, want=20488, limit=16368
[ 3112.061610][T28580] F2FS-fs (loop1): NAT is corrupt, run fsck to fix it
[ 3112.070587][T28580] F2FS-fs (loop1): Failed to initialize F2FS node manager (-5)
10:59:24 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:24 executing program 4:

10:59:24 executing program 2:

10:59:24 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:24 executing program 0:

10:59:24 executing program 2:

10:59:24 executing program 4:

10:59:24 executing program 0:

10:59:24 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:25 executing program 4:

10:59:25 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:25 executing program 0:

10:59:25 executing program 2:

10:59:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0})

10:59:25 executing program 4:

10:59:25 executing program 2:

10:59:25 executing program 0:

10:59:25 executing program 4:

10:59:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], 0x0, &(0x7f00000000c0), 0x0})

10:59:25 executing program 5:
set_mempolicy(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:25 executing program 2:

10:59:25 executing program 0:

10:59:25 executing program 4:

10:59:25 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], 0x0, &(0x7f00000000c0), 0x0})

10:59:25 executing program 5:
set_mempolicy(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:25 executing program 2:

10:59:25 executing program 0:

10:59:25 executing program 4:

10:59:25 executing program 0:

10:59:25 executing program 2:

10:59:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], 0x0, &(0x7f00000000c0), 0x0})

10:59:26 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:26 executing program 4:

10:59:26 executing program 5:
set_mempolicy(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:26 executing program 2:

10:59:26 executing program 0:

10:59:26 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), 0x0, 0x0})

10:59:26 executing program 2:

10:59:26 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), 0x0, 0x0})

10:59:26 executing program 0:

10:59:26 executing program 4:

10:59:26 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:26 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:26 executing program 2:

10:59:26 executing program 4:

10:59:26 executing program 0:

10:59:26 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), 0x0, 0x0})

10:59:26 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:26 executing program 0:

10:59:26 executing program 2:

10:59:26 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:26 executing program 4:

10:59:26 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:26 executing program 3:

10:59:26 executing program 0:

10:59:26 executing program 2:

10:59:26 executing program 3:

10:59:26 executing program 4:

10:59:26 executing program 0:

10:59:26 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:26 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012400))
getpid()

10:59:27 executing program 3:

10:59:27 executing program 4:

10:59:27 executing program 2:

10:59:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:27 executing program 0:

10:59:27 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012400))
getpid()

10:59:27 executing program 3:

10:59:27 executing program 2:

10:59:27 executing program 4:

10:59:27 executing program 0:

10:59:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:27 executing program 3:

10:59:27 executing program 2:

10:59:27 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012400))
getpid()

10:59:27 executing program 4:

10:59:27 executing program 0:

10:59:27 executing program 3:

10:59:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:27 executing program 4:

10:59:27 executing program 2:

10:59:27 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}], 0x0, &(0x7f0000012400))
getpid()

10:59:27 executing program 0:

10:59:27 executing program 3:

10:59:27 executing program 2:

10:59:27 executing program 3:

10:59:27 executing program 4:

10:59:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:27 executing program 2:

10:59:27 executing program 3:

10:59:27 executing program 0:

[ 3115.393953][T28764] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
10:59:28 executing program 3:

[ 3115.461691][T28764] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:28 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

[ 3115.535637][T28764] F2FS-fs (loop1): invalid crc_offset: 0
[ 3115.595465][T28764] attempt to access beyond end of device
[ 3115.638926][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.666164][T28764] attempt to access beyond end of device
[ 3115.685789][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.698346][T28764] attempt to access beyond end of device
[ 3115.711035][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.719087][T28764] attempt to access beyond end of device
[ 3115.737466][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.748418][T28764] attempt to access beyond end of device
[ 3115.758630][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.770016][T28764] attempt to access beyond end of device
[ 3115.781549][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.792047][T28764] attempt to access beyond end of device
[ 3115.802682][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.815565][T28764] attempt to access beyond end of device
[ 3115.827479][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.846734][T28764] attempt to access beyond end of device
[ 3115.861933][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.881748][T28764] attempt to access beyond end of device
[ 3115.914584][T28764] loop1: rw=12288, want=12296, limit=8287
[ 3115.920415][T28764] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-5)
10:59:28 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}], 0x0, &(0x7f0000012400))
getpid()

10:59:28 executing program 4:

10:59:28 executing program 0:

10:59:28 executing program 3:

10:59:28 executing program 2:

10:59:28 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:28 executing program 4:

10:59:28 executing program 0:

10:59:28 executing program 3:

10:59:28 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:28 executing program 2:

10:59:28 executing program 4:

[ 3116.364192][T28810] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3116.371960][T28810] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3116.440499][T28810] F2FS-fs (loop1): invalid crc_offset: 0
[ 3116.498340][T28810] attempt to access beyond end of device
[ 3116.513680][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.519529][T28810] attempt to access beyond end of device
[ 3116.549609][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.583038][T28810] attempt to access beyond end of device
[ 3116.588880][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.604830][T28810] attempt to access beyond end of device
[ 3116.610597][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.633776][T28810] attempt to access beyond end of device
[ 3116.639513][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.663085][T28810] attempt to access beyond end of device
[ 3116.668764][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.682710][T28810] attempt to access beyond end of device
[ 3116.705512][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.721278][T28810] attempt to access beyond end of device
[ 3116.747208][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.773108][T28810] attempt to access beyond end of device
[ 3116.778794][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.802933][T28810] attempt to access beyond end of device
[ 3116.808621][T28810] loop1: rw=12288, want=12296, limit=8287
[ 3116.837199][T28810] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-5)
10:59:29 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}], 0x0, &(0x7f0000012400))
getpid()

10:59:29 executing program 3:

10:59:29 executing program 0:

10:59:29 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

10:59:29 executing program 2:

10:59:29 executing program 4:

10:59:29 executing program 2:

10:59:29 executing program 3:

10:59:29 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

10:59:29 executing program 0:

10:59:29 executing program 4:

10:59:29 executing program 2:

[ 3117.314796][T28842] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3117.339586][T28842] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3117.367280][T28842] F2FS-fs (loop1): invalid crc_offset: 0
[ 3117.459807][T28842] attempt to access beyond end of device
[ 3117.466817][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.475254][T28842] attempt to access beyond end of device
[ 3117.481051][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.487904][T28842] attempt to access beyond end of device
[ 3117.503362][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.509747][T28842] attempt to access beyond end of device
[ 3117.521636][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.533754][T28842] attempt to access beyond end of device
[ 3117.539537][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.552204][T28842] attempt to access beyond end of device
[ 3117.563574][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.570749][T28842] attempt to access beyond end of device
[ 3117.583938][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.590544][T28842] attempt to access beyond end of device
[ 3117.603064][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.609575][T28842] attempt to access beyond end of device
[ 3117.622262][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.635666][T28842] attempt to access beyond end of device
[ 3117.641469][T28842] loop1: rw=12288, want=12296, limit=8287
[ 3117.655742][T28842] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-5)
10:59:30 executing program 2:

10:59:30 executing program 3:

10:59:30 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

10:59:30 executing program 0:

10:59:30 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0}], 0x0, &(0x7f0000012400))
getpid()

10:59:30 executing program 4:

10:59:30 executing program 4:

10:59:30 executing program 2:

10:59:30 executing program 0:

10:59:30 executing program 3:

10:59:30 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

10:59:30 executing program 2:

10:59:30 executing program 0:

10:59:30 executing program 3:

10:59:30 executing program 4:

10:59:30 executing program 2:

[ 3118.282965][T28872] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3118.388992][T28872] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3118.439891][T28872] F2FS-fs (loop1): invalid crc_offset: 0
[ 3118.452262][T28872] attempt to access beyond end of device
[ 3118.469571][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.479899][T28872] attempt to access beyond end of device
[ 3118.497301][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.510456][T28872] attempt to access beyond end of device
[ 3118.523032][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.529444][T28872] attempt to access beyond end of device
[ 3118.562869][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.568859][T28872] attempt to access beyond end of device
[ 3118.581073][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.590473][T28872] attempt to access beyond end of device
[ 3118.599764][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.609217][T28872] attempt to access beyond end of device
[ 3118.627201][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.646115][T28872] attempt to access beyond end of device
[ 3118.661304][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.678649][T28872] attempt to access beyond end of device
[ 3118.714145][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.741094][T28872] attempt to access beyond end of device
[ 3118.777657][T28872] loop1: rw=12288, want=12296, limit=8287
[ 3118.793823][T28872] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-5)
10:59:31 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0}], 0x0, &(0x7f0000012400))
getpid()

10:59:31 executing program 3:

10:59:31 executing program 0:

10:59:31 executing program 5:

10:59:31 executing program 4:

10:59:31 executing program 2:

10:59:31 executing program 3:

10:59:31 executing program 4:

10:59:31 executing program 2:

10:59:31 executing program 5:

10:59:31 executing program 0:

[ 3119.189100][T28903] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3119.210198][T28903] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:31 executing program 3:

[ 3119.357316][T28903] F2FS-fs (loop1): invalid crc_offset: 0
[ 3119.429324][T28903] attempt to access beyond end of device
[ 3119.446049][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.475911][T28903] attempt to access beyond end of device
[ 3119.505699][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.588914][T28903] attempt to access beyond end of device
[ 3119.612896][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.619512][T28903] attempt to access beyond end of device
[ 3119.642118][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.673800][T28903] attempt to access beyond end of device
[ 3119.679714][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.733580][T28903] attempt to access beyond end of device
[ 3119.739350][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.801480][T28903] attempt to access beyond end of device
[ 3119.824497][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.830941][T28903] attempt to access beyond end of device
[ 3119.851975][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.871730][T28903] attempt to access beyond end of device
[ 3119.878475][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.901141][T28903] attempt to access beyond end of device
[ 3119.919897][T28903] loop1: rw=12288, want=12296, limit=8287
[ 3119.931803][T28903] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-5)
10:59:32 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0}], 0x0, &(0x7f0000012400))
getpid()

10:59:32 executing program 4:

10:59:32 executing program 0:

10:59:32 executing program 2:

10:59:32 executing program 5:

10:59:32 executing program 3:

10:59:32 executing program 2:

10:59:32 executing program 5:

10:59:32 executing program 3:

10:59:32 executing program 0:

10:59:32 executing program 4:

10:59:32 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:32 executing program 2:

10:59:32 executing program 5:

10:59:32 executing program 3:

10:59:32 executing program 4:

10:59:32 executing program 0:

10:59:32 executing program 2:

10:59:33 executing program 5:

[ 3120.475761][T28934] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
10:59:33 executing program 3:

[ 3120.536911][T28934] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3120.585324][T28934] F2FS-fs (loop1): invalid crc value
[ 3120.601785][T28934] F2FS-fs (loop1): invalid crc_offset: 0
[ 3120.621274][T28934] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:33 executing program 0:

10:59:33 executing program 4:

10:59:33 executing program 2:

10:59:33 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:33 executing program 5:

10:59:33 executing program 3:

10:59:33 executing program 2:

10:59:33 executing program 0:

10:59:33 executing program 4:

10:59:33 executing program 5:

10:59:33 executing program 3:

10:59:33 executing program 2:

[ 3120.982875][T28952] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3121.020327][T28952] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:33 executing program 4:

[ 3121.091604][T28952] F2FS-fs (loop1): invalid crc value
[ 3121.109238][T28952] F2FS-fs (loop1): invalid crc_offset: 0
[ 3121.129681][T28952] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:33 executing program 0:

10:59:33 executing program 5:

10:59:33 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:33 executing program 3:

10:59:33 executing program 2:

10:59:33 executing program 4:

10:59:33 executing program 0:

10:59:33 executing program 5:

10:59:34 executing program 3:

10:59:34 executing program 2:

10:59:34 executing program 4:

10:59:34 executing program 0:

10:59:34 executing program 3:

10:59:34 executing program 5:

[ 3121.630382][T28968] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3121.719308][T28968] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3121.821552][T28968] F2FS-fs (loop1): invalid crc value
[ 3121.852036][T28968] F2FS-fs (loop1): invalid crc_offset: 0
[ 3121.864820][T28968] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:34 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {0x0, 0x0, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:34 executing program 3:

10:59:34 executing program 5:

10:59:34 executing program 2:

10:59:34 executing program 0:

10:59:34 executing program 4:

10:59:34 executing program 5:

10:59:34 executing program 3:

10:59:34 executing program 4:

10:59:34 executing program 2:

10:59:34 executing program 0:

10:59:34 executing program 4:

[ 3122.307308][T28990] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3122.318971][T28990] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3122.368388][T28990] F2FS-fs (loop1): invalid crc value
[ 3122.386233][T28990] F2FS-fs (loop1): invalid crc_offset: 0
[ 3122.393891][T28990] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:35 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {0x0, 0x0, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:35 executing program 3:

10:59:35 executing program 5:

10:59:35 executing program 4:

10:59:35 executing program 2:

10:59:35 executing program 0:

10:59:35 executing program 3:

10:59:35 executing program 0:

10:59:35 executing program 4:

10:59:35 executing program 5:

10:59:35 executing program 2:

10:59:35 executing program 0:

[ 3122.745384][T29008] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3122.788355][T29008] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3122.883465][T29008] F2FS-fs (loop1): invalid crc value
[ 3122.892179][T29008] F2FS-fs (loop1): invalid crc_offset: 0
[ 3122.907693][T29008] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:35 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {0x0, 0x0, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:35 executing program 0:

10:59:35 executing program 2:

10:59:35 executing program 3:

10:59:35 executing program 5:

10:59:35 executing program 4:

10:59:35 executing program 5:

10:59:35 executing program 3:

10:59:35 executing program 4:

10:59:35 executing program 2:

10:59:35 executing program 0:

10:59:35 executing program 4:

[ 3123.231419][T29029] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3123.284701][T29029] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3123.317502][T29029] F2FS-fs (loop1): invalid crc value
[ 3123.324920][T29029] F2FS-fs (loop1): invalid crc_offset: 0
[ 3123.331171][T29029] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:35 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700), 0x0, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:35 executing program 2:

10:59:35 executing program 5:

10:59:35 executing program 0:

10:59:35 executing program 3:

10:59:35 executing program 4:

10:59:36 executing program 5:

10:59:36 executing program 3:

10:59:36 executing program 4:

10:59:36 executing program 0:

10:59:36 executing program 2:

10:59:36 executing program 3:

[ 3123.644101][T29043] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3123.651899][T29043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3123.753991][T29043] F2FS-fs (loop1): invalid crc value
[ 3123.779082][T29043] F2FS-fs (loop1): invalid crc_offset: 0
[ 3123.796838][T29043] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:36 executing program 0:

10:59:36 executing program 2:

10:59:36 executing program 5:

10:59:36 executing program 4:

10:59:36 executing program 3:

10:59:36 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700), 0x0, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:36 executing program 3:

10:59:36 executing program 4:

10:59:36 executing program 5:

10:59:36 executing program 0:

10:59:36 executing program 2:

[ 3124.083365][T29062] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3124.105365][T29062] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:36 executing program 3:

10:59:36 executing program 5:

[ 3124.144506][T29062] F2FS-fs (loop1): invalid crc value
[ 3124.162078][T29062] F2FS-fs (loop1): invalid crc_offset: 0
[ 3124.168300][T29062] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:36 executing program 0:

10:59:36 executing program 4:

10:59:36 executing program 2:

10:59:36 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700), 0x0, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:36 executing program 5:

10:59:36 executing program 3:

10:59:36 executing program 0:

10:59:37 executing program 4:

10:59:37 executing program 2:

10:59:37 executing program 3:

10:59:37 executing program 5:

10:59:37 executing program 0:

10:59:37 executing program 4:

10:59:37 executing program 3:

10:59:37 executing program 2:

[ 3124.800752][T29081] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3124.845902][T29081] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3124.880991][T29081] F2FS-fs (loop1): invalid crc value
[ 3124.904557][T29081] F2FS-fs (loop1): invalid crc_offset: 0
[ 3124.910270][T29081] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:37 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)='\x00'/16, 0x10, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:37 executing program 5:

10:59:37 executing program 0:

10:59:37 executing program 4:

10:59:37 executing program 3:

10:59:37 executing program 2:

10:59:37 executing program 2:

10:59:37 executing program 5:

10:59:37 executing program 4:

10:59:37 executing program 0:

10:59:37 executing program 3:

[ 3125.198248][T29102] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3125.206296][T29102] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3125.216780][T29102] F2FS-fs (loop1): invalid crc value
[ 3125.223730][T29102] F2FS-fs (loop1): invalid crc_offset: 0
[ 3125.229570][T29102] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:37 executing program 0:

10:59:37 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)='\x00'/16, 0x10, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:37 executing program 3:

10:59:37 executing program 2:

10:59:38 executing program 4:

10:59:38 executing program 5:

10:59:38 executing program 2:

10:59:38 executing program 3:

10:59:38 executing program 0:

[ 3125.585831][T29117] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3125.618548][T29117] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:38 executing program 0:

10:59:38 executing program 4:

10:59:38 executing program 5:

[ 3125.718079][T29117] F2FS-fs (loop1): invalid crc value
[ 3125.725742][T29117] F2FS-fs (loop1): invalid crc_offset: 0
[ 3125.731700][T29117] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:38 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00')
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)

10:59:38 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)='\x00'/16, 0x10, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0x0, 0x8be)

10:59:38 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)

10:59:38 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$netlink(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)={0x10}, 0x10}, {&(0x7f0000002940)={0x10}, 0x10}], 0x2}, 0x0)

10:59:38 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
fchdir(r0)
syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00')
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

10:59:38 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000dc0)={0x18, r1, 0x3, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}}, 0x0)

10:59:38 executing program 4:
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x11], 0x0}, 0x41}, 0x80, 0x0}, 0x0)

10:59:38 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x10001)

10:59:38 executing program 0:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000040), 0x4)
sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000002d00)="13", 0x1}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2042)

[ 3126.416900][T29135] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3126.455943][T29147] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[ 3126.472255][T29135] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3126.511055][T29135] F2FS-fs (loop1): invalid crc value
10:59:39 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x10001)

[ 3126.530706][T29135] F2FS-fs (loop1): invalid crc_offset: 0
[ 3126.563451][T29135] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[ 3126.570281][T29147] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
10:59:39 executing program 4:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, 0x0, 0x37cb1133)
socket$inet(0x2, 0x3, 0x33)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

[ 3126.599265][T29147]  loop5: p2 < >
10:59:39 executing program 0:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2042)

10:59:39 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)='\x00'/24, 0x18, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:39 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="97"})

10:59:39 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0})

10:59:39 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
fchdir(r0)
syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00')
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

10:59:39 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0x0)

10:59:39 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000080), 0x10)

[ 3127.045918][T29180] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3127.054015][T29180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3127.068571][T29180] F2FS-fs (loop1): invalid crc value
[ 3127.079312][T29180] F2FS-fs (loop1): invalid crc_offset: 0
[ 3127.088155][T29179] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[ 3127.099145][T29180] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[ 3127.106652][T29179] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 3127.115364][T29179]  loop5: p2 < >
10:59:39 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0})

10:59:39 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f00000003c0))

10:59:39 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)='\x00'/24, 0x18, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:39 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
fchdir(r0)
syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00')
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

10:59:39 executing program 4:
waitid(0x3, 0x0, 0x0, 0x80000008, 0x0)

10:59:39 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0/file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0/file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90}, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000006a40)="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", 0x2000, &(0x7f000000efc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0})

[ 3127.389823][T29206] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3127.398112][T29206] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3127.413460][T29206] F2FS-fs (loop1): invalid crc value
[ 3127.419253][T29206] F2FS-fs (loop1): invalid crc_offset: 0
[ 3127.425637][T29206] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:40 executing program 4:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50)

[ 3127.552917][T29208] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[ 3127.564379][T29208] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 3127.571634][T29208]  loop5: p2 < >
[ 3127.593459][T29220] binder: 29219:29220 ioctl 4018620d 0 returned -22
[ 3127.601800][T29220] binder: 29219:29220 ioctl c0306201 200001c0 returned -11
[ 3127.751269][T29220] binder: 29219:29220 ioctl 4018620d 0 returned -22
10:59:40 executing program 3:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
pipe(&(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000180))
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

10:59:40 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)='\x00'/24, 0x18, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

10:59:40 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
fchdir(r0)
syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00')
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

10:59:40 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)

10:59:40 executing program 2:
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$alg(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000140)='i', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002340)=""/85, 0x55}], 0x1, &(0x7f0000003b00)=""/27, 0x1b}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0)

10:59:40 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)

[ 3128.157404][T29241] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3128.236012][T29241] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:40 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x2000072c, &(0x7f0000deaff0)={0x2, 0x3}, 0x10)
sendto$inet(r0, &(0x7f0000000540)="1a", 0x1, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)

[ 3128.290471][T29241] F2FS-fs (loop1): invalid crc value
[ 3128.326111][T29246] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[ 3128.340244][T29241] F2FS-fs (loop1): invalid crc_offset: 0
10:59:40 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
ftruncate(r0, 0xcf01)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

[ 3128.370179][T29246] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 3128.380305][T29241] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:40 executing program 4:
r0 = socket$inet6(0xa, 0x200000000003, 0x87)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="5529cf2a", 0x4, 0x4c080, 0x0, 0x0)

[ 3128.415909][T29246]  loop5: p2 < >
10:59:41 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
ftruncate(r0, 0xcf01)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

10:59:41 executing program 0:
socketpair(0x18, 0x0, 0x0, &(0x7f0000000080))

10:59:44 executing program 3:
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)="94", 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

10:59:44 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)='\x00'/28, 0x1c, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000003"], 0x1c}}, 0x0)

10:59:44 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
fchdir(r0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

10:59:44 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00')

10:59:44 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
ftruncate(r0, 0xcf01)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

10:59:44 executing program 0:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x31, &(0x7f0000000180)="15", 0x1)

[ 3131.897832][T29306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3131.906689][T29302] ldm_validate_privheads(): Disk read failed.
[ 3131.928926][T29302]  loop5: p2 < >
[ 3131.957643][T29302] loop5: partition table partially beyond EOD, truncated
[ 3131.989775][T29310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3132.009531][T29301] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3132.018450][T29301] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3132.041314][T29301] F2FS-fs (loop1): invalid crc value
[ 3132.045127][T29302] loop5: p2 size 2 extends beyond EOD, truncated
[ 3132.050811][T29301] F2FS-fs (loop1): invalid crc_offset: 0
[ 3132.059455][T29301] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:44 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)='\x00'/28, 0x1c, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:44 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
ftruncate(r0, 0xcf01)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

10:59:44 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r0=>0x0}, 0x0)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f719b4d04fe7ff7fc6e5539b360a0e4c546a9b375094370890e0878fdb1ac6e7049b75b4956c409a472a5b67f3988f7ef31952a981ffe8d178708c523c921b1b4d4b0a169b71d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d939934a3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, r0}})
semget$private(0x0, 0x0, 0x0)
semop(0x0, &(0x7f0000000100), 0x2d)
semtimedop(0x0, 0x0, 0x0, 0x0)

10:59:44 executing program 4:
r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key$fscrypt_provisioning(&(0x7f0000000180)='fscrypt-provisioning\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)={0x1, 0x0, "78e6f11e7970b3f538607c65fadf82e9"}, 0x18, r0)
keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0)

10:59:44 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
fchdir(r0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[ 3132.554137][T29323] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3132.554154][T29323] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3132.557351][T29323] F2FS-fs (loop1): invalid crc value
[ 3132.557582][T29323] F2FS-fs (loop1): invalid crc_offset: 0
[ 3132.557603][T29323] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[ 3132.601931][T29336] ldm_validate_privheads(): Disk read failed.
[ 3132.602264][T29336]  loop5: p2 < >
[ 3132.602274][T29336] loop5: partition table partially beyond EOD, truncated
[ 3132.602490][T29336] loop5: p2 size 2 extends beyond EOD, truncated
10:59:45 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)

10:59:45 executing program 4:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
close(r0)

10:59:45 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)='\x00'/28, 0x1c, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:45 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

10:59:45 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r0=>0x0}, 0x0)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, r0}})
semget$private(0x0, 0x0, 0x0)
semop(0x0, &(0x7f0000000100), 0x2d)
semtimedop(0x0, 0x0, 0x0, 0x0)

10:59:45 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
fchdir(r0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[ 3133.191877][T29361] ldm_validate_privheads(): Disk read failed.
10:59:45 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916fb", 0x14}], 0x1}, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

10:59:45 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

10:59:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916fb", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

[ 3133.276754][T29361]  loop5: p2 < >
[ 3133.276767][T29361] loop5: partition table partially beyond EOD, truncated
10:59:46 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

10:59:46 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00')
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[ 3133.277019][T29361] loop5: p2 size 2 extends beyond EOD, truncated
[ 3133.457199][T29364] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3133.457263][T29364] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
10:59:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000052008102a00f80854a36b8ab959916fb", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

[ 3133.488287][T29364] F2FS-fs (loop1): invalid crc value
10:59:46 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000000000006618", 0x1e, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

[ 3133.494966][T29364] F2FS-fs (loop1): invalid crc_offset: 0
[ 3133.495178][T29364] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:46 executing program 4:
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000440)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000480)='g', 0x1}], 0x1}, 0x50)

10:59:46 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
ftruncate(r0, 0xcf01)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

[ 3133.712668][T29386] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
10:59:46 executing program 5:
syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00')
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[ 3133.712724][T29386] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 3133.713045][T29386]  loop5: p2 < >
[ 3133.945768][T29401] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3133.945914][T29401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3133.970442][T29401] F2FS-fs (loop1): invalid crc value
[ 3133.971809][T29401] F2FS-fs (loop1): invalid crc_offset: 0
[ 3133.971967][T29401] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:46 executing program 0:
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getpid()
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='memory.current\x00', 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e}})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x74f)
openat$cgroup_ro(r1, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0)

10:59:46 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
ftruncate(r0, 0xcf01)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

10:59:46 executing program 3:
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x11c2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7}, 0x8008, 0x0, 0x5cf32be2}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e}})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x74f)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=""/78, 0x4e}}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)

10:59:46 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000000000006618", 0x1e, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:46 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x547c5, 0x7fff})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x2b, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040))
close(r0)
close(r1)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

[ 3134.114447][T29409] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[ 3134.150557][T29409] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 3134.189563][T29409]  loop5: p2 < >
10:59:46 executing program 5:
syz_open_procfs(0x0, 0x0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

10:59:46 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
ftruncate(r0, 0xcf01)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

[ 3134.446351][T29421] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3134.507215][T29421] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3134.542474][T29430] ldm_validate_privheads(): Disk read failed.
[ 3134.549354][T29430]  loop5: p2 < >
[ 3134.597618][T29421] F2FS-fs (loop1): invalid crc value
[ 3134.625310][T29430] loop5: partition table partially beyond EOD, truncated
[ 3134.649713][T29421] F2FS-fs (loop1): invalid crc_offset: 0
[ 3134.682148][T29430] loop5: p2 size 2 extends beyond EOD, truncated
10:59:47 executing program 2:
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
ftruncate(r0, 0xcf01)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164)

10:59:47 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x547c5, 0x7fff})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x2b, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040))
close(r0)
close(r1)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

[ 3134.701578][T29421] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
10:59:47 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000000000006618", 0x1e, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

10:59:47 executing program 5:
syz_open_procfs(0x0, 0x0)
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[ 3135.187311][T29455] ==================================================================
[ 3135.196316][T29455] BUG: KASAN: null-ptr-deref in PageHuge+0x19/0x170
[ 3135.202921][T29455] Read of size 8 at addr 0000000000000000 by task syz-executor.2/29455
[ 3135.211156][T29455] 
[ 3135.213500][T29455] CPU: 1 PID: 29455 Comm: syz-executor.2 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0
[ 3135.223393][T29455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3135.233457][T29455] Call Trace:
[ 3135.236769][T29455]  dump_stack+0x198/0x1fb
[ 3135.241116][T29455]  ? PageHuge+0x19/0x170
[ 3135.245372][T29455]  ? PageHuge+0x19/0x170
[ 3135.249630][T29455]  kasan_report.cold+0x5/0x37
[ 3135.254328][T29455]  ? PageHuge+0x19/0x170
[ 3135.258593][T29455]  check_memory_region+0x13d/0x180
[ 3135.263719][T29455]  PageHuge+0x19/0x170
[ 3135.267804][T29455]  find_get_incore_page+0x165/0x2e0
[ 3135.273012][T29455]  ? __lock_acquire+0x1672/0x55d0
[ 3135.278051][T29455]  mincore_page+0x1e/0x310
[ 3135.282482][T29455]  __mincore_unmapped_range+0x171/0x2c0
[ 3135.288048][T29455]  mincore_unmapped_range+0x61/0xc0
[ 3135.293258][T29455]  ? __mincore_unmapped_range+0x2c0/0x2c0
[ 3135.299089][T29455]  __walk_page_range+0x178e/0x22c0
[ 3135.304246][T29455]  ? walk_page_test+0x78/0x180
[ 3135.309030][T29455]  walk_page_range+0x20d/0x400
[ 3135.313811][T29455]  ? __walk_page_range+0x22c0/0x22c0
[ 3135.319131][T29455]  __do_sys_mincore+0x279/0x7a0
[ 3135.324002][T29455]  do_syscall_64+0x2d/0x70
[ 3135.328437][T29455]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3135.334339][T29455] RIP: 0033:0x45d5f9
[ 3135.338250][T29455] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3135.357873][T29455] RSP: 002b:00007f727214dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001b
[ 3135.366320][T29455] RAX: ffffffffffffffda RBX: 0000000000020ac0 RCX: 000000000045d5f9
[ 3135.374339][T29455] RDX: 0000000020000080 RSI: 0000000000400000 RDI: 0000000020000000
[ 3135.382315][T29455] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
[ 3135.390302][T29455] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
[ 3135.398263][T29455] R13: 00007ffc6d50134f R14: 00007f727214e9c0 R15: 000000000118cf4c
[ 3135.406235][T29455] ==================================================================
[ 3135.414289][T29455] Disabling lock debugging due to kernel taint
[ 3135.448989][T29454] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3135.475542][T29454] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 3135.517583][T29454] F2FS-fs (loop1): invalid crc value
[ 3135.542066][T29461] ldm_validate_privheads(): Disk read failed.
[ 3135.548549][T29461]  loop5: p2 < >
[ 3135.555653][T29454] F2FS-fs (loop1): invalid crc_offset: 0
[ 3135.601938][T29454] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[ 3135.602029][T29461] loop5: partition table partially beyond EOD, truncated
[ 3135.611695][T29461] loop5: p2 size 2 extends beyond EOD, truncated
10:59:48 executing program 0:
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getpid()
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='memory.current\x00', 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e}})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x74f)
openat$cgroup_ro(r1, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0)

10:59:48 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010d00)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010e00)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010f00)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000011100)="00000005", 0x4, 0x201380}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187e", 0x1f, 0x205fe0}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000012400))
getpid()

[ 3135.684857][ T3914] ldm_validate_privheads(): Disk read failed.
[ 3135.691979][ T3914]  loop5: p2 < >
[ 3135.771919][T29455] Kernel panic - not syncing: panic_on_warn set ...
[ 3135.773037][ T3914] loop5: partition table partially beyond EOD, 
[ 3135.778572][T29455] CPU: 1 PID: 29455 Comm: syz-executor.2 Tainted: G    B             5.9.0-rc5-next-20200915-syzkaller #0
[ 3135.778587][T29455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3135.785879][ T3914] truncated
[ 3135.796095][T29455] Call Trace:
[ 3135.796118][T29455]  dump_stack+0x198/0x1fb
[ 3135.796134][T29455]  ? hugetlb_register_node+0x1c0/0x270
[ 3135.796154][T29455]  panic+0x347/0x7c0
[ 3135.826252][T29455]  ? __warn_printk+0xf3/0xf3
[ 3135.831232][T29455]  ? preempt_schedule_common+0x59/0xc0
[ 3135.837592][T29455]  ? PageHuge+0x19/0x170
[ 3135.842273][T29455]  ? preempt_schedule_thunk+0x16/0x18
[ 3135.842521][ T3914] loop5: p2 size 2 extends beyond EOD, 
[ 3135.847639][T29455]  ? trace_hardirqs_on+0x51/0x1c0
[ 3135.847659][T29455]  ? PageHuge+0x19/0x170
[ 3135.863395][T29455]  ? PageHuge+0x19/0x170
[ 3135.867805][T29455]  end_report+0x58/0x5e
[ 3135.871437][ T3914] truncated
[ 3135.872801][T29455]  kasan_report.cold+0xd/0x37
[ 3135.872822][T29455]  ? PageHuge+0x19/0x170
[ 3135.885677][T29455]  check_memory_region+0x13d/0x180
[ 3135.891680][T29455]  PageHuge+0x19/0x170
[ 3135.896542][T29455]  find_get_incore_page+0x165/0x2e0
[ 3135.901741][T29455]  ? __lock_acquire+0x1672/0x55d0
[ 3135.906761][T29455]  mincore_page+0x1e/0x310
[ 3135.911176][T29455]  __mincore_unmapped_range+0x171/0x2c0
[ 3135.916726][T29455]  mincore_unmapped_range+0x61/0xc0
[ 3135.921928][T29455]  ? __mincore_unmapped_range+0x2c0/0x2c0
[ 3135.928209][T29455]  __walk_page_range+0x178e/0x22c0
[ 3135.934211][T29455]  ? walk_page_test+0x78/0x180
[ 3135.939171][T29455]  walk_page_range+0x20d/0x400
[ 3135.944276][T29455]  ? __walk_page_range+0x22c0/0x22c0
[ 3135.951315][T29455]  __do_sys_mincore+0x279/0x7a0
[ 3135.956391][T29455]  do_syscall_64+0x2d/0x70
[ 3135.961347][T29455]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3135.967731][T29455] RIP: 0033:0x45d5f9
10:59:48 executing program 3:
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x11c2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7}, 0x8008, 0x0, 0x5cf32be2}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e}})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x74f)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=""/78, 0x4e}}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)

[ 3135.972592][T29455] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3135.992192][T29455] RSP: 002b:00007f727214dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001b
[ 3136.000607][T29455] RAX: ffffffffffffffda RBX: 0000000000020ac0 RCX: 000000000045d5f9
[ 3136.008574][T29455] RDX: 0000000020000080 RSI: 0000000000400000 RDI: 0000000020000000
[ 3136.016542][T29455] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
[ 3136.024513][T29455] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
[ 3136.032479][T29455] R13: 00007ffc6d50134f R14: 00007f727214e9c0 R15: 000000000118cf4c
[ 3136.041769][T29455] Kernel Offset: disabled
[ 3136.046100][T29455] Rebooting in 86400 seconds..