dda3b62b68614654a44ca8b0bf2d428069ebb8ead5ee004b29f8bbafdba1fab61770d9de9a6cd916f623a6b004694d8cea40e3c49c133634745706bceb22cfedf8b092514819529b49cee34661137ea1b0f1ae09f5a167b1591025c015f0a50916255d408a8c49bd298ef230f63f8d2588f0fd35f59ed858a1ea697659da0bee8439a3b4f1dc54450ef6f6d564e356ec45af2ba06a5f3754823ee95bfada7346937edbe06e29e296f6d98524076154e0c89f03d77bb3ea956530703ce9feb030c57b726c44d33656ce1a89394ca1d5bec9a5f12204e992a219029716b0ab3b8273079066456c97d03bedd1f309793d277e1fe0b0343b61ab5219fce4db4d0338b2e7cbe0a6b3e2ebfa55e76b59978eae07d49b51d900f09a2f680b0fe1c0bcef6069eedda1e0311c272e6a4ac6cbd18d2392f3f25ac2e189a3505ee5ff6e8da60c942316d398803e2eacf82ee10a39197fb328dd47bd70b63c53b71f55a2a2c911eee0ae1321098832c32c5d1407b1573ce624b9b6a54b81907180f2b86a9f9f92fc6a0b543c706ad6bf5784e8078fd6b53f2fb0c69815ec3b05ac99e80c69de8b25aee19aade105cac37d31afc6adb124b", 0x1000}, {&(0x7f00000024c0)="db6280323b38bd9e58ed1f3002e77822215223576a7eabb764ebde57d0ff4ceaeaedcc124c0721990f65de09c18c32ab13b7d4aef3c5dcf1c2cb7a35b77669b73eceb0a9d5b763f51f0c5472ed83e9a528188e8e1c5502b1d5a75d4a9524b3be9446ba5327b77b44096583859abe50cba34726c66e77fce17c55b74edb54175b1ddd863d9c3b79d1956294f78d67af5c3a5795ab99758ff7fecd7f4ec49378155d0db53a055064129ffb806bd35ee914e9e0214f2e514663ca8231ca4cac9b68c136c2380fe72f7ff0ecdc8d816b4cf168fcc41a54731956bf5e789e", 0xdc}, {&(0x7f00000025c0)="62e9a70e4b1ed7c32a7b7e5788757906", 0x10}, {&(0x7f0000002600)="35fbb1e4c0dbd66ae1ad0292f9482f25f4a25f083832244dfb3e681ffbcea0763519215f4821962a46af3fd547d110a7dd41fe02e3495823d322f20c4e6ab02e3ebb81ba5d6fcf7e2a39fc7c93d89e8900f89c88858998f735b122757d4b56673d1d4228f8da0a6d19de622afba4e3d26fe1962024a29cd9b4b402bbe900f2fab39cfcbb4b456164511de5acdf9f64cd68b6", 0x92}, {&(0x7f00000026c0)="0794357ce8c8e2b86e249ae1451bbb6c106567d975f6996af313540db64a68c344c83258adcb829ee3548bcd5a997b05fe8b89dcfeb4897b7924f28217d0df50626f997938693a86ba6cd3f9351eb4939c3d09bf15bcc190f8208097f92042d20f3e99be41e039d949eaec89f91ba0c5d4ce0c1653bb024d8154aef5fb3622da1a0602fc009b0d732b59c8a920d424d979ae3ac0c9a0b3ba6523588f3c32318acecb90237576e08a8a9916554837765064c1568f2714ed19b7eb0ef2ee154b58de356c66dc93ea953db7afe6ad3070a381f3740980a4485158aed79a795600c650c8", 0xe2}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="72c2e6d0c6c8d397b8ac3c4016d330ee0d8a1cd4373bafca8398a5eafba44c0fbb367d28145672b2ef7b8b80285c089e8f138d2500282a86365f4f1d27c6b567e66509f91fee42fcbea82f257a0d42611964f0e997b0fc321a39edeec13de4b1e6de9510e7ebba2aaf98c95ba099418e6fe2a8f0a2fa4b9c4c0945dc92f86f6ecb32e8aa0fdd7683cd09162912b294171646b61e814ef7d23c0bf9326bba0f518c60abd442c176d1c22e9cbbc03bd0b92f9eea239d8480fedbf89c6a0516fa7a1ad1bcdcf1757b", 0xc7}, {&(0x7f00000038c0)="563d73405a000e0780bfa85f983c5c944ce891c453834b80486509abe7825c35b5502c682c61cdc357a8026aea66d35b1bfb7712d2", 0x35}, {&(0x7f0000003900)="de19fc8cac8a47517aa09da7fef4872dd6ae3c79cca2b4afe3bc9e18fff0b099ac4c8d031f593c6817f69f849e6952c6b1b8f0430082c70a207bfcbcea361ecdef2d13e2416d1e42d7c64ad7910f73adff4832f09da488e748dafffb6c25076389aaa9b7f204986c9a64ad0a3446fa50d9c70541a47dd2036c400da14277599a05d960396d5c10cde4d60c076686a7a6dcda5d4a58a8495a849f3df9960bff33f861f30c5ed3b0950c10741b7dbdefbfaad197f00dddd2f7f6852eb9fe6a75cb46b92b09b65afe3a46383fc9", 0xcc}], 0x9, &(0x7f0000003b40)=[@sndinfo={0x20, 0x84, 0x2, {0x800, 0xe, 0x2, 0x1, r8}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x400}}], 0x38, 0x4000040}, {&(0x7f0000003b80)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000003bc0)="bd1f32014c6bd93d5b814c933806329b219e4a4f3543335eca72152817f92d6805effc7671c3dd937558416c4491009e03d1597dc51105875551c4285fad30e97ab02438c1e65982759d3e569508fa1af07c7879ed1e77f494f95e83959c1640d18ae7c005018bc0a3bb60eb0b9dc16f4cebb09ffbc8a04616517980feac805aaf6ff01c9012ef3f780c9d83ce4d58cd649c85", 0x93}, {&(0x7f0000003c80)="521bbd759c52961e6f476d4c1ebbe8b476a603644416d830ae3844cf3e22458251cd7ce8eb7eb28a11d43838398eb2258dceb072518202109a5e2ab40f5c09f7ddb3ed603152c96882a52acac6a30ca93240d763cd41e1c6135dd98453077246dbb1416da2115ef4b0e3a90e13b7c5798c983455d4b892d2d624df3e67980bf8535c9990379cbfa1329469e4f5f351a02d9931258e119f29cb0995d2cd1673fd6f68dac7d2e10aec8ff42631a808ba3edda73b053581c777ac2099145c", 0xbd}, {&(0x7f0000003d40)="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", 0x1000}], 0x3, &(0x7f0000004e00)=[@init={0x18, 0x84, 0x0, {0x400, 0x3, 0x7, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x2da, 0x8000, 0x100, 0x38, 0x1, 0x67, 0x2, r9}}], 0x68, 0x4008000}, {&(0x7f0000004e80)=@in6={0xa, 0x4e22, 0x8000, @ipv4}, 0x1c, &(0x7f0000006240)=[{&(0x7f0000004ec0)="c10a8581851488445ddfee0e01e28af50ea6b93ccb59fdcd4017b8fc12c02ccbfb9623a2318b96df67a9f8f29eff65ec95087561df8a5666f4e453f55446b9c7d52277e3707ccf2c2289911460e1d44197632f2267f7455e40f1f5", 0x5b}, {&(0x7f0000004f40)="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", 0x1000}, {&(0x7f0000005f40)="298c844e2a84a8744cebb2639790773f57f9b68fe0555e1ad7dcb9f9f7481d243a51f70eeb8f56fa1392cb5b00493add30bcd02547711692b0d7c05efdd594fb7c753a515e08ba82d6e898f2982391a9c1e01b18fc22a2ea74343df98c7519644d9613a1e31b063c8f824b174f134a32c67e9dab1ff20cf290d182", 0x7b}, {&(0x7f0000005fc0)="f209677e9bd2361810c5fb7240cb", 0xe}, {&(0x7f0000006000)="ec02ff160e7391b7533cfc62f5bcc013fcfbbc320303552e3c20c64ddb181b4ddac19d4a8a00f0f51375150dc8b8b43d09e5414548afb94424e15756cadb2b61032aa44d527812465c603ab9888e7156fef76f3154344ced2ba143", 0x5b}, {&(0x7f0000006080)="b5b4a74bd0dabda044b8", 0xa}, {&(0x7f00000060c0)="b37d1d1aabb71c6b9ad06e5fdd833f868f2dbc04d7278bdfe2f55aaa638ea8858e5c59fae6de02392da146bf06d926c500521dd3917053e5ad510a4ca535b669af47149643780462cf1f61bded05464f3b0694f431d54bb1291266530dc8e750b6db7a97750ff60d00a6ff9b0d000a25a8b119984231b846afca21b74f3414877984645b7aa9f6e002b38cf1b42b14aa5ba9703c4839d2287955918911c89014a99ab28bca43a8d6250b13261d2a1de5312bc5ce350b43d3033bbeda7210fcb970e56f56caf1b585a0eb16776ffaebf9966a57ce6d670b3c0ac8f3c8dea2868f743f78f1b7e3dbef47878002e153571cba04366095", 0xf5}, {&(0x7f00000061c0)="dedbab5473263387b5b979ccd453ee4808bb45dfaeaf783a9baf0d475a9d9f6c24d6c92e695d39b16b186509d891f6536c3e68124e6592caf8f6a114f318c4250455b2e0ebe08a67c30d62baffa49338f450fe393dad11ecdd20dab8182f729332c45b8b5b6159ba902b0524705b62d00054960ec759", 0x76}], 0x8, &(0x7f00000062c0)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x3, 0x7, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x101}}], 0x30, 0x4}], 0x7, 0x81) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:12 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0xf2488a3567a74c49, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='cgroup.stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x6}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_setup(0xffffffff, &(0x7f0000000340)) io_setup(0x7ff, &(0x7f00000003c0)=0x0) io_destroy(r4) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x40000000, &(0x7f0000000780)="030d6036a10b7f93226d6a6c7ebc0b79f7a07fe702f3daa2335d3352a32534957d465194a21842b31da9b8cc250cb3e229af17c8ea80f1826c0117d574aab34bed0353924cb8b1d280bfeddbfcbc3d37e232993f99187b9431840f654ba8df86e971381765add6886c7ce78216", &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="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") mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='fuseblk\x00', 0x40, &(0x7f00000004c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3ff}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xff}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x400}}], [{@context={'context', 0x3d, 'root'}}, {@appraise_type='appraise_type=imasig'}, {@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'security'}}]}}) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:12 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 975.471320] FAULT_INJECTION: forcing a failure. [ 975.471320] name failslab, interval 1, probability 0, space 0, times 0 23:44:12 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 975.541827] CPU: 0 PID: 21999 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #265 [ 975.549263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.558645] Call Trace: [ 975.561263] dump_stack+0x1c4/0x2b4 [ 975.564924] ? dump_stack_print_info.cold.2+0x52/0x52 [ 975.570186] should_fail.cold.4+0xa/0x17 [ 975.574282] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 975.579543] ? graph_lock+0x170/0x170 [ 975.583369] ? __lock_acquire+0x7ec/0x4ec0 [ 975.587629] ? print_usage_bug+0xc0/0xc0 [ 975.591717] ? graph_lock+0x170/0x170 [ 975.596023] ? find_held_lock+0x36/0x1c0 [ 975.600128] ? __lock_is_held+0xb5/0x140 [ 975.604239] ? ___might_sleep+0x1ed/0x300 [ 975.608420] ? arch_local_save_flags+0x40/0x40 [ 975.613033] ? perf_trace_lock_acquire+0x15b/0x800 [ 975.618016] __should_failslab+0x124/0x180 [ 975.622276] should_failslab+0x9/0x14 [ 975.626103] kmem_cache_alloc_node+0x26e/0x730 [ 975.626510] IPVS: ftp: loaded support on port[0] = 21 [ 975.630714] ? print_usage_bug+0xc0/0xc0 [ 975.630804] __alloc_skb+0x119/0x770 [ 975.643998] ? skb_scrub_packet+0x490/0x490 [ 975.648356] ? find_held_lock+0x36/0x1c0 [ 975.652454] ? mark_held_locks+0xc7/0x130 [ 975.656638] ? __local_bh_enable_ip+0x160/0x260 [ 975.661328] ? __local_bh_enable_ip+0x160/0x260 [ 975.661349] ? lockdep_hardirqs_on+0x421/0x5c0 [ 975.661370] ? trace_hardirqs_on+0xbd/0x310 [ 975.670637] ? lock_release+0x970/0x970 [ 975.670656] ? lock_sock_nested+0xe2/0x120 [ 975.670680] sock_wmalloc+0x16d/0x1f0 [ 975.687047] ? skb_set_owner_w+0x360/0x360 23:44:13 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 975.687069] ? __local_bh_enable_ip+0x160/0x260 [ 975.687096] pppoe_sendmsg+0x359/0x8f0 [ 975.687121] ? pppoe_getname+0x1c0/0x1c0 [ 975.687142] ? apparmor_socket_sendmsg+0x29/0x30 [ 975.696091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.696110] ? security_socket_sendmsg+0x94/0xc0 [ 975.696126] ? pppoe_getname+0x1c0/0x1c0 [ 975.696148] sock_sendmsg+0xd5/0x120 [ 975.704126] ___sys_sendmsg+0x51d/0x930 [ 975.704152] ? copy_msghdr_from_user+0x580/0x580 [ 975.704173] ? get_pid_task+0xd6/0x1a0 [ 975.714532] ? lock_downgrade+0x900/0x900 [ 975.714551] ? check_preemption_disabled+0x48/0x200 [ 975.714579] ? __fget_light+0x2e9/0x430 [ 975.727138] ? fget_raw+0x20/0x20 [ 975.727171] ? proc_fail_nth_write+0x9e/0x210 [ 975.727191] ? proc_cwd_link+0x1d0/0x1d0 [ 975.756452] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 975.770598] ? sockfd_lookup_light+0xc5/0x160 [ 975.770619] __sys_sendmmsg+0x246/0x6d0 [ 975.770647] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 975.770669] ? __lock_is_held+0xb5/0x140 [ 975.770694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.770718] ? check_preemption_disabled+0x48/0x200 [ 975.783549] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 975.783565] ? fput+0x130/0x1a0 [ 975.783584] ? do_syscall_64+0x9a/0x820 [ 975.783599] ? do_syscall_64+0x9a/0x820 [ 975.783620] ? lockdep_hardirqs_on+0x421/0x5c0 [ 975.793233] ? trace_hardirqs_on+0xbd/0x310 [ 975.793249] ? __ia32_sys_read+0xb0/0xb0 [ 975.793267] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 975.793286] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 975.793311] __x64_sys_sendmmsg+0x9d/0x100 [ 975.793333] do_syscall_64+0x1b9/0x820 [ 975.803907] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 975.803928] ? syscall_return_slowpath+0x5e0/0x5e0 [ 975.803944] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 975.803981] ? trace_hardirqs_on_caller+0x310/0x310 [ 975.803998] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 975.804019] ? prepare_exit_to_usermode+0x291/0x3b0 [ 975.811295] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 975.811321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 975.811335] RIP: 0033:0x457579 [ 975.811355] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 975.811364] RSP: 002b:00007f96ce178c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 975.811387] RAX: ffffffffffffffda RBX: 00007f96ce178c90 RCX: 0000000000457579 [ 975.820040] RDX: 0000000000000069 RSI: 00000000200000c0 RDI: 0000000000000003 [ 975.820051] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 23:44:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 975.820061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96ce1796d4 [ 975.820071] R13: 00000000004c34ed R14: 00000000004d52b0 R15: 0000000000000004 23:44:13 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:13 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = memfd_create(&(0x7f0000000500)='net/tcp6\x00', 0x7) sendmmsg$nfc_llcp(r1, &(0x7f00000027c0)=[{&(0x7f0000000540)={0x27, 0x1, 0x0, 0x7, 0x3, 0x5, "31f58de616fb28b27523461d8ab2259edd0356a1098f8aacce6a144cec0f009a4b324b18d793e02a996198446c710b90893806899a74df78e4a1202b0bd9e8", 0x1c}, 0x60, &(0x7f0000000600)=[{&(0x7f00000005c0)="f2127792a1d03c18afe24dd1150cd72b6306d975d815c107e7db78b105458f78e0a1fcce7c063cc01941bdc3b9bf759efa7927ca033d7892dd", 0x39}], 0x1, &(0x7f0000002900)=ANY=[@ANYBLOB="b000000000000000150100000700000043137cdcbc26bbbfaf239a196ff8678ec89c89df8bea1fd57308bef9a638098471819167e97f65b65fe5f17b7a3a7810ce1c49adb279dae836d78ef492687837747dae0506020e5d4e8cf8cd4b3e5854a39e0a10939c5828ad60c56e7fed477c7f59e6768c7687d2b7d4b6c22c8d5d9d3bac089a1495390375770dcc3659df1b0101207760c7c1eaf892f70b0c0b97db5b9943a4344eabdaac00000000000000ea287c402c73e8cbf9d693ed3933950c0c8fb09a99283c02cd1cbf695550cc215b0eabe6cd79aa24f1f04bb396c1ae1e651be9b0607a8eefade927878cf6052ca9d475547ec38255f436ac374f920ca76a7aa2"], 0xb0, 0x20040080}, {&(0x7f0000000700)={0x27, 0x1, 0x0, 0x3, 0x200, 0x2, "b949f401e19d2f2d675c3f0bba45275d10a7e6ca6ad67580d0cff9d4dc08ffae8325c0cfd350a096f5488d6e83b2980f8f1cbb0f966705f7da433825e2cb0b", 0x3d}, 0x60, &(0x7f0000000a80)=[{&(0x7f0000000780)="2806db5c2f0a6eab0b2e1182e2c0efb9de399f99bcedf911e06e9f03a520589e4dbeb8fbd88d406b14ead0653fadd76b4207a01395c9cec26c37467cedf22c2a8f6e989c108f02666c446cba229965ba0f7a85e19c9075cd421e92b62740472b312bcccf98d377bb0b165c655fbcb911f8133a78a564c404d93dd052934dc86afb3b39a3f61762b53756061ad3be8efdb64d2aed57b1efd20c53ce6fe4786ce5af2902ed59bd30fb148d7c1545ec97fcc5ee7bd4599d79836b9e089f9670ff8f286e302c52e1fc692527babae08cfa1d0f11e631ed9a53b5357e23628fd16945072821d64164505a316c950c0701d816a78a", 0xf2}, {&(0x7f0000000880)="6e94a0b0b79311d0c2e924b0410d000a1e58665557da0eed3378820ad7e8292e451646d66f35eaf7bbd6b0c0c515174bc233898ac0109cd12226945f67ff76be914db5090e63f82f42eb50fd20c961c001c9f9e6e5e1ef163106a8064c94535bc0b39c80dc3dd349ea35ef9a9a65a4b70f9934c7e9579c3b99c1d8921aab3186f7b869", 0x83}, {&(0x7f0000000940)="d5752dd902beab8d1460db3b52f86ba5498a07cb7670013e480045a45a8283945e6e765c980e49e982160512b4418b4015eb63d2535c3ba089bf1091e7bd401ad9b280999f97d983b5d8cf148650a1f7", 0x50}, {&(0x7f00000009c0)="721f068836f2174a74f374313251953b263dc1435f920b99a9f29b8572eee8bef235381843b9d3d031c175dbf3e8123cfcbdb90afef3c926807abcce58b5412ef5ca6ec698c64aff1f39038584416a2d3f33c73134f9d01510811c4cef06b9f18fb2b9c074983c0c9106da2a5705e45e91aa47f7768f927aa0e31d0f053d3b6867cd1b097696de531d2dc17d3f73975c232eaee2a9c35eca", 0x98}], 0x4, &(0x7f0000000ac0)={0x48, 0x119, 0x20, "2292b12179a267ecfdbc93370f964b1683bec663cc5307ec8f824d991c0a5fbf23dd2e9ea88a3ee8933bb6325be5089e4ed702"}, 0x48, 0x4000000}, {&(0x7f0000000b40)={0x27, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x3, "9dfd19a67a966c9192b3d15129199dd3edc421f48b3682036d5b402c2d0a7900ab497a4c05102438dd8beb31b744fa6cb54569f5566755a4a15f3a069c7704", 0x3c}, 0x60, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)="9043aaec18c46def2540bd1e399ff2eaa846684460be3f64ce644a4e45ae63219424ca45003fae7fd7233697dbda96b5fd8c66c37270375e06bd753834822af9fd271b519ab020d600258c180f290a81b536ba73859b8b2c", 0x58}, {&(0x7f0000000c40)="2e05970cd7097510422e007b56db69e965da3d507fe4c53aab3ab203be20e328967696c1d4140c7c6ddbb7001cd16d9d973dd4c08024a627858d6b2effc4415f39a7795cfa0f8b9f2becdcc287a22ec3cb067838e295acc09b3e2a707e01170b221e295a912f15a102244eee1ba7706e4f3d41e5b20555f0cb59696a7f9301f9736f99882d72aed4832eded9ba7b6cbd4726746e48bd56afad41867fe1ba39a800dcffc4c6ac09eb89866acba3b86e49cf9c2feab827a5cafa8e10ac2787985fc4a6709109351c3add76930fd5a0f5a20b92a5406ebb3d1766cb722d973d", 0xde}, {&(0x7f0000000d40)="af1e946a862f4edc9e6558499b037a2e433376f4207da2d71ff2666104f6f0fbdea7f05481d470bef80addf659e643a6603a90ddec19f62d8f1d0635476b1ca2254ed68d8b76cb15d691b8e71db18e6f8dec25534fb4ef9a7ce1f43c84393bb9a1b36a9ed342d4e803cddfc55be8", 0x6e}, {&(0x7f0000000dc0)="503dbbc47a4a6abd4bfc55c04642eb043a9aca93b62563022b282c11", 0x1c}, {&(0x7f0000000e00)="6d34ac195893e2f50910dd7168408c78affd64c3e0a3fe7a0a42fda635c55cde7c0de860301dbf74726b95d18eacd9d0da52fa81d490ac828183eed4144a3d272ae73721fd78a7e9a32ce4620f4a01fca1ee580455fb938e1c839be2aa8b05bb04d39d9c8335c78458c29820f9d9d22df7c45c856928f35cd0c1c995ede16ab8a9b6bb0b6e52759ecd8e9d2ef3d4c62663238c0737ca6aba9c8de18ca1c2142a9bd0", 0xa2}, {&(0x7f0000000ec0)="e919d17c376fac5aa4358954c35c2501b75ff76c3d9cdd597e02f77dbc04d31af1393e850ef0bfa592eac3f2b7e6237b6b068a4a9cb7f56111514ae2ab351fd58db55a848ffa86d5391675a528284630d5bd786a39a1d8bfa9ab1d2955b97f8fce62601605ea48103acf9d392e09c026d400bdac092dafde06d8c94d6f7d896a08298be53842c2e894fe0357d807f7ebcf49ac5134f337ff5278", 0x9a}, {&(0x7f0000000f80)="348f2e952ceaadf202efec206c5b51847967", 0x12}], 0x7, &(0x7f0000001040)={0x50, 0x198, 0x8, "87a05e5a45c6edf787022fe4a3ff74548d000f4a58b8f562327d148db720f9a2660c19dc18d634e24fa284ce95e247b86d7c68155adcfc089931569d3ca4"}, 0x50, 0x40}, {&(0x7f00000010c0)={0x27, 0x0, 0x0, 0x3, 0xffff, 0x0, "2b699ad5daa7b3ecb21611268a0269cdd8a3de588bc21fc02df668ac06a11d43257db0febceb510c2ff2d2ffb6f4464cad646285536d19e076b03605145f27", 0x1a}, 0x60, &(0x7f0000002280)=[{&(0x7f0000001140)="00e244f55ae339f1ceed07f99ea95c895e825975156f7c9fa145b1e81abf797db80e51cb3ff12c59c5fd9daa58a21a549594cc72363906f74e8ab37e423d7c19e3dcc84654f82e16d51e132813c3da90fd9ed1fa199484dc1504b1cc5ef6493ca24a810158bfd030f52d37", 0x6b}, {&(0x7f00000011c0)="7b813ded302d09cc2a61f8030cc16687fa4b9ce8e1aa889b57b8d124b6ce0cbd0c2ff08f79e0bc438029edfb40a09e394550ae5330af3f8fe17b662c5ff429bc8b8e38c95dfc7c592052fdac06e8742aa78d8a1b9b405575eeec332fc2bc116c9668d11c94dd78079b67410c4b5f88452450836fe3d10bd7dfb35f3da07e007ca700", 0x82}, {&(0x7f0000001280)="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", 0x1000}], 0x3, &(0x7f00000022c0)={0xe0, 0x1bf, 0x1, "9d6d906d41abe56a21ee004f47697d950521700aadb9b71e7651876ddad4e76807e5bc4233ffd18a695d150e6f245f5ea6e62e49db788199b0261acd307aef56e6f035144050c1707e60614b39a969fb1638a9bf23f297a1aacdcca8916b812259b79caa1b398929464e396de1f0ad7ae5ac2b875440f77ec18cf1585500f32fe0062eb9f43c68e187cd856d3599138d678f90e98f75fa7f13f6a3cc456e1e349dc1599fb7da989b3c93c8595c82127c2f6ec95bc2621c9d639cd5f247c0bd3265bb6383f7a05338e3e9835e"}, 0xe0, 0x4000}, {&(0x7f00000023c0)={0x27, 0x1, 0x2, 0x7, 0xb3, 0x7d5, "96d2d8a380306c21be5a4bb2db2842ccb8ab2982ff55ac59e1b6da1ca4ce23acd67c7340307e0607829b598275d684461cc2465aecc65de0871f2fb84fae65", 0x31}, 0x60, &(0x7f00000026c0)=[{&(0x7f0000002440)="b993e424ce8f78469adc3a9fd083ba3934bc89f93c976ab81cef418ea82fd8c09ec322a3060ad065521ca2b5fe853476368a5fcc6c08da9e4ecd37eb19d407e1a42e2a3e6babdc057a4d336b3ffe15f8d55c4d2d56aa5acc6bcf927a3b2887081478de447e7221b3ecc3d751f1f9097624b2505d7f81dc9216d55e30eb4cc08fef3c6e47e4562b0019ad9219db79d7ca6417f3fce31d2d187465f7905ee73b5748e12a3de70f385845777aba6802ffb015e892a1b7f9491eb9ab9461bc2bc7b56a4b75", 0xc3}, {&(0x7f0000002540)="af77c149b7758826e179b9d34810599b90a14efd41e7b409c5c38e714d8a22060ecaadb59153020048cfbccdbb5dc18376f077d0da51f2ced30b032d9f6fdb936531004c99a69d613583d7ff7797ddb1108aab03f14bd55e78f67be8892667cd05ab63025a637ca87f20291b5927c576157e1e093b190785f20f", 0x7a}, {&(0x7f00000025c0)="67b1294a0e9d1f57a0492ee37705048cd1259af4b77dfbe6e4925acc4672c5b2341d8cbe9a1d2c3f10da9c73c0b17e74f47d283145a58464821fbea19ae2a6d4aa141b2cf7cc9fffa57f24b9a2809cb753f30fde7f41102b54a5ccd22dcb5746d30212d62255dc467f5de45470f05b6e92cd77f8c7ce40f78eb10bcf441f341c2f62119900f85247d1f4848523387dc8a5e282d672dadde61b125e1829397605adcbbd1e8841a23625d03867b86eea55f395c37af1db95631e5c5d95fe3ad8f32aa8d29207015ff2f39d657e65ea05d574fd72663dd4807d05c75bbc8036b228ba63955d390dab589ea5b61452121fb7add3", 0xf2}], 0x3, &(0x7f0000002700)={0xb0, 0x1, 0x40, "f2de6ee2395cd80bd099fa8fa422c89acc58bdaf5c79161fab7b0f79f29c0bea285a609de08f93b79bb6674c940003fbbfefcb8745db8a5fbbe740b25c1184d4217aff4e8d8362483963075434d825427240b2efba7ac5038a187986065ed0aadb22fecf1458cc757c6b53bbc4a88919849d7d5cde41f1e75681a8e5ec69e9cfa0ed04ef2be48ba692e987bb82f3f66f919cb13fa3afd55782321db514745f"}, 0xb0, 0x40}], 0x5, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x400, 0x173, 0x152, 0xffffffff, 0x0, 0x8}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96d4e23d9853f8ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6fbb2aa86a05f0cf0fca44b56ba45670df23536bc1c1e4b3741651030559d1e52bc4e36ff59dd8"}, 0xb9) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="9130db48a94327c7830bc94972f792a838d1722a0b4a429bfe6843e5821fd7b017b30ef13db657e490fd39d90f47cfe723cbf3a7ff3a97e38fdcb0ca9af983fc29143429ff5836c45c9824d7f6a3840c18"], 0x1) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0xa805000000000000) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]}) io_setup(0x0, &(0x7f00000000c0)) r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x448000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x3, 0x0, 0x1, &(0x7f0000000100)=[0x0], 0x1}, 0x20) 23:44:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:13 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:13 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000200)={0x7, 0xfffffffffffffff8, 0x7, {0x77359400}, 0x1b, 0x8}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x3, 0xf5}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x2}, @in6={0xa, 0x4e23, 0x400, @empty, 0x7}], 0x2c) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:13 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x46) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getdents64(r0, &(0x7f0000000ac0)=""/229, 0xe5) fallocate(r0, 0x4a, 0x6, 0x20) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fchown(r0, r1, r2) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="5b0909000000e3f2feba1943561e50ba1177c40354634a514a5d90f3a17ae2"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) bind$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @hyper}, 0x10) socketpair$inet6(0xa, 0x800, 0x80000000, &(0x7f0000000080)) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000003c0)='./control/file0\x00') keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) close(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000004c0)={{0x3, 0x7, 0x3, 0x2, '\x00', 0x5}, 0x0, [0x9, 0x0, 0xdc, 0xffffffffffffff9b, 0x0, 0x5, 0x7f, 0x100d, 0xffffffffffffffc0, 0x0, 0x2, 0x1f2, 0x5, 0xc8a, 0x8, 0x81, 0xfff, 0x2, 0xfffffffffffff800, 0x7, 0xb851, 0x2, 0x9, 0x0, 0x7ff, 0x200, 0x2, 0x8, 0x9, 0x7, 0x0, 0x80000001, 0x5, 0x9, 0x22, 0x400, 0x4, 0x1ff, 0x2, 0x5, 0x8, 0x6, 0x1, 0x3, 0x100000000, 0x3, 0x3, 0x3ff, 0x73, 0x1, 0x7, 0x3, 0x3f, 0x0, 0x3, 0x9, 0x7, 0x6, 0x3ff, 0x8, 0x513, 0x0, 0x7ff, 0x2, 0x44, 0xb91e, 0x80000001, 0x2, 0x8, 0x7, 0x2, 0x3, 0x545, 0x8, 0x8000, 0x1f, 0x8, 0x4, 0x7ff, 0x5, 0x80000001, 0x80000001, 0x200, 0x9, 0x7fffffff, 0x100, 0x2400000000, 0x9, 0x0, 0x4, 0x6, 0x40, 0x3c7a, 0x33, 0xaebb, 0x7, 0x4, 0x3, 0x6, 0x6, 0x4, 0x4, 0x7, 0x13, 0x0, 0x1, 0x1, 0x7, 0x1c, 0x6, 0x77, 0x100000001, 0x6, 0x401, 0x81, 0x59, 0x9, 0x200, 0xd690, 0xad3, 0x5, 0x2, 0x0, 0x5, 0x5, 0x3, 0xfff, 0x5], {0x0, 0x989680}}) 23:44:13 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:13 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:14 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)=0x8, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200000000011}) unshare(0x60000) io_destroy(0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_destroy(r1) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f00000001c0)='btrfs\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:14 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x68}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 23:44:14 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x200080, 0x0) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:14 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x69}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:14 executing program 5: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$UHID_INPUT2(r1, &(0x7f0000000840)={0xc, 0xd4, "101ea6fa28e63385ae25dc0719525fb5dd43b58ca499c5347cc43de59b6aaa3537eb23a8272932562fa13af66507491f3d5d442e38d49875251fbc6ac82a71a5b85d365cd08d1c2c19c46f66d3c67613774598b34d3af909f68ab7dc9e9e831a4af06ac05c5a2005332c2b192a6e17825c2a1838e37a2e2b7208d8c46ba3b99619a2523006db017ba70c0ccb957257fc74d9ed76885e34283fec3af987d13359397cb61457530fa00d59247ed2d9e30d13c7b6617667ca6650acf62fe4dedf209093496bbd5ae3969d70a0ae1b5f6cc740202c84"}, 0xda) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) poll(&(0x7f0000000040)=[{r2}, {r2}], 0x2, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x400, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000700)=0x14) r4 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in=@loopback, @in=@remote, 0x4e20, 0xfff, 0x4e24, 0x4, 0x0, 0xa0, 0x20, 0x1d, r3, r4}, {0x0, 0xb9b, 0x8001, 0x87, 0xf26, 0x84b, 0x7, 0x2}, {0x3f, 0x7fff, 0x3f, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@rand_addr, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x34ff, 0x3, 0x1, 0x7ff, 0x4, 0x8001, 0xffffffff}}, 0xe8) 23:44:14 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_setup(0x1, &(0x7f0000000080)) io_setup(0x1, &(0x7f00000000c0)) io_setup(0x10001, &(0x7f0000000100)=0x0) io_destroy(r1) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f6465060000078488566f"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:14 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x6000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:14 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x14000002) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000200)={0x77359400}, 0xffffffffffffff6c) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2b8590f734e865ad2ffe987a62b1aa114a48afedbae8a22a4e07ed0348407a11bb9f7e451b193b2ed88a141e2adf324c43953a5d71078cc10e6b1c479c16f929790c80cc3612bde968626af76ed326"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000000200), 0x0) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:14 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) r1 = gettid() ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r3, &(0x7f0000002000)='/', 0x1) sendfile(r3, r3, &(0x7f0000000040), 0x7f) sendfile(r3, r3, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) quotactl(0x102080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000080)) tkill(r1, 0x15) 23:44:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:14 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x6800}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:15 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000013000/0x1000)=nil, 0x1000}, 0x2}) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="008000000000ea1a"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') lsetxattr$security_evm(&(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000200)=@v1={0x2, "4a33ce4badce"}, 0x7, 0x2) close(r0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x8001, 0x4186}) 23:44:15 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 977.722052] validate_nla: 16 callbacks suppressed [ 977.722062] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:15 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x1, 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, r0, 0x40000000000000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x30}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) timer_create(0x3, &(0x7f0000000280)={0x0, 0xb, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000340)={{r3, r4+30000000}, {0x77359400}}, &(0x7f00000003c0)) io_destroy(0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="c10f00007972997b3b59d4ea166a529d7863b069aa45748913cf327f5347f6cfe5eab6c65a619e4e2a58bacfe49ce66a1205de7568b49f381547af9763123f56d687732f0649c6f3357dbf991e64f932097c65c1d442d47aa2f82fb50f705252690560024ec5338beb967ea107f0e5f493aec42dee26f58a52"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000080)={{0x1042, 0x6}, {0x5, 0x7}, 0x9, 0x6}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) [ 977.816512] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:15 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xe00}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:15 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 977.986460] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 978.043673] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:15 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) lstat(&(0x7f0000000080)='./control\x00', &(0x7f00000000c0)) 23:44:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 978.266218] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 978.300989] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x200, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402000002060100000000000000000000000000bfbd82b555560db9ed3b3ade5fbda0efa299d65244ad9677409f6ad2cdc55f44cf6eff789d25e0a5e207d53fd322d31e4f9ada9d5815209e296a366c94236c5b88b4233dc33c8e76f74b04958c788fc44dc72a159f4e617fa09f6a09935653e8ea5e17f5661f62a8f8b6015b096feec9d9385046347ae33b2a6a5bf993513176c892caf11818ad35d3866a9685bbedf7ed0e63880d938c7c33598a7ddc5bfc4dbacad6523e0bf8d47d1d05b2c414c90b6419af480fb845f19414c07d62b616588b53"], 0x14}}, 0x0) 23:44:17 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x3}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2fb5ed762f7a6f6f703000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:17 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x1f4}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:17 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:17 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x1f80}, 0xf) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000200)="d3cf1cbb820b750cb0723834cd1239889214b661cb0034519a1bde90e51173a8aa2044d2d15e45377d745e64e8108644dee5ef67f55a5677c2222a070a1676cdd0445f8f69d60f85e15e9f60f395b22fdf027c6a63ecdcfecf3f9334bd34ce12a5d370b270f69e6ec2eb397a2ee1076c000000000000000cb772828b073c02f7843658a6ba68902bc537f3f2541aa29e4d6ae38d2c643fe3620a79f2af3ec089d336f1d4c7a41df81b889942ecbfa2585d2e990711dd0cce08d5f71f7746691e730aebd0b7ee047226bb85f560a1c09a40f373bc66ddf9b8d3d0136c3ab7a60d7910dfcdddbfdbf00e4e83") write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:17 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 980.654645] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:18 executing program 5: prctl$setmm(0x23, 0x6, &(0x7f0000ff7000/0x3000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) 23:44:18 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x4000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 980.833004] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:18 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = getpid() wait4(r1, &(0x7f0000000080), 0x0, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0xfff, &(0x7f00000004c0)) connect$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0x4, 0x2, 0x5, 0x1201, 0x0, 0x100000001}, 0x2}, 0xa) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x8}, @ext={0x1000, &(0x7f00000004c0)="406d034123866a02ee7dbfa02c9236c0783213884c56fc07998a86246bbc7166370af5ff0f026d61195c8af9fcc0fb1f6bbbe3ae6a36f7694d84137487df528d59ab1bf60ed6ae08a070b3192c41d3814590e156701633ee35aa6838fb033bb3903bb9780f61cd918283ac0cce41cd79c32837fbd5038ef12d229dc8b6e5a9e2ed68789693ebcb3c2b44ebb9ee0cf85805c0be3d1e4f1e8af23ba190b940f2bfea13fe5896fc4578154c67e0057ed36318457aed4b2abc51b90b2b4d1ad70c202e92bac2c1ce4a876d01a708b87c3cc1e4e41a73c3d37f3353ebf30d8c884fec19fa627dbfc78bae0056818c61a59e44a2f07511548dc7716360b6f603b0fd3b6f1e6f4c50066ad8bf96485e93a1363ae0e79be42bb0b34ddb54221d3c1c7f53911cb8b07864cd52374f362b143581ba1b8e2dc5f48c3b1f856e877997d04358417a05167cb5e3c53e4afeeb9ba35764c4858702a25b3ad06ba3ca00e6dc8c27b76f06ee58d05f9aa4dfb4c88c38b5b5b05a615638417c91a019cec1f6a364da6fb7aacbc7f14924015969020a879fd8b8c95c1216c20228d01992fa402cbc4edceb2949affe19adaa8e20aba3f2c4adab2c10a23cb01c5e2db34782fc74ba0ba0040bf22bad4669b5f27cbb6c326d77fd09391a39fb345c0a0a3555770095a41040f8c2c8f2c7549e4d26671c9465c9dc3865ced4816bbebd00f3c4d217016c17982d411d4be7b9705763c2a82b5060710f4ac681b88ca6bcc185bab3d005e2426841dfd63d24d349b5cfce22c2b764838a0908acb2198e951455e9bfae45cb894a11083d5dfac2bd4bc4e04a21a2792a0a45238b094d8db56463ecc9a26198d2c8c7aa880c5e284d2b43f6921c9d0559cbf7534555d8f9252b031f85fd9eecbfa5597058a6a395ed2b13ca81f2c3cf9552661401be5b97a815cef1e25c14f884d3c06ae8c4cba3998332be3b14ad02dfbd429a5fe3ed4e5712c61cafdfa554e864a420040a419fe1d9c015c4caed7e33d7ffe1f5b99f748b52bb33a016145adf75a0cc0604375fa0f5c3246270599a65cf7e1711e77db99040dde0a70f5350ddda91fcca19f9800a25e0f942a57b1ab29185786bda9da0c59ca57e99b44b7ef22bd20b94cc40f9a864ca3e37f092eac75cdc04b3557178be3cc25b5671afd05ee507c9d0386019e416a1b68f5df3e7bcfe5c659605cf5e227341c791475d11979a569629f6e10d23fdc3f78d00dc427f6dacf25b3c593a7d6f488013126f2f22117b6fb712a810495c56175406b8ba7aed6b4efd93c5290375a4ab9bc44b04499b69e3cae48499e1a600699539c1d97e0cd662c6239536476383189bc83b6571e6ac9a6abf7e922d0cdb5254649456af4abbdd62809be2b8af9ab7b929a55d35dea2c7d33fdea1cdf555c5ba40efcc243c88b68e082c087833f004501fbf35868e182e152b942747b1ec81d36bbcff7ced7dcdade777263452a8dd6dfdb11b1fbd83b126b2435292425712b0062b49882b460b07c9284b03ddba423ecc94a32bbf1fa4f77aa910c5e5a4def0bc3b8b08c4b4db4a3bf61e1ad8da74ce91ca0a7fe94079b17dbe3fb68636e9f3e1a8ce20e260d74eb69d9ecfa9b777c893e21eaac04c83307f10a2ef4c3e6b43ca76f3b92b1a2822d1a03d259e4616c59ad241048cf6a8abf8568374c756efcd3e3d750f8fbef5ec187139fe4593ca0bf6d293a145b75f6f244be2618a5a163539cd95306939f1f043b8a4bd302b6050f35154fc08ba13830516890ecc7a1ca97df83aaf9cf2a3852ed687b69be73722cf3874a0e4a7717b5aacc58babf22b19fe219ff2c8287812037aec3a0ece9b6079c0a564210e81d7ee865800f4686ca85b7be5f31f9f796bc526cfa54e75f728c4610bbe28f74c103f28c941c7021cb29867fa72a9d6308c74343a50a2c64bed440d186699c17ff544bb0143fad11d1a4aac7c9c0562ab544e1d83db5c04cf9d3f609afaf3eef5a48fb0450299e8ef675a7da97b87c500d8a1f7cfdfb1a894dcf29ad5d9c0f5ea6182ea8554c755d574b9818e4060f28cae7b5679f7b58fe7362a4fd50f6525e8ecce259537c13c21cae73951014e37129cc95ec952aa0b6d28a568efa7acd9f103985302001447806609adcc426757b8a7492e1afeb27816e1f58242d6197fbd8809c8b82db7057c70e3a9b68076476d941091f3290fc48df3546393859e6293379095a7f816612200f4cf70ef1fff700273d13f089aac22964db8b1c395e672b94966f4c5fa132f371891854846df86553d47a1fc31cc523c72cded888bd7ec5c209c7ceb3c2399b7aa448a06e3676e666c6bf054ebd83f1acb65cb3a20b7885d97a1b0c5336eb5d5c988e8c640fff5beccdab323bddb26bbfcfea8699a2bbc7b82b1bdb583909951187ea3998e9c402557a1045e2e3b24673ec4017780daa40a6cba0c002d9f82c8def970b86f3d749f896cf43fef3904b4ad06e3124dd16792ac6c4d1590154e379f98211bc1d5fbc2a4d678a1462a0d1a384ab259391003b0fecca3e255a145541e6b91d2950f6cd5fa43c6fdc181107242774bfc37d6b692e0f3f37e8326f9c7c1e993fdbf8f53d7f03553d82476b2165149cc79aa33827618fcdf0c83b7569f8f88684db6396ba08fd01d90ac3135ff708c326aefb75be00202d34dee5ce5515e11c0b5b103e9efd60cd68ab9d88312784fa9ac14653f5cedc56be4bc58819a95b059ebd99a224d846747fe3a2a977a37d54611be8d0f34e6951b7b26da8ebf22f670513fcbb730afbc025f7bcf7edd5e30e43d5a0d9184e159e4ff304c566e13bb6007da2b2ef327f0966804fc3dc22979f364a664e1044fcf6f8d27dea05f3157816ad74eaa098a7b4cffbe25f240d27472e211ac367dad292a3ff61c9ec79cc78a124bc5be7e0677c359713cd870a4f47af6f87efb3afa8f7a883ae24bf8ab947899334a7280f0a9469d89f04f9e2fb19140d6b093eb2af2366820a4ddbbc41d8b33d062dbcba532fb918499984b21d25f82cd73c1756948fed49528a219a8270da9b25d4c6c71f52ce2117c503ab4f1965e18453a7a857e04edecdcd878e2e83ec8ab8467b22e2ccd0691dfeece534674eed14b536cb4782c41126a62af0bbd1d8df044e34c7c88914d487816008c107ffb292b27d8cd2ba73f8314872821e936c8a4c874feefd1add0d86f6621d4dff580be6289c695d8b5c9d7b9d2064a114034639b23adde03f32c694e999c5ddac01c9693c92cba4730cf9057770bbe750e007f51d28d1fb288597b1b83dd8b9e3f0bedf0d02b391377f1f9f405b66914adea346c1d85a6efcf69c13e97f9fe8fa6c66b9bdc1fec3ebed7b3d828ee3751cc5215d17337c2a3947d932ebf16057676c444d412d99848145033caedb7b6b3a4f4913949bcb93045c056a59be591f423447f69f02c606474af080a43112448ee55ee6b1c2bafd95628639ef329c2ae61e9fc2dfa80af0d3951bde77e7d57bc942a283dece23dd208d873476ad33c3e270d454c25e54f4fd580a92dca74114cc630ff121afee4a3b661170727ff78ca954a2ee42561c35bb66929590afcd22dcacf1ae1b00d2ddcd6f0f46e3309dc9122fec172d00943fa7f1906f70dbc93ce2bffe74ec479e9bda7ac9f0e34d63ba3b3680e11d6b4e703b2b8a5d1899798eba519371be3f71bcf7b7ced36b62e305d79534f16706d54157df647629dc85080fa7d1415a4669a383e7dfda619fa63a934deff4b4f2161ece28a9932f55bdd9089c28a035219515ba1868c0b3a91ac31aa9c728c73434b33b87fa2a29e477a098d578ff2e9e0d5a702fea057a973c2b588c5068157471ee64177cd4059b7474de2324bd8f99fb2aa9fbdea5533a04fb63e619eeab3552a3ba69d00166113fb49e7da6b91b897db7c32e6fdf9687e66a8abde76398da07ce991a23def800ae8b79340cf9697538e9161474917285e42461c9c1b6e4d64865a1ee85b571e3fc7f91e1343a5bf4d92d547c7921cf799cd12c9552b0f2691a491fc2ac0273756bf726c5731820fc68694d48b280bf35d778e6c647bc0e279d0d1985336c03d013f7091dcef72c44f704842e645e1fffba3109d9111de425fadcb08ced474b1d87071aab32fd1d96ed3e9455ea61d0f80f91d9b76b25a2e8b2cc84c9a7a92c2a4a6591bde0990111a331a9d7abe399b9cd620d0f8f26b11d51f947eb6d6c846e1c48f089e967ab919eab263d5a58c575f2dbe1227065eb291e8c7fbd387d80ce953f4aad09be7a66c8570fbfc439bfcf2071f8e66435bbe19fc502b3af1400b8cc655fd994a93653d79d212f441301942b949a0906eca164661c7e21e2fc7957f1ad77044da07508b368e329130c62a5b7dee06645f688b0f9c6755f1f55c9109e69342c867460d0b355bf21332e826b02154bd9a3c56e4d3213cfefde53207c58b425d87462bce1055a7c28dc16aca1992626e534fc07c074af06148dd529e92c9ce1085dfd6572b1c5478a8dd094bed7b23d9b8c50585c07286a2ea2f2fb5a86c9f36d2929652495ba8453ad131c0f2011fac6bf479fd6630b011e4dd5c02eb1dd19ee50e96d2ac0e5e117c5defc3a98bf86d07e9e69b1b06cd3dfd079ae834f0b6809d2a597703ed8a4d88dec269b81bfd901d5d0f2bf2a03ef09e9ee1e276fc95761d592c3c93c0ff4ecb929bb3cd424f1a041ba2da8323bb4adf359ae861909b7cec68676ac8f10185cc746268e53559380f2f8d5d7bc7dd2c33a892d926a465c972f61800678bce4e53eb5ddaf7b19172b902f5e68af4c6fe3003b3f20f67b5958d30d3aa7364828447150d914a0ca7de78f59490546a738f1de4e0a99113b175b1f80f0d0edc91b7f465d4ec6ba493233c940667fcbc187f39cf15600a60e87b0a3bd4cb0b554611caf6238d2c36d804b293740f221af4fb7bfb0e32006393fc9bddb9c96eaf729656c6dc57a5fcba62b0c351f57f78172de5f10fc8331b35ac9cd9c3546f054b2be31a171be1528c2d33f858e5a3cc3a25c71aa166101136dc99ae6e295e0d3db9aed83a7eb996cd8e69886a025b273eb52594d97c785c4aedb17ed5bcc5358690ef6c8cfa151fa2c3824a1bf8528fecd40ca4804cbcd9e029d3f6d5fae3ecc2da6fcea484e04532cc0ccdb431fcb7b7093f93f6eaa14caf2bbd4c6832605d07bb3f611df5ab590745035746190b3b46a0b40faa8dab217decb87f461fc7e39d05c0e30f3b27801a15d51a831eaa763283ad50f7ded3fee75c8b82a2129d57af2cb221f6c5815f1d82b76120a7ec485443f6fdfde9186e93604ade628465c9dc81bce5c528c462d2e64b5c59c0135f11bb74a9646e20740d3f42861a7c12d4f0bf0bef3cfc4457f5ee71a25f84c6f5a7365a13cfc08781885fbfca4aa2404b1175f6f8db946830bea1d113acd55a0e1e22960bdb259b8a35b29cff5b1610ba39bb121557820771c952d7971af0c2927283988a54c1ebcc9f40eddbc11ee6dddc75b3cf0e3967ba6afe86e221c89a21dc617950b11a8175bb5025380948f1fb05839cdb47c32df167b3465f27eb551ba7e6f0d9497e8547d5f3ae6ac10f0a0cc0131516778fc3055a8c1b46ddc2e6a50fd0ad52bd35e08c498c0ced1aeaaa79c4856e0b2bee8f6470a05f80692c066355df306514052d36f4aab38a0b930c6fcd9b59048e48f5bf4d0c56df6eb7efd959fa669d8f563b76d883df5a69689da41605204895cf12b49849d448ed17392a54298e204f475c2cd2ff29466e6ada0d07722c7ea0fcf760863a"}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:18 executing program 3: mkdir(&(0x7f0000000080)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r1, 0x0, 0x24, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r2, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x60}}, 0x4000000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000400)={0xff, @rand_addr=0x101, 0x4e24, 0x1, 'dh\x00', 0x8, 0x10001, 0x19}, 0x2c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x8}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) userfaultfd(0x80800) io_destroy(0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r4, &(0x7f0000011fd2)=[{0x401, 0x0, 0x0, 0x40e6, @tick=0xfffffffffffffffe, {}, {0x10000}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'team0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) pipe2$9p(&(0x7f0000000940), 0x4000) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000080)=""/85) set_tid_address(&(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'dummy0\x00', 0x703}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:44:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:18 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xffffff7f}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:18 executing program 4: mkdir(&(0x7f00000000c0)='./control/file0\x00', 0x121) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:18 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x68000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 981.380263] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:18 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0xfffffffffffffff9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x258000) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000200)={{0x1, 0x3, 0x0, 0x1, 0xe477}, 0x8, 0x1, 0xffffffff}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:18 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB='/dex/loop0\x00'], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 981.432348] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 981.854687] device team0 entered promiscuous mode [ 981.876895] device team_slave_0 entered promiscuous mode [ 981.882638] device team_slave_1 entered promiscuous mode [ 981.898118] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.955656] device team0 left promiscuous mode [ 981.961310] device team_slave_0 left promiscuous mode [ 981.968673] device team_slave_1 left promiscuous mode 23:44:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'team0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) pipe2$9p(&(0x7f0000000940), 0x4000) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000080)=""/85) set_tid_address(&(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'dummy0\x00', 0x703}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 982.192711] device team0 entered promiscuous mode [ 982.197927] device team_slave_0 entered promiscuous mode [ 982.203938] device team_slave_1 entered promiscuous mode [ 982.211020] 8021q: adding VLAN 0 to HW filter on device team0 23:44:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:19 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xa000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:19 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) ioctl$KDDISABIO(r1, 0x4b37) 23:44:19 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x80000) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:19 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:19 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 982.331152] device team0 left promiscuous mode 23:44:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 982.352270] device team_slave_0 left promiscuous mode 23:44:19 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x300}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 982.390088] device team_slave_1 left promiscuous mode 23:44:19 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) setxattr$security_smack_transmute(&(0x7f0000000200)='./control/file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='./control\x00', &(0x7f0000000140)='sysv\x00', 0x314442, &(0x7f0000000200)) read(r0, &(0x7f00000000c0)=""/28, 0x1c) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:19 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x22040, 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 983.271999] device team0 entered promiscuous mode [ 983.277003] device team_slave_0 entered promiscuous mode [ 983.282710] device team_slave_1 entered promiscuous mode 23:44:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'team0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) pipe2$9p(&(0x7f0000000940), 0x4000) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000080)=""/85) set_tid_address(&(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'dummy0\x00', 0x703}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:44:20 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x1600}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:20 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) pipe(&(0x7f0000000080)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 983.289983] 8021q: adding VLAN 0 to HW filter on device team0 23:44:20 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:20 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 983.395584] validate_nla: 8 callbacks suppressed [ 983.395593] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:20 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x8000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 983.459995] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:20 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x3) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x3}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:20 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f6625762f6c6f6f709542"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./control\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r0) [ 983.703165] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 983.716756] device team0 left promiscuous mode [ 983.738318] device team_slave_0 left promiscuous mode [ 983.749922] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 983.788348] device team_slave_1 left promiscuous mode 23:44:21 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x40000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 983.948342] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 984.011446] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:21 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{}]}, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1, &(0x7f00000027c0)=""/243, 0xa8}}], 0x3e8, 0x0, 0x0) shutdown(r1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f00000001c0)="17e7f64a000a516447814c0f4684552f0ea55e2651", 0x15, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000280)={0x6, 0x2, 0xff}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0xe, 0x2, 0x3, 0x0, 0x0, 0x101, r3}, 0x20) 23:44:21 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r0 = userfaultfd(0x1000000000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:21 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x20000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x2, 0x3ff}) 23:44:21 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xa00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 984.420833] device team0 entered promiscuous mode [ 984.425806] device team_slave_0 entered promiscuous mode [ 984.431757] device team_slave_1 entered promiscuous mode [ 984.438649] 8021q: adding VLAN 0 to HW filter on device team0 23:44:21 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:21 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 984.515358] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 984.551639] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:21 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xf401000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:22 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x4000000205fffd) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000100)) r2 = creat(&(0x7f0000000240)='./control/file0\x00', 0x46) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x32000, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 984.757945] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:22 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) io_setup(0x3, &(0x7f0000000240)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) setsockopt$inet_mreqn(r1, 0x0, 0x7721a0ad797d8e0b, &(0x7f0000000200)={@rand_addr=0x16a5c000000000, @empty, r2}, 0xc) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000b8af5aef00bdce4785f722a34ef2d72979e648d16fd543139a451b60915f432c0dd2c91d3a262cec84683d95034dca210b9b52f85872430561207ce46d282c60598fa3b2906423c49fc9dc"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 984.814376] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0xb, 0x82000, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000001c0), &(0x7f00000000c0)}, 0x20) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) ioctl(r1, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f00000001c0), &(0x7f0000000380)=""/231}, 0x18) 23:44:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:22 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xe8030000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:22 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x13, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x10000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:22 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80, 0x0) 23:44:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 23:44:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:22 executing program 4: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) creat(&(0x7f0000000180)='./control\x00', 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') r2 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='*\x00', 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r2, &(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x0}, r3) close(r0) 23:44:22 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xf4010000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffff0865}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400480, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000100)=0x3, 0x4) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfeb8}], 0x1) 23:44:22 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000100)=0x2, 0x4) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="2f6465762f6e756c6c62300006e67619f1b60ed597610ce527f96f180a3ce069e876d3a9d5f5b163d037b5c70836acbdea857e941ef15c237d07e452555c2c4f3546efd2eaac1cf43859f4af5fd138a64f06fcbb86a88fadc69d8a6ecc2a470db849adc8f6da1d45c71c911181f3"], &(0x7f0000000380)='./control\x00', &(0x7f0000000300)='rpc_pipefs\x00', 0x1000, &(0x7f0000000340)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2, @in6}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) 23:44:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x2208000000000000) 23:44:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xf401}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:23 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6c000000) 23:44:23 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:23 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) mkdir(&(0x7f0000000080)='./control/file0\x00', 0x110) pipe2(&(0x7f00000000c0), 0x80000) 23:44:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x600000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x22080000) 23:44:23 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="58ff83762f6c6f70300000da029735ba0e3710544ca799144cbb5495db3e20f26d6a6d6f89dabdc7d4def7754367b6fceb22c7ee0d8301d529c4c91fa71cdbbfa289fc187442f17b1d730ab55195436ccb96962fcb42238db3"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:23 executing program 5: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) mkdir(&(0x7f0000000080)='./control/file0\x00', 0x110) pipe2(&(0x7f00000000c0), 0x80000) 23:44:23 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xfffffffffffff000) 23:44:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x16000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:23 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='noT7\x00', 0x8, &(0x7f0000000080)='sysv\x00') write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:23 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') readlinkat(r1, &(0x7f0000000080)='./control/file1\x00', &(0x7f00000000c0)=""/67, 0x43) readlink(&(0x7f0000000200)='./control/file0\x00', &(0x7f0000000240)=""/6, 0x6) close(r0) 23:44:23 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x9effffff00000000) 23:44:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x2000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x30000) 23:44:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80100, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x100, &(0x7f0000000200)=0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2}}) socketpair$unix(0x1, 0x40010000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x3}}) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x400) write$UHID_DESTROY(r3, &(0x7f0000000000), 0x4) 23:44:24 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xfffffffffffff800}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r2, 0x100}, &(0x7f0000000240)=0x8) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x8) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:24 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) r2 = getpid() ptrace$poke(0x4, r2, &(0x7f0000000280), 0x40000000006) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:24 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xe00010000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x3000000) 23:44:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @local}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x200000000000006b, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0xc0ffffff, 0x3, 0x0, 0x1}]}, &(0x7f0000001080)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x1}, 0xc0) 23:44:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf0ffffff) 23:44:24 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x3000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xa00) 23:44:24 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6(0xa, 0x80000, 0x1ff) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:24 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000000000/0x200000)=nil, 0x200000}}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f874cef65adf149003000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x1, {0x1}}, 0x18) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:24 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xfffffffffffffffb, 0x157}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x10000, @mcast1, 0x401}}, 0x200, 0x5}, &(0x7f0000000200)=0x90) r3 = dup(r1) ioctl$TIOCSBRK(r3, 0x40084503) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0xfffffffffffffd94) 23:44:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:24 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xffffffff00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xff00000000000000) 23:44:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, &(0x7f0000000140)="c875f782ab4da1a44ccdc0cbb9301d74e5323275aa46892e5825889fc1920cccb44fa72594ae768207341a49119028639046aa297a57366a41b7cdd8b58c3ed6cd7a7db6", 0x44, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffff, 0xb4140) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000001c0)=0x8000, 0x4) 23:44:24 executing program 4: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={0x80}, 0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x50000) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000180)=0x9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./control/file0\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb202e28ac545d09b25032671680b999a56f74d4e5c3019049d62cbe2976c3086d122e90ee4e834fb9ce961e65e641dc793a2a7261e71b0f5eb6766ad3ab4009b9742e979a0ceea0b8d14949b4f9084170e3c33fc83a08a60a47271c2c10e522573c640ea2a87b7587c8435d4db56117651850d36721b5fd2607cbf9c2af2bb897f0d5a3a8d8a65be772a04d0b8d2099cfec9941e9bf640c73bd925767e8163b03b4dbab41ba5c08b92af9e53c259d10e"], 0xb2, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x4, 0x9}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000540)={r4, 0x10000}, 0x8) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2fa5cf0000000000001ea4"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000100)="00246c342ed6", 0x1000, &(0x7f00000000c0)="fcde443a25cc9b763b59bad0ef8610a66ffac64f41f55d6d873658002d6f0e5909d5c61ee9488493275db883ab4dda0274") fsetxattr$security_capability(r2, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v2={0x2000000, [{0x7fff, 0x8}, {0x1, 0x8}]}, 0x14, 0x2) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000140)='./control/file0\x00') close(r3) 23:44:24 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x1600000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x300000000000000) 23:44:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x53fc, 0x40080) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_aout(r0, &(0x7f00000004c0)={{0x1cf, 0x4, 0x800, 0x187, 0x25, 0x0, 0x3d3}, "01891e59c35aac3fe36629c6f499bcfb2463321553ae4272870776da6a9253972ee1c9053c169743ad52", [[], [], [], [], [], [], [], []]}, 0x84a) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6c00000000000000) 23:44:25 executing program 5: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x80000005, @mcast2, 0x9}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) 23:44:25 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x100000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:25 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x5000000) 23:44:25 executing program 5: syz_read_part_table(0x80200000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="5244534ba7011c0000000000009c9ba2040000020074b8b5ca71a68025", 0x1d}]) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) setns(r0, 0x10000000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) 23:44:25 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:25 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465762f69c56f6f703000"], &(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000010, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:25 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xeffdffff}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:25 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2f0004762f6c2c01703000bbad8f2ebbbaa8"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') r2 = semget$private(0x0, 0x7, 0x100) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x70a9c23f, 0x1, 0x81, 0x2000200, 0xa91]) close(r0) 23:44:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x7a000000) 23:44:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x2400000000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000017c0)={r0, 0x0, 0xc90a}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001840)={r1, 0x0, 0x0, 0xeef}, &(0x7f0000001880)=0x10) r2 = socket$inet(0x2, 0x0, 0xe1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r0, 0x93}, &(0x7f00000001c0)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="d3fdebb327e38125cd581ba1064e55d041ea87a2b8de86d369c0e9cf6ef10000000030ffcd61"], &(0x7f0000000100)=0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81, 0x8}, &(0x7f0000000280)=0x20) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr=0x80000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x6, 0x400000) syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x200000) syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x101, 0x400) socketpair(0xa, 0x5, 0x20, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(r4, &(0x7f0000000400)='./file0\x00', 0x4000000) 23:44:25 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:25 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 988.575162] validate_nla: 26 callbacks suppressed [ 988.575172] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 988.636138] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:26 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x40000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x1000000) 23:44:26 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$notify(r0, 0x402, 0xe) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:26 executing program 4: mkdir(&(0x7f0000000200)='./control/file0\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x641, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x5) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2ffe060000000000000000b62223f7778c625b48620097fadbe41a7462f8d3687d4debc2083547970eeeb07db2a5e23460e63c6f6f561db9e9295e4cae1a6e36d07fc862449b17b62c531160e665146ff8de33d37223395738a7fcceeba25f77c62cddcc4bcc096287768aceb0bb79a220951f09303ee920adc2cee0b4f56edd3b0919075443153f33598aa7a2ff1cc408ae733473c0db237fae1fa7082641bb3e97e6eac0457271414ef782dadd1b559da1aa1300b034a05f0a48186a376dacdf7f7ca90576513a02c8d5b6969149a6fd84c9f95e3b8a9dbb6bec1f37ded8e5"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f00000004c0)="50ca6fddd8413a862fd7e5ae0d95d89b53e0339bd5df0e01f1b7f9f4f5f3fed10a1337aa54886479514dff0587032032ce1fe2904c38d9ecd783938c240146b4503c9577ac115ee470590e052d0d66503c0b66d15ebd6f3ce7fd9daf3b7883ea1d48ab12c628a7dd7acf1dba669148ca723788220933474a7f2ec65784e988feb868e0b8c1161d8c6d9d5104e3143dfc769dd7cddf22f2fe64cdc9ac42da597f8c2aa4394a9558dc35b6a907709695cd399f11b7f3367e38f893335eedebea1d1c49ecf0f25026c9989cafd69b3a4b", &(0x7f00000005c0)="80dbfb3a7d05236ad3e3a8f3af8afb3da2d6e6d93a2ed5e4d47f0dc16d55fed5a72af65f45b778ee44096a356eba87fb4e0d63f03a755620bebb0939fd6f2f322f844dd01f6e5aa2fb1e06463cd5693f8292139c0cebcd3d8302577c6989a0bbceb14d741d83dc818be92634c6ef128314516d8741f2f32bc7a8cb585bd05cf23bb13bb5bfd219e419e929adbb85f74532a78c9d555627a84310217dc67a6df825c66863ca51f12280525bc69c91e2dd6ff6cfe8b3c3f385a5179286b25db44efa2a5ebe9ae685ccd8dba19e802a1b", 0xc6c55bb2ca913e93}, 0x20) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000006c0)="cb686abce42c43511e15014eb90fa6dd9484816e9d7d864c79b922fb692cb3c001f2b50de31607765dcf31f97bfca949c6c25334e20812b943b87ae0cc068ee979e949e9452dd2d85e63a34f34c1fa05cd9b82c2062f40edef119ebf6703df377d1034114ac2d1739606bceaf20bf0b9070a7f8b0cf35387e59848a96b898fa8a9285f3d8fda0fdad519f176fb74c0cd05ea8dbfa55dc832d72d816f1324b2af340c1b7b1c15987ed4") r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$describe(0x6, r3, &(0x7f0000000400)=""/52, 0x34) r4 = request_key(&(0x7f00000002c0)="72787296771501c2bcbd4d6fdaadf896be30706300e657f96403", &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='sysv\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r4, 0x100000000) close(r0) [ 988.865064] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:26 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x600}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 988.931458] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x4800) 23:44:26 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = dup2(r0, r0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000200)={0x5, 0x0, [{0x0, 0x0, 0x1, 0x50, 0x101, 0x8000, 0x1}, {0xc000000d, 0x9, 0x7, 0x6b10a905, 0x401, 0xffffffffffffffff}, {0x0, 0x8, 0x4, 0x9, 0xfff, 0xff, 0x20007}, {0x1, 0x7, 0x3, 0x7ffffffe, 0x9, 0xffff, 0x3}, {0x1, 0x5, 0x7, 0xfffffffffffffffb, 0x1ff, 0x2, 0x80000001}]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./control/file0\x00') setxattr$security_evm(&(0x7f0000000040)='./control\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000004c0)=@v2={0x5, 0x1, 0x12, 0x6, 0x1000, "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"}, 0x100a, 0x3) close(r0) [ 989.127525] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:26 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x4}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 989.174922] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:26 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x2400000000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000017c0)={r0, 0x0, 0xc90a}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001840)={r1, 0x0, 0x0, 0xeef}, &(0x7f0000001880)=0x10) r2 = socket$inet(0x2, 0x0, 0xe1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r0, 0x93}, &(0x7f00000001c0)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="d3fdebb327e38125cd581ba1064e55d041ea87a2b8de86d369c0e9cf6ef10000000030ffcd61"], &(0x7f0000000100)=0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81, 0x8}, &(0x7f0000000280)=0x20) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr=0x80000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x6, 0x400000) syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x200000) syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x101, 0x400) socketpair(0xa, 0x5, 0x20, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(r4, &(0x7f0000000400)='./file0\x00', 0x4000000) 23:44:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x600) 23:44:26 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./control/file0\x00', 0x1, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000100)="066e646382750224724432740b2f00ac62c58373019a3a940c95d650b5e688fe29636a5079dff729d1", 0x29, 0x8000}, {&(0x7f0000000200)="ec44d06f8f684e79643a552936e3e4bfa940445a4debc483bfab88a61d85169757bbbdb1e291713e35ac886850aa985bc28204a69f538376a5445d0905ad1ac26a48e0184482c68c15bf375c87da701ea40daac8207990294f69c95bce8f675f7cfbf10c67c3adb6683691", 0x6b, 0x100}, {&(0x7f0000000280)="766e637c7755ea654459f0bab2c7f378792b7940602612328653ff600d463f3d8d9a3b0368994cd0630a", 0x2a, 0x9}, {&(0x7f00000002c0)="8117e3b297a343646d2462e5f84bd440a190b263b412388800432abd074e3785dac49c2cd363613cce011112bdf2cfbf17cd196754babdf053b98910f5f9b2c59ff2365d941849ddc06e3c044084790165827334ac091d2e092cd6286c40826fcb112948a4994c66439be1889e3e9e4ddef19f20ef918a236421414562bcc03de4589b0481df0ac1d55040eb", 0x8c, 0x2}, {&(0x7f00000004c0)="6209b49367727cefcc6fbbfdfe191caad59ebda4285e9df06f8926ebaa3a6c4955527e609c775d578895fdd5caa997e9eca916083f35b82d5416b7ed30cbf6c209167904b2a7fd74454a22dd59573768b88ded2d12973a5fdd0337974790fcd2c2c0c2cadbb7ea8808003ef404964288f104c5523baa12ee208213d8808d98b831706c94470f59b08582bb6f6cbc658306b7c89dd2d7f8e6ea704384b5f0fdb1f8d30f9563", 0xa5, 0x80000000}], 0x800, &(0x7f0000000640)={[{@rodir='rodir'}, {@uni_xlate='uni_xlate=1'}, {@utf8='utf8=1'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}], [{@fowner_lt={'fowner<', r0}}, {@smackfshat={'smackfshat', 0x3d, '@+}-^'}}, {@fsname={'fsname', 0x3d, 'sysv\x00'}}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role'}}]}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:26 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x68}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:26 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f03000000000000003000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000340), &(0x7f00000005c0), &(0x7f0000000600)=0x0) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./control/file0\x00', 0x500000, 0x2, &(0x7f0000000300)=[{&(0x7f0000000280)="66b43a36a23e71d4bc953789799e82727b8bdf484e51be4543519ac8c4235471ffd8b377166c9598c78ed860482871494c29e2afeef91db2156aa9e31a86a141cf46d2a5ffbbdc27d18d17ef6cebe0619cdd27dbce306d3a4acfddf54f881bc0e89732ec1937dfdacb3a26c7bf8783075756a8d7d986583c5e6fd137dd", 0x7d, 0x400}, {&(0x7f00000004c0)="2767c7526924c3371893cf5cee62e12a03d3023c73c6ac5378d02cf126c988ef35b3d1a0a7fa54a55a5fb02192180b40197a19d9b7cd2ddd13622dd4d3ac0942271d45e3653216cd37e62dae76230b3ba47e96ac1819f186f879a449da134b3305b7f3bf376abb8f7288a406a4741774689886b34aff1ca670b1e481418cc6e071fd5550315aa92f040a2c16a10eeca682d25e6402e20072c71d41ef4d7a7e686bf99a0d6bbafc96ddaea5914ba92d748918f562d6f5e1cee09420391480b42d8e9a067568a414a3", 0xc8, 0xfffffffffffffffd}], 0x2000400, &(0x7f00000006c0)={[{@mtpt='mtpt'}, {@grpquota='grpquota'}, {@inode32='inode32'}, {@inode64='inode64'}, {@allocsize={'allocsize'}}, {@ikeep='ikeep'}, {@grpid='grpid'}, {@nolazytime='nolazytime'}, {@biosize={'biosize', 0x3d, 0x2}}], [{@uid_eq={'uid', 0x3d, r2}}, {@subj_type={'subj_type', 0x3d, 'user'}}, {@uid_lt={'uid<', r3}}, {@uid_lt={'uid<', r4}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@appraise_type='appraise_type=imasig'}, {@measure='measure'}, {@dont_measure='dont_measure'}]}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) llistxattr(&(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000100)=""/28, 0x1c) unlink(&(0x7f0000000040)='./control/file0\x00') ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0x3000) close(r0) 23:44:26 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 989.569549] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 989.586725] FAT-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 989.610770] XFS (loop4): mtpt option not allowed on this system [ 989.617974] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:26 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:27 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x60}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x822) [ 989.738224] FAT-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 989.760642] XFS (loop4): mtpt option not allowed on this system [ 989.829619] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:27 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="2f37e183cfd35e63f8e5e8bc7a2e5b28a4ea4f27535d597f216ec91b7541d7ecd327ac83ab23dbdca695386a594562ef5901257028b7a2c78151827df3d697b9fd7b63ec3e44ac2b3f9003fcafd7451481f45a6df24c8e594811", 0x5a, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d52a5627e1225a2ef3a882b1e1c55e73540a79ad32", 0x15, r1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 989.876259] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:27 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$void(r0, 0xc0045c79) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./control/file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) unshare(0x45b9ee6dd65b6a3d) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) close(r1) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="85a4c7d8bfe4b0288b1010b1e0b7249bd3b4ecc4390cacc775f617f03d9191d6e63f454eb327cf44ee819346b9f9e4ca89353ff9b554f9b3d083aa7bb44381370798ccf04bc18e2d57957550348e55cc10e911c7997ea2092b6f927fc9ae4a03c0f649f0c231dccdddac1697f2db2c59a4a7be1c7c1a0e1c1291fa1d4aa44bd58e95b3c85f6e95bf92f2ba6094e1a20a8ee9118e7a9c2d4401efc39a0c1be1ea127fccad31decf38dcd9f01c0df7c392abaddde9bdaf2f315ed70a0696e9629655f323b9d6b771f4c30a48ef3cd10419edf80ba905"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:27 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x3f00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000a0cff4)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) getsockopt$netlink(r0, 0x10e, 0x8000000009, &(0x7f0000000240)=""/4, &(0x7f0000000000)=0x376) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) 23:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf00000000000000) 23:44:27 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000240)='./control/file0\x00', 0x1) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x5, 0x2) 23:44:27 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x1000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:27 executing program 4: mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x600000000000000) 23:44:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RAUTH(r3, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x41, 0x4, 0x3}}, 0x14) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x0, 0x0, 0x40000083]}) 23:44:27 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xe000100}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:27 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x93, 0xfffffffffffffff8, 0x6, 0x74]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0xffff, 0x4, 0x2, 0x0, 0x0, [{r0, 0x0, 0xfffffffffffffff9}, {r0, 0x0, 0x8}]}) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xfffff000) 23:44:27 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f90ead2d36465762f6c6f6f703000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x10400, 0x0) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:27 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xfffffdef}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:27 executing program 5: gettid() exit(0x0) 23:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6000000) 23:44:28 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:28 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xffffff7f) 23:44:28 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xe}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:28 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2f644676e5ad846f6f703000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) close(r0) 23:44:28 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) r2 = fcntl$getown(r0, 0x9) syz_open_procfs(r2, &(0x7f0000000080)='setgroups\x00') mount(&(0x7f0000000440)=ANY=[@ANYBLOB="fd2065762f6c6f6f600000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6800) 23:44:28 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:28 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xe803}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x1100) 23:44:28 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400, 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/219, 0xdb, 0x40, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) lseek(r2, 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x7fffffff, 0x2d87, 0x5, 0x5, 0x58, 0x100000000, 0x70d4, 0x800000000000, 0x1, 0x5}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000140)) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) 23:44:28 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:28 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r2, 0x400}}, 0x10) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f6465762f6c6fd84e939d"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:28 executing program 4: chdir(&(0x7f0000000080)='./control\x00') mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x1, 0x8c, 0x9, 0x3, 0x6, 0x2, 0x644, 0xffc0000000000000, r2}, 0x20) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:28 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xffffff7f00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6) 23:44:28 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x74) 23:44:29 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 23:44:29 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x3f000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:29 executing program 5: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xffffff7f00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:29 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xf0ffff}, 0x0) 23:44:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x2000000000000000) 23:44:29 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x8, 0xffffffff, 0x8001}) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f642f53e696afcb287413"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:29 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x100440000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:29 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x6000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:29 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xe000000}, 0x0) 23:44:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0)=0x1ac, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0)}, 0x0) 23:44:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x200000000000000) 23:44:29 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x18}, 0x0) 23:44:29 executing program 3: mkdir(&(0x7f0000000080)='./control\x00', 0x100000) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) munlock(&(0x7f0000011000/0x4000)=nil, 0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x7, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xffff, 0x4) 23:44:29 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x4000000000000}, 0x0) 23:44:29 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f642f6c6f6f703000000096f5f9745f92254f8c5d7cc8e31fb7ae88588c2b6c942a5a1b86523aa41e9e78b79a4d822dc465a121e81355f00d40e2ad627db20246f0dda97a93ec706337f6afaad0d636828a48be8d8902e0ed1f5cdfcd5f4e1cf0ebbc85e90e2a041dd7046c180c4c33a878bc1c2c8d5fc15be1a3a9e60b33622803d08db14d4fc5c92ba7649f53be7bd211e7229473438b6687beb27973d3f89da1b176"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x1, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x2) 23:44:29 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x200000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:29 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f3b7c624fbd60df97317597b7da4d7a4d6475762f6c6f6f703000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x60) 23:44:29 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x40000}, 0x0) 23:44:29 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x4000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:30 executing program 5: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000480)=[{}, {}], 0x2, 0x2, &(0x7f00000004c0)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) lseek(r0, 0x0, 0x4) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000005c0)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @loopback, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000fd00", {0x2, 0x0, @local}}) lseek(r0, 0x0, 0x2) 23:44:30 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x900}, 0x0) 23:44:30 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x82000, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000100)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x1100000000000000) 23:44:30 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:30 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x60000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:30 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x2000000000000000}, 0x0) 23:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf000000) 23:44:30 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x1000e}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:30 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x12000200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) memfd_create(&(0x7f00000000c0)='sysv\x00', 0x8631a101b9a3650a) unlink(&(0x7f0000000040)='./control/file0\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)=""/239, &(0x7f0000000080)=0xef) close(r0) 23:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xa000000) 23:44:30 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:31 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = open(&(0x7f0000000640)='./file0\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',o=\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',msize=0x0000000000000010,\x00']) 23:44:31 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x3e8}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:31 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockname(r1, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x80) sendto$packet(r1, &(0x7f0000000080)="4258f9aa7559b6b29683be016ccb65759ad021f3019dcd104aa552f4edc629e7168a8e1a108125c21a02b9af5eaccecd1f0df18a655d2be86b0818ef577cd06603bfe07247c5dfc4649d18f75d9845c6820ac4c0243490b63eb744a875df1264fadd3de5a8b7adce23166e20496a6e29c7e76e1843573e17f1517edd03fd75738fb6420f634c69358aa19e46308a4ee4a1f8d4079a", 0x95, 0x20000000, &(0x7f00000002c0)={0x11, 0x1c, r2, 0x1, 0x2, 0x6, @random="1698dc23a248"}, 0x14) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x9effffff) 23:44:31 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x14}) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:31 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1c000000}, 0x0) 23:44:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x7400) [ 994.311402] 9pnet: Insufficient options for proto=fd 23:44:31 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xe803000000000000}, 0x0) 23:44:31 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xa00}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:31 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60002) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 994.351288] 9pnet: Insufficient options for proto=fd 23:44:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000580)={{0x2}, 'syz1\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000040)=0x54) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x4, 0x0, 0x7}, 'syz1\x00', 0x4}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) [ 994.417913] validate_nla: 28 callbacks suppressed [ 994.417924] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:31 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xeffdffff00000000}, 0x0) [ 994.489160] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:31 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') sigaltstack(&(0x7f0000010000/0x4000)=nil, &(0x7f00000000c0)) close(r0) [ 994.553037] input input40: cannot allocate more than FF_MAX_EFFECTS effects 23:44:31 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffffffffff8b, 0x40000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x80000000, 0x4}) io_destroy(0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='cifs\x00', 0x1000, &(0x7f0000000100)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:31 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1000000}, 0x0) 23:44:31 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x3}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x700) [ 994.612735] input input42: cannot allocate more than FF_MAX_EFFECTS effects 23:44:32 executing program 5: timer_create(0x0, &(0x7f0000000240)={0x0, 0x23, 0x0, @thr={&(0x7f0000000440)="23b2a49be3d958a0528da20611978f2ece22229db1e13106299daea779e0428c782fb1684053be0b9d90bb61155102e47e7e8936291bb71f6e5d4b49c09e7c2cfe8af3f466541ab2474bb53491285ef3f95ef070cc611c2f59b355ee4414fbcbba3fc721e7438738b0dde9afccd5c9f5052f6fbb49563e9fc84b836aa7f3d4f20364c48fde38c57b6ebdf35966d5c90d02a834027af7ee7e39", &(0x7f0000000640)="eac87018c18bfd36bba1b059144bc68a914e14f10f080a40a99315aff6658b5351bb09010a3b136ed7b2b95eb64bb801f15591a7c249531768d7e63330593dbd7d8df8e6a1f3cff409333249405f55975cab2fcd79c8559a9196f11f662bb7de8d27a5c378842bf6bc1c788d5e9436d2d14e484c7baa68f776c9530ae9a79f9d2ba2722d0fd254bf662a4c7f9f9f616b7c5c127936d32565b4b0886bbe8feb8aef72a19caaa74f9adbeaca1b5fefb7576e32dfadabcc16b2aba197301ed6d99a4a3ff033c0c7cee71a30d1db57077be04b4ab9c0bd39b0acb11bf67c8439747c1b1345d50d1012a9cda0c75a9f4df2dd015d2d2141c4f72fe1c43caabc4dc2dfc6640bd12d083f7a212fe988b75d22785588141575f9d41a7101a3840e6a9771088f96a6cacd72e452aaf06d6b40cda533556210305adafb93cddb1a5a561346af527a1829723c9910efb206aa83bb91c27d431ab5a1beed51f85fa51b25fe4ac7a8c3842f2c2496339020662924d0ac6c0a5aab24ae9aec72a7e604f32da1b211ca91db5bd45d17e8ea906ca12489893d8a674699229ec6a3d6fa0cc9ee7468992ab4fa812cae36178f344c42c0b0c1dd5a9f3153161fcf7c9b7a173a60430f4e46cc035f4f67f98c0441e9bdc1ddea32da6ebe56e2647fc94c37fa7905aef4c18dd732ef6fa2f0ff6f26930d3f9b89cd1ef7c45496463bc585bf36b8ea97b27c7d8a2bab35b85e83fc7783f671825407255705301d790cdb3d5f423c0c4c678c5054ce553c1abb5df8395362f81a6346d2849bd53a89bb3a9149b8b8efaa749808476674f4eab933584849d84eaf791b78607dc05d75b690fe6deb226501a559339604a6b3d8798e025173f0e2b09098db9ad28c396cce29483f16ccb5782267760c64e7371c719f2c059d4fab2f9307a2715425aeebc5efce1dc0c5dee107163570093a6917a7f9d6203a6b1e85d114c9f72ec2d7c640cc08ae9b78fa9f3ee9821e17b57f0cdcecf528d8ab7032145d979247aec747ddc3df0e2b905d5e088da4087d91aba1cbaa15ccd79ada712a50d4060d0614d457a188dbe423f9c98afc6fbaa26ba430212690a01e25704105e45c2b35f8c1e864001b2d955acf0ccd94f75817ccfe05943cad19b64ab7ed97b14611110805e9ccd65475be8dd67436778ca791ace8e3575c02ece906aacdacd2c529892a6c24cb7d700305979b2d76dd274a8d8500d897e67a87254944dd572e6d490bfe7ace497a328660de8753b81f2f8265a0ff1ebf781ab5ab579a5aac77ca873cbec133af3e7a475ff362f2dee682ba9ac76148fcb4a1d5c8448170a3845a5026aaf856699f587b3b606a684d7ad74d275be76efad0ec6ed7c048a60c48432d42c64f6b7f83d2f91b064d2343dfef72ed1b0bdf2fc8534baf4f1ae79c92f5eba1a02f7145a2a52195c50f430b5505ce8839b44aebe6d6d51ea5d3baa7e49ca00eb88b74acbca1a8db7f697f904bb1608a845fbb74684104eb5637b93ea803b6aefa317ecee074a892bcf9acaf2589780080aaf6e93bfde783fe286042546f50fc27f224a9dc1b38a4d39d5d4a2a5cf1d5bfe3cba8c8f4f4f97719f0349c342c7aabfe0cb4d445bcc33296ac6aa7823c9e4819362c42b485e959f8eb9a8ba3ca579f29bb5950c1d26e9b020ff2b4bf31fc31a97a660887c420ada3db0d5646ff7bf83c18d8fb218df72e4627c9d71a5ef6d98272e56bf1cb6b1e11fb012914a9da61c7b5984210033b8c396a0e8355a8147ae3c00aac897048c735e12ae55043979c07d0cffee614118e3021fed103fe250ab7d76a1cc2df8db34be057d44c34905f00f417f394714d184411a42903b3568dc56760a1e57a544bb17ddc27def80e52cc3d7f53776d9549b54047e3b08047599cfd28e4ac4b436d2d23fc832b967f155501977117e10a7cc8b25db20f11bca058134a397c3a5e1415a342a75592e997a747cbc3f58a4ec883e6842cf44cf979b0924962eefc077b202d5eb0b99444a431e50d80b87212bfcd2e6326323577408281175b3cabd81968aee1b8de485b685674f8d70c8c5bbbda1ab935a0d4847bd1d4ff538347d63c0c9d553720265d70a8cced17f252aaf371ca1a30ab794ada7f862eb2f8bb5bd5e6e5e2d80a9266d6ad92ff85f4e864abb914c8ada0eb0af9e4048470d3ae5892fed4a658212aa91e612077c397fe40f81c985a2f22748f78cdfac504626b3296be515ae757457aa5f844eb339b0180a16ef55dcc9acb131931fb06d29f27bdaf3051d33cce512177cbe19fcd06411152b038790251b3d0336041e76d463587de366f97f9521dca471404d0ece258b9c794a6eef307e01749531bb00dc7e0e08682c28e88e2a3472bf77f72be0a80b90027cf53e729b915ef9a1a210a673b703a201083d2772f5d69642c5d3394e07e7676b3d83eaab4073e34fe3dedcb050474ac0fb6ed621b80838885a9440f47796ce97645d874bf6e76a6d40fa19cdbaba2df0b55befb03187395d8d7ef8466565de4d99aa10906c30f51149b874914960787c76a0fac1ce44712bd00a6fecbdd9fb9c8acc0b718032c90468b698f031c51f31dc16fd9fdd5572d653dd5089ef86b00cdd4af8f6cbf5d6603f174a4e4c9b68399dbae0f32681be901faece7b0b5eed12e23d73bf35cd84f35fd62ad94f45d33080dc537e213d02877347cdf934dccf0da999aaca9ab8faf75a6b66636a36b4571cdcceb1532e387d26f287b5d2a96c7c9a63f082afde32820631f094dede62424527e7ea8ce6af0328c38ec72b838ed7dc292e433cfb57daf65da6df2f59419b85a2ed0944caf8600c2337719ce885b313bab3a5b943016d1e7974116c29a9a4727fe6cb863a05cb354c813af9a79d1423288f472439bf5ad33139a5d7fbf0bc69279e9656f1a8449eba714a4d0712240fc0be43198b51b111083edd408e93c0fffcce61489acf87d5d7dbb39f78d1b0e4e6de823d754dd5b1735916373df51e3a6de41f6436cf06689e55d088f82ca4b467b991a2c4c1f6e71ce9b3f43b4c377864501e412bdf9c6f89560ee8c11f68d373039c65ae1cbed7b97e812290c1d4bc2f1df274ea4d49aa842b7e6d71260a23d6898ff2f64de8da50e4f390c5ae79a0674902aa2c8c5c8ee69601ba09e1f9d26a4324edc2eabd8a0d26e7350eea7857615b0af7be4ba4e9b473227b9893a08ac610ee7dd9fca370d8a1458a0504beab91e4e82878baf898ff217fa17e969ed2f51b882a7fdba7dbebc0384eabb895415a9b751dca8c852e0c7f419d4f672e4043c2df1a4a319c237b6ad18197c80d82e5e2664b4203bc45620cb6741f16082e7748c558b3080081efa5967dbd79971cc4a7001976c2cb54b9c9ce8c058b8ec84b0e5050694818bedd2faf410174a355af3987d623e0a1f14709978dffd7c6f383d5d0510a204852f88997c3f802fb8fc112d0e1d884708c38336e07e2ad9f2fb525d9f84b5a7c60f4c26809d5bac3b504d9b001a1865d87a8cbe0527dd880a714168ed03f1fec32a9bfe5579d3a62d625d87461e05a6e0547f66bb4041c9411f23be5b3f2a596104017ed692fefb08d4977741ca6472395f89e73eee671af129c2484c65afab13a8994005e13b0dbc6cadfa87ed983046b6aa2fbbbcd8384be7f9dd870759572d2d4ebaeaaeedafcd13d4d07aa12aa4dbf5aed07ba075adbc8369baba94caf1235b97378e01dc388781542ceff5e7e3d5d032aaf3e0ac19ccf9c0bdb39d8c1960c8e6fa1ca8cc1f4b666e1554208bde6c330177ca65325746403e2430337d4f1aa30244a1611c0c7c3c1e52e6b1091f6103ebc1910a5b8e7d25e5340463fbe35e3e55e6aabfd00e7fd03c49a00c741b30ab6c55b60367a6f3b7ea67c74d3a86d7a615cc02b9ea550f4f73267aabfcb8f7588b8a8b666f61de5d9c24e127eaf321783c9290c85d8c8c32ff4a0dff13c502a3bce855e9f3a038706c97a6a6a9f21748aec2f398d5022065baeceb152a78997d08b5e1a300d834609ffbd7b69970d019241e7faa645dae6097a8586bc1a7f3755f757374e8f55b2f21bbae1a6c61b165090670cbeb5f67dbd2eb41464453801573924e786bca67d939d6d4edb064a291d4b694af69012f76b012995b65dffa28bc00ce121bb123889460b9f8394d1522e1199147e60a85a566a3d8516e42a63b6f6a8692c19ef3f0c874dd1632113e5c5c529c68a4cc5bc895e7cc7190b02efbdb3da70278bc922fb54250358d000803a56065cd4d9d01e64f68ca06575a9b47408dabff365a8d4dad78371daf81e77ff207ca0b96285ef08aab41696ef3b6a5ae1d10bba14f87df909fcec2a7d9d44fc93d86b1962ef1860c6db1bf0b816ca307b3e9d121e07462cea7efdc13eda3357b5d2eb44a2d3a92e7e51adc5c7ac5507fdf5ec174a57dd21ff3e783c422acf5f43608726ff0caf3a66385138ca6c13a4c47f4d7e6dc8929231e50f1f158fb1a5678738986273715d3c1c46c1df71a4cc090736ce7b5e828533719f3b3930c48e2a7aebcc1e8c4f7580e01e49c1443c3f35cba06f5a38dee602138a343919e3d72fd6c63cb491f471db769c4fa07e270065032498271c61c854984598af17815f6f7e57322c32201450a63db13f934097a70c6972494dd400b809b475572fe9e8ce2efc70bb296ac9f932a403c1085d2408312259a134d43258e0f3d4dcd310c8b58dde0c92120c42831ab43ddd88541a47f40ee5789e6dbedd3baec46e3288270096dd426302fe7894852eb940b462ebf06c49e16298ad7b7c90d04cf7ef302e210a8bc4d01d87c1d2cf3fb48c6c568de491ffb12a761378b4d092e05a4ee6ffd40dfcad9074243160f337b6a8bd604cf371c7461ba88d610ab775dddee103e6a403ad7ca961680d1aca2db9aa7096bbe561b96b21d17e5b307286d464e7a4cc96328a5665c7e60d9a1677df7c4a712d0c075d72d3322591ef1a51a299c98b6279aff9c4bb1e7772e1ea5ea3885193515c5090024454cb661ff029c29281c15230cb7ada1aa3a44e3e4d2098afcad6d091375b066ffa35f207daa5c527b6ce125ddecb7f2f5dce32bf1ff9fed7cc90c49335b559c5b51d60778663843e5db2ba2094d8e8b59703643b7d91246e22a69101b09a32eb47edc5fc065026d7c8b393689125ac674191483f9337bf78623a120f2cb4a0bd4e0681bebee9bd51d158fa565fab52a042e6da43d0d14b07248f523e61201aa4d6a10eb05eb47690dc15162fdec66a19c4d70bc2a87d3d8a33e901ec801af7d47683574b92f67fd479dfda1c6c88a877c11be49391ab5130789c793be3b0f82f086a27e2a9359d5f3defd8a434afbff6548f61ae35ec31143e959469a07e65134da3bae4811597d44cdfcdcc382cbe9e83da4c563e39fb16cec0f72dd13ac502f989a661b88159b2939206b757640fa8647c1168a41a56334ec733157276e28b811612daf4a8a906691bf042fa67d19bf5d96e16a54793178ef569b69a0712369997bb6deff2f854480b74bffe21456c5601d708a00a213f34fccbc48afac6e14b83ea3923680492993affafdd2946b2c990999c72fcc735b5fb90fe653523f10df1b415f2953f8d9f4b8ff91bb3932d935f3593ef18052b03b8158269b038f2c740539c92f5751cba620a0c7844fb055c4856268b5782dc3af7b47c0c2db32e9b49c0c526720590277860773881516c5349cb1b2a5fde5abf7ad35a7b8abb6883b59a291403bb1228253998171d27d68b5abe75123ac0086af8b53f85a34e900cef0"}}, &(0x7f0000001640)=0x0) timer_settime(r0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f0000000100)={'crc32-generic\x00'}, &(0x7f0000000400)}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2, 0x0) accept4$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14, 0x80000) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000580)={@remote, 0x8, r4}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000001c0)=0x1) [ 994.726637] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:32 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x18000000}, 0x0) [ 994.775049] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:32 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x16}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x48) 23:44:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x675) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) tkill(r1, 0x29) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x6) gettid() 23:44:32 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x11000000}, 0x0) 23:44:32 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f6465762f6c6f6f7030001a3c177ccb7287a44b1d65eee410a5d3d9a95f5d14efa4c6815633c11a41449de658304821a6925d80bba8a663b823ffb41bf2481774525d4810e874ea3159ad853ec7051c027be237784c005fa4c226e2efd0c1fcddbe95ce15e2b696d31981d4c19c675f20e898322436372cdea8220514ac49af77c6b1086d4a4e9616a2763aa22daa03be25729791565038d934fd2353e348bbf0c9afe58144dc3880b7d9aa1c69cc9d59eecbce11b89392e1f38852b3138012dba2c7adb69e7d95c5172397c241a55c7a8745934e00bf5e6036337e01aef9044ec7070198fe3fcccdcb1c741cf15fc27efc32"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) uselib(&(0x7f0000000080)='./control/file0\x00') write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) close(r0) [ 994.967674] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:32 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e21, 0x7ff, @mcast2, 0x200}, {0xa, 0x4e23, 0x1ff, @empty, 0x1f}, 0x4, [0xffffffff, 0x5, 0x5, 0x6, 0x2, 0x3, 0x3, 0x3f]}, 0x5c) unshare(0x60000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101000, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = accept4(r2, &(0x7f0000000200)=@can={0x1d, 0x0}, &(0x7f0000000100)=0x80, 0x80800) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000004c0)=0x400, 0x1) getpeername$netlink(r2, &(0x7f0000000280), &(0x7f00000002c0)=0xc) io_destroy(0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@remote, @remote, @empty, 0x3, 0x6, 0x1f, 0x400, 0x528, 0x1030000, r4}) 23:44:32 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xfffffdef}, 0x0) [ 995.021312] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getuid() r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x40) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x4, 0x81, 0xff, 0x6, 0x0, [{0x3, 0xffffffffffff4755, 0x10000, [], 0x401}, {0x8, 0x4, 0x2, [], 0x47800000000000}, {0xcf81, 0x1, 0x7ff}, {0x0, 0x3, 0xfffffffffffff345}, {0x2, 0xb3a2, 0x400, [], 0xaa}, {0x400, 0x6, 0x0, [], 0x1}, {0x3, 0xffff, 0xbe6, [], 0x2}, {0x6, 0x3, 0x7, [], 0x4}, {0x84a, 0x100000001, 0x1, [], 0x857}, {0x2, 0x7fff, 0x1000}, {0x1000, 0x1f, 0x200, [], 0x6}, {0x7fff, 0x6, 0x1, [], 0x80}, {0x100000000, 0x1, 0x0, [], 0x82a}, {0x7, 0x4308, 0x81, [], 0x4}, {0xfffffffffffffffd, 0x8, 0x100000000, [], 0x40}, {0x3, 0xff, 0x2, [], 0x1ff0}, {0x4, 0x9, 0xff80000000000, [], 0x4800000000}, {0x9, 0x8, 0x9, [], 0x10000}, {0x8, 0x6, 0x27, [], 0x20}, {0x6, 0x800, 0x200, [], 0x4}, {0x7, 0x7f, 0x2, [], 0x10000}, {0x40, 0x1, 0xfffffffffffffffa, [], 0x5}, {0x800, 0x3f, 0x8001, [], 0x3}, {0x1, 0x3, 0x9, [], 0xd65d}]}}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x1, &(0x7f00000000c0)={[{@force='force'}, {@gid={'gid'}}, {@barrier='barrier'}, {@force='force'}, {@session={'session'}}, {@gid={'gid'}}], [{@pcr={'pcr', 0x3d, 0x28}}, {@seclabel='seclabel'}, {@euid_lt={'euid<'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<', r0}}]}) 23:44:32 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xe00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf0) 23:44:32 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xe00000000000000}, 0x0) 23:44:32 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r2, 0x5}, &(0x7f00000002c0)=0x8) close(r0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$sndseq(r1, &(0x7f00000004c0)=[{0xe96, 0x1, 0xf954, 0x411c, @time={0x77359400}, {0xff, 0x3}, {0x800}, @time}, {0x853, 0x0, 0xc0c1, 0x4, @time, {0x0, 0xdd1}, {0x402, 0x81}, @addr={0x53, 0x400}}, {0x5, 0x6, 0x4, 0x5, @tick=0xf8e, {0x2, 0xf1}, {0xb9, 0x7fff}, @addr={0x1, 0x9}}, {0x10000, 0x3, 0x10001, 0x400, @tick=0x4, {0x5, 0x3}, {}, @control={0xfffffffffffffffb, 0x2, 0x4}}, {0xffffffff, 0x100000000, 0x3, 0x1, @tick=0x7, {0x3, 0xffff}, {0x4, 0xb5}, @time=@time={0x0, 0x1c9c380}}, {0x10000, 0x10001, 0x5, 0xfffffffffffffffe, @tick=0x7fff, {0x385976ce, 0x7}, {0x73e, 0xc000}, @time=@time={0x77359400}}, {0x3, 0x2, 0x3779f0f3, 0x5, @time={0x77359400}, {0x7ff, 0x4}, {0x8000000000}, @raw32={[0x6, 0x9, 0x3]}}, {0x2, 0x3, 0x4, 0x2, @time={0x0, 0x1c9c380}, {0x200, 0x8}, {0x7, 0x5}, @raw8={"d5172638ee2bc1fbd2c1bcbe"}}, {0x80000001, 0x5ac, 0xfffffffffffffffb, 0x6, @time={r3, r4+30000000}, {0x3, 0x1000}, {0x0, 0xffffffff}, @raw8={"4022b155b5bac4c4899e2c6f"}}], 0x1b0) [ 995.252806] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 995.267086] hfsplus: unable to parse mount options [ 995.291657] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:32 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xeffdffff00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:32 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) unlinkat(r1, &(0x7f00000000c0)='./control/file0\x00', 0x0) io_destroy(0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x10001) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 995.355712] hfsplus: unable to parse mount options 23:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x11) 23:44:32 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1c00}, 0x0) 23:44:32 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000eeffffff000000000000000000e20d"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000040)) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x20, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000100)={0x0, 0x1, 0x4, &(0x7f00000000c0)}) 23:44:32 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xf0}, 0x0) 23:44:32 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xa}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:32 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1c}, 0x0) 23:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xfeffffff00000000) 23:44:32 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) msgget(0x1, 0x400) unlink(&(0x7f0000000040)='./control/file0\x00') syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x2a100) close(r0) 23:44:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000600)={0x0, {{0x2, 0x4e24}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000140)={0x2, 0x6, 0x4, 0x7, 0xadb, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000900)='./file0\x00') r6 = dup2(r4, r5) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x25f0206a) socket$nl_crypto(0x10, 0x3, 0x15) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) syncfs(r6) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) lstat(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000500)) [ 995.711855] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:33 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465762f76c9646f6f703000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 995.764820] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:33 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x11}, 0x0) 23:44:33 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xe}, 0x0) 23:44:33 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xe803}, 0x0) 23:44:33 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x7ef43ee8, 0x4) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:33 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xa00}, 0x0) 23:44:33 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1100}, 0x0) 23:44:38 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x6800000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:38 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x40030000000000}, 0x0) 23:44:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x7400000000000000) 23:44:38 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fstatfs(r0, &(0x7f0000000200)=""/225) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) vmsplice(r0, &(0x7f0000000100), 0x0, 0x2) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2f64657fe06c6ff35b702826bd6c0000000000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x8000}, 0x1) 23:44:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000600)={0x0, {{0x2, 0x4e24}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000140)={0x2, 0x6, 0x4, 0x7, 0xadb, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000900)='./file0\x00') r6 = dup2(r4, r5) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x25f0206a) socket$nl_crypto(0x10, 0x3, 0x15) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) syncfs(r6) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) lstat(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000500)) 23:44:38 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) close(r0) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="18644a762f6c6f6f703000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:38 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xf0ffffffffffff}, 0x0) [ 1001.616374] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1001.673974] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:39 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x400300}, 0x0) 23:44:39 executing program 3: mkdir(&(0x7f0000000100)='./control/file0\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x4}) unshare(0x2000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid\x00') r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x20}) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./control/file0\x00', 0x128e6671, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000280)="6edeb59f0abaa2c7c9016d3fd49bcacb27ca70505e301595d2d34f19527009016a2641433ef32e510fa5babfc9c1116cf203df44c512a3e1528b7291ca4c0aea", 0x40}, {&(0x7f0000000480)="295a928b2e66baa3da95c7175866b513eb99998a11715bc6b5123a946460e7640e64b7ea178ea82ffa484754f7e5b65d922eb428ac38947174052d3ffa5d8876da06359ffa5bce6ad73da822f32205676466d9311151bd54ffe706daaca2b4418c6fc6a6ffc66d834c4ff42f7be5c4c1612893f1b373e4ec7435ab14b296e149f697870152cfb9463389a5578118df277b20c73d187d679a92a59626713abf840665f44868c480bcf57e50973a89f81f7525c402bfb86f218d2790437a57caefbaec57cbed3f55c6864c3ddf3a143a0becc77f7a8c55d86f27bb940c9900b44d977a1f4a98ba128ac553b1da931e9ea34a151eed55972ab6", 0xf8, 0x1fffffffc000000}], 0x1040, &(0x7f0000000680)={[{@quota='quota'}, {@ikeep='ikeep'}, {@sysvgroups='sysvgroups'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@appraise='appraise'}, {@context={'context', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, "17766d6e6574312bc140656d31"}}, {@fowner_gt={'fowner>', r3}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_measure='dont_measure'}, {@permit_directio='permit_directio'}]}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:39 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xf4010000}, 0x0) 23:44:39 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465762f6c6f6f703000c355d2784742543cf490b449da593d348cd7f49c0c8caa9fb29e5d557c90eb7330"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) fstat(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001800)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./control/file0\x00', 0x5, 0x6, &(0x7f00000016c0)=[{&(0x7f0000000200)="9506393890192c61e4c868798ca0f0746fd41f701623dd7a83beeef2f0d20733ec74e0775d4f022157e7039ce25edc03f5f64afffcd2586581b62a9a5c86e75ec05cdce01c9fde0beddb28e13f85d87ac2e7a1d23144684caff9424cb3a1a78bc89b8d4b822585d72559474aee76033a0a656178e83e5a22e8811849ebee3b5fb376dcf24e248e2db5b2e5d6ca1e74fbcccde8db2367491a35b0e12a49dc6ab072b5e229320e204b5f14b633f76bd59c817f2770e4ef61c085d31bc54f99689482b3588ff764459c4f728a28757d1db43a1e02e228b6b9dc56a70b270b1e5c0954867ce1cfd9536a1e", 0xe9, 0x2}, {&(0x7f00000004c0)="04f0a170764af9bb23fa59a758670a1137bacf2b9537531d4b633b4a839b2226e87d0d13e532cd6eee548e0e78530e73c1bfc94fecfce89fdcab52e0a564b6f4a72120f52af3314c17ee6f04eeb21723367e9ca28015b17fe0a17e67b2d9ee82f066f20251575f621152cf704a0406956f4037390dbb3c87c1d5be440c6b11c818f02cd0c5d9f0759212b012382dccc9c057a340b2fd78660eaf0092d641c6ab866e0be98b4fd9dcc430d22f6f8530ffc01f7fc26e4206ec654acece7fe00621edfb02c5a54df438bb5d1a51671b35cc1f44c85b10641019d6617f3565e481b6a604b11eee0f8426aed523562c67", 0xee, 0x9}, {&(0x7f00000005c0)="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", 0x1000, 0x7}, {&(0x7f00000015c0)="0e7eb66d956f40eafa634c2ab0b0c424d6731154cc8d6f9f4634d3e7002497dde6b984b3d62e37c5ed52bc8e008cfa4afa1ecd23b4de777d871bda85c2e79f8485a6394adb09e60fda337c5158337cfa02c0f9d7f8e916d182f3a77e53b6d305db27a5b1050dc577ae69b57372cf8f8c86851888bee2b5b807629377252b9bc58064807a8bce506a2733a2ec4a72dfcbbdba457c3539a5bb62976f0ff9084023163783ce76e267b26b2e47c4da049e8f3a724ca8b1f29b060f19290833ba7b130cf323d1af4a5a49d28eac085138c26b32bd1563e2296ca3772665393186482358d61329ab586aa8f5597309a4a347b70b47eb17419649", 0xf7, 0x9}, {&(0x7f0000000300)="c133cc7eb9e1e063a30831ed9f494ae0d4c857f66d8a98fafd438e3826aaa87df180c0e3cb67b1205576aefa00df9c9d731cc21d7bcccab91dcf920b0c5c5f224b8ad264f6e68ae9cc21d99d08c2a0b098abecced2c7f5cd5063390540397fe52b34c9c4bd160b09fb915d59", 0x6c, 0x3}, {&(0x7f00000003c0)="af229f13d2c890d9f9a0c08d6429901c424bf116d8cb8a0a47bf59b7685c45a576ade6c2941fe4dd3bebd941bb684fd60229e74ea9b4f49b97772f2db42e623e62210d336929ce8350401d23fd837893022a36feb1ad15adc5202d9d86927a465bb6", 0x62, 0xffffffff}], 0x10000, &(0x7f0000001900)={[{@shortname_win95='shortname=win95'}, {@uni_xlate='uni_xlate=1'}, {@shortname_win95='shortname=win95'}, {@shortname_lower='shortname=lower'}, {@uni_xlate='uni_xlate=1'}, {@shortname_mixed='shortname=mixed'}, {@shortname_winnt='shortname=winnt'}], [{@uid_lt={'uid<', r2}}, {@obj_type={'obj_type', 0x3d, 'vmnet1'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, '*-'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'sysv\x00'}}, {@fowner_lt={'fowner<', r4}}, {@dont_hash='dont_hash'}, {@seclabel='seclabel'}]}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x4, 0x0, 0x0, @tick=0x1, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:39 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x4000000}, 0x0) [ 1002.204358] FAT-fs (loop3): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1002.342625] FAT-fs (loop3): Unrecognized mount option "uid<00000000000000000000" or missing value 23:44:39 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x300000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:39 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xf000}, 0x0) 23:44:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf000) [ 1002.706646] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:40 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:40 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_setup(0xffffffff, &(0x7f0000000080)) io_setup(0x4, &(0x7f00000000c0)) io_setup(0x81, &(0x7f0000000100)) io_setup(0x100000000, &(0x7f0000000200)) io_setup(0x3ff, &(0x7f0000000240)) io_setup(0x7, &(0x7f0000000280)=0x0) io_destroy(r2) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f0500000053a6e5cc824157ede1ebdeb988ef6c6f6f703000261af9e1d83839c3b3ecb2890afeac8be819b369b578403c4558394b13dec6d6426702f51bd8d7599100f6135d37f30ba665f94da979ef74bc21422f214d463ab3d643e956c1dbe25bb630514a80638856177c2c558d08da581703cd6c3cd8737dea0d5a97ed68fd34da565781a15222b9"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:40 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xf401000000000000}, 0x0) 23:44:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000600)={0x0, {{0x2, 0x4e24}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000140)={0x2, 0x6, 0x4, 0x7, 0xadb, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000900)='./file0\x00') r6 = dup2(r4, r5) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x25f0206a) socket$nl_crypto(0x10, 0x3, 0x15) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) syncfs(r6) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) lstat(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000500)) 23:44:40 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x6000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1002.751561] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:40 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x20000000}, 0x0) 23:44:40 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xf401}, 0x0) 23:44:40 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xfffff000}, 0x0) 23:44:40 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xfeffffff}, 0x0) 23:44:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xffffff9e) 23:44:40 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xa00000000000000}, 0x0) 23:44:40 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xe8030000}, 0x0) 23:44:41 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x7, 0x80, 0x3, 0x0, 0x0, [{r1, 0x0, 0x5}, {r2}, {r3, 0x0, 0x1}]}) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ftruncate(r0, 0x6) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f6465762f6c6f6f709d3000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r4) 23:44:41 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="d43765762f6c6f6f70886b"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control\x00') close(r0) 23:44:41 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x700}, 0x0) 23:44:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000600)={0x0, {{0x2, 0x4e24}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000140)={0x2, 0x6, 0x4, 0x7, 0xadb, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000900)='./file0\x00') r6 = dup2(r4, r5) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x25f0206a) socket$nl_crypto(0x10, 0x3, 0x15) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) syncfs(r6) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) lstat(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000500)) 23:44:41 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xe000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x40030000000000) 23:44:41 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xe00}, 0x0) [ 1004.080769] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1004.128221] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:41 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x4}, 0x0) 23:44:41 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1100000000000000}, 0x0) 23:44:41 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x9000000}, 0x0) 23:44:41 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1800}, 0x0) 23:44:41 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000300)={'broute\x00', 0x0, 0x4, 0x90, [], 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)=""/144}, &(0x7f00000003c0)=0x78) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f206c6f6f703000b9ac8427f8e289bbd1d8fa51171643a64c499ea1c0e53e74fd379af4adb47ef08a8cac98d686e6d356c4b19b4d6946e96061db5a501a"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x80000001}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r2, 0x6}, 0x8) close(r0) 23:44:42 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50800020}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbfe, {0x2, 0x80, 0x14, 0x0, 0xff, 0x4, 0xff, 0x0, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:42 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x9}, 0x0) 23:44:42 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x3f00}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x4, &(0x7f00000000c0)='em1\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r1, &(0x7f0000000000)='setgroups\x00') r3 = socket$netlink(0x10, 0x3, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) shutdown(r3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x3}, {}]}, 0x10) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) sendfile(r2, r2, &(0x7f0000000080), 0x80) dup3(r2, r0, 0xd0954e560eeded7d) 23:44:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x4c00000000000000) 23:44:42 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0x15, 0x80005, 0x8) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x4) io_destroy(0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="72ef37b33ce8f627fb64ee9bf232459236ac"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) close(r0) 23:44:42 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x2}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:42 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1c00000000000000}, 0x0) [ 1005.266739] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:42 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x7}, 0x0) [ 1005.319457] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:42 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xfffffffe}, 0x0) 23:44:42 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x1, 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x8, 0x32, r0, 0x0) r1 = userfaultfd(0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="cae02bc08049b67a"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000000c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)={0x1, 0x4, 0x4, 0x10000, 0x7, [{0x6, 0x0, 0xffff, 0x0, 0x0, 0x2}, {0x4, 0x4, 0x5, 0x0, 0x0, 0x100a}, {0xfffffffffffffe00, 0xbb, 0x18a, 0x0, 0x0, 0x800}, {0x100, 0x3ff, 0x8, 0x0, 0x0, 0x4}, {0x6, 0x20, 0x7fff, 0x0, 0x0, 0xce3f3e16ee890674}, {0x7, 0xe930, 0x784, 0x0, 0x0, 0xd}, {0xc30d, 0xffff, 0x1, 0x0, 0x0, 0x400}]}) close(r1) 23:44:42 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x400000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x2208) 23:44:42 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xeffdffff}, 0x0) 23:44:42 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_setup(0x1ff, &(0x7f00000000c0)) io_setup(0x20, &(0x7f0000000240)=0x0) io_destroy(r1) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="62616e316e6f646576776c616e30272ca71a6bb5e5b9e244a791"]) r3 = msgget(0x3, 0x100) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000100)=""/21) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000200)='./control/file0\x00') close(r0) 23:44:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x4, &(0x7f00000000c0)='em1\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r1, &(0x7f0000000000)='setgroups\x00') r3 = socket$netlink(0x10, 0x3, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) shutdown(r3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x3}, {}]}, 0x10) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) sendfile(r2, r2, &(0x7f0000000080), 0x80) dup3(r2, r0, 0xd0954e560eeded7d) [ 1005.550669] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1005.590329] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:42 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x4000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:42 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f00000000c0)="737929dda8b8423aedfef93e8f9e0ef2104499e4d50340c08e037e9b1f05778e2cc71034bf673bb52bce0ec969536651e214af680c08ae5477825b3e", 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x300) 23:44:43 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x7000000}, 0x0) 23:44:43 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1800000000000000}, 0x0) 23:44:43 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xa000000}, 0x0) 23:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x7000000) 23:44:43 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x4000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x103, 0x0) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x38) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r4 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x7, 0x400) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xd8, &(0x7f0000000640)=[@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x21}, 0x4}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x81}, @in6={0xa, 0x4e22, 0x8, @loopback, 0x3}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x9, @loopback, 0x8}, @in6={0xa, 0x4e24, 0x8, @remote, 0x900}, @in6={0xa, 0x4e23, 0x64e5, @local, 0x7}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x2}, &(0x7f0000000440)=0x8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000940)={{{@in=@multicast2, @in6=@local, 0x4e24, 0x8, 0x4e22, 0x80000000, 0xa, 0x80, 0x80, 0x88, r7, r8}, {0xcb, 0x2, 0x5, 0xfd7, 0x0, 0x809c, 0x2, 0x101}, {0xfffffffffffffff9, 0x7, 0x8, 0x3}, 0x2, 0x0, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d3, 0x3f}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x16}, 0x3500, 0x2, 0x2, 0xb800000000000000, 0x800, 0x3, 0x4}}, 0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000480)={r6, 0x3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000f00)={{{@in6, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000002040)=0xe8) r10 = getuid() openat$cgroup(r1, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000140)={0xa, 0xa, 0x1, 0x9}, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002080)={{{@in6, @in, 0x0, 0x7, 0x4e21, 0x81, 0xa, 0x80, 0x80, 0x8, r9, r10}, {0x7, 0xfffffffffffffff7, 0x429, 0x3, 0x7, 0x955c, 0x1, 0x7}, {0x7, 0xfffffffffffffff8, 0x1, 0x6}, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {{@in6=@local, 0x4d4, 0x7f}, 0xa, @in6=@mcast2, 0x3507, 0x0, 0x3, 0x0, 0x8, 0x3, 0x3f5}}, 0xe8) setsockopt$inet_mreqn(r3, 0x0, 0xe368adb30c792f1f, &(0x7f0000000340)={@local, @local}, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=0x0) getpeername$unix(r3, &(0x7f00000003c0)=@abs, &(0x7f0000000600)=0x6e) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000280)=r11) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000a40)={'filter\x00', 0x71, "6e3449933593cba84025ab8a59e9fee3b649d8b59a28fe52e33c830f0f659ce5718c89930b2408bcace0efaf15186f7e1d19c420eb90dc9b33004cb2868ccbc7277e4cae078a8c049403a7c8634e6a9e1a4462158dd591f0eb08abcb0a98e329562b4b796c7847ee5778247403e3ca753e"}, &(0x7f0000000200)=0x95) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000580), &(0x7f00000005c0)=0xc) shmctl$IPC_RMID(0x0, 0x0) 23:44:43 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x1f4}, 0x0) 23:44:43 executing program 3: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000010000/0x3000)=nil, 0x3000}, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x9) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f64847600000000704d00"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r2) 23:44:43 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x0, 0x1, 0x4}) 23:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xff000000) 23:44:43 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x700000000000000}, 0x0) 23:44:43 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x6}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:43 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xffffff7f00000000}, 0x0) 23:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x4) 23:44:43 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='hpfs\x00', 0x2000, &(0x7f0000000200)='sysv\x00') unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0xfffffffffffffffe}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:43 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0xe803000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:43 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xffff0000}, 0x0) 23:44:44 executing program 5: socketpair(0x2, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000140)={0xd9, ""/217}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x40) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) finit_module(r1, &(0x7f0000000000)=')(\x00', 0x3) sendmsg$nl_route(r1, &(0x7f0000000b40)={&(0x7f0000000040), 0xc, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3843e3a34776e27000000010000100000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012000c00010065727370616e00000800020004001200"], 0x38}}, 0x0) 23:44:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xfffffffe) 23:44:44 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000014000/0x2000)=nil, 0x2000}, 0x5}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:44 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xffffff7f}, 0x0) 23:44:44 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x3}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:44 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) [ 1006.805863] attempt to access beyond end of device [ 1006.826332] loop5: rw=1048577, want=39393, limit=112 [ 1006.873912] attempt to access beyond end of device [ 1006.885134] loop5: rw=1048577, want=43489, limit=112 23:44:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x4800000000000000) [ 1006.910090] attempt to access beyond end of device 23:44:44 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x2000}, 0x0) 23:44:44 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x600000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:44 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x30}) unshare(0x60000) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0xa, &(0x7f0000000200)=[{0x2, 0x4, 0x800, 0x5}, {0x3, 0x1000000000000000, 0x7ff, 0x81}, {0xffff, 0x81, 0x2, 0x20}, {0x8000, 0x0, 0x3, 0x80000001}, {0x10000, 0x101, 0x4, 0xae3}, {0x4, 0x80000000, 0x1, 0x9}, {0x0, 0x79a5, 0x2, 0x3}, {0x0, 0x3a6, 0xffffffffffffffa9, 0x58}, {0x3, 0xffffffff, 0xfffffffffffffc01, 0xf59d}, {0x81, 0x7fffffff, 0x7, 0x7}]}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x91, 0x7f, 'queue1\x00', 0x401}) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1006.956621] loop5: rw=1048577, want=47585, limit=112 [ 1006.982126] validate_nla: 6 callbacks suppressed [ 1006.982136] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1007.042334] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1007.055174] attempt to access beyond end of device 23:44:44 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7020000ff000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b765040400010000000404000001000000b7030000000000006a0a00fe000200008500000026000000b7000000000000009500005046b102440eba561e230000000000000000000000000000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x197, &(0x7f0000000600)="1613204aec0c3c1d40ff00e10043", &(0x7f0000000380)=""/215, 0x8000000000004000}, 0x28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x3989, 0x2, 0xfffffffffffffe00, 0x69, 0x0, 0x200, 0x80100, 0x1, 0x9, 0x8000, 0x435, 0x827, 0x3, 0x8, 0x0, 0x9, 0x7, 0x6, 0x3, 0x2, 0x7, 0x0, 0x7ff, 0x10000, 0x3f, 0x7, 0x8, 0x0, 0x4, 0x5, 0x2, 0x4, 0x4, 0x7ff, 0x8, 0x7, 0x0, 0x705, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x8, 0x4, 0x7, 0xffffffffffffff80, 0x3, 0x5}, r1, 0xf, r2, 0x8) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_ports\x00', &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_ports\x00', &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='{*md5sum\\\x00', &(0x7f0000000580)='syzkaller\x00', &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sync_ports\x00'], &(0x7f00000007c0)=[&(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_ports\x00', &(0x7f00000006c0)='#/cpuset\x00', &(0x7f0000000700)=':\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='syzkaller\x00']) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000840)=0x10) [ 1007.095692] loop5: rw=1048577, want=51681, limit=112 23:44:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x5) [ 1007.135765] attempt to access beyond end of device 23:44:44 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) open(&(0x7f0000002c80)='./control/file0\x00', 0x109081, 0x103) r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000002cc0)=@abs, &(0x7f0000002d40)=0x6e, 0x80800) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1000002, 0x8010, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x6000c) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) socket$bt_rfcomm(0x1f, 0x3, 0x3) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) recvmsg$kcm(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f00000014c0)=""/180, 0xb4}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000300)=""/90, 0x5a}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000002580)=""/215, 0xd7}, {&(0x7f0000002680)=""/80, 0x50}], 0x9, &(0x7f0000000100)=""/35, 0x23, 0x3}, 0x40000040) lstat(&(0x7f0000002880)='./control\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0}, &(0x7f0000002dc0)=0xfffffffffffffdce) getresuid(&(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000002a40)=0x0) getresuid(&(0x7f0000002a80)=0x0, &(0x7f0000002ac0), &(0x7f0000002b00)) mount$9p_fd(0x0, &(0x7f0000002800)='./control\x00', &(0x7f0000002840)='9p\x00', 0x10, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache='fscache'}], [{@pcr={'pcr', 0x3d, 0x28}}, {@permit_directio='permit_directio'}, {@fowner_lt={'fowner<', r3}}, {@pcr={'pcr', 0x3d, 0xc}}, {@pcr={'pcr', 0x3d, 0x37}}, {@fowner_gt={'fowner>', r4}}, {@hash='hash'}, {@fowner_lt={'fowner<', r5}}, {@euid_eq={'euid', 0x3d, r6}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) [ 1007.158243] loop5: rw=1048577, want=55777, limit=112 23:44:44 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x6000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:44 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x3e8}, 0x0) 23:44:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)={0xfffffffffffffffd, 0x200}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x8, 0x6}) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000400)) [ 1007.266100] attempt to access beyond end of device [ 1007.288213] loop5: rw=1048577, want=59873, limit=112 23:44:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x7a) [ 1007.336286] attempt to access beyond end of device 23:44:44 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x100000000000000}, 0x0) [ 1007.356907] loop5: rw=1048577, want=63337, limit=112 [ 1007.404349] attempt to access beyond end of device 23:44:44 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl(r0, 0x629, &(0x7f0000000080)="a9f728da6f2e67538d65dc4bf9424dbf0c8327da56e5d385444cec59226929596443de0509019f1d40684ede7f6ace0511e810e2d5890b40a224d0ae6f63454a7e4846de4fe25f7378d342b49daeb039a36ce0a1d299399a8b80791779e4") r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:44 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xfffffffffffff000}, 0x0) 23:44:44 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xf401}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1007.442466] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1007.452630] loop5: rw=1048577, want=63338, limit=112 23:44:44 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_dccp_int(r0, 0x21, 0x4, &(0x7f0000000100)=0x3, 0x4) pipe2(&(0x7f00000000c0), 0xffffffffffffffff) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="636c6561725f72656673007edb") writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)='4', 0x1}], 0x1) [ 1007.508455] Buffer I/O error on dev loop5, logical block 63337, lost async page write [ 1007.522445] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1007.553376] attempt to access beyond end of device 23:44:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x3000000000000) [ 1007.576187] loop5: rw=1048577, want=63339, limit=112 [ 1007.587433] Buffer I/O error on dev loop5, logical block 63338, lost async page write [ 1007.613921] attempt to access beyond end of device 23:44:44 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xffff000000000000}, 0x0) [ 1007.628698] loop5: rw=1048577, want=63340, limit=112 [ 1007.670942] Buffer I/O error on dev loop5, logical block 63339, lost async page write [ 1007.696187] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1007.703931] attempt to access beyond end of device [ 1007.730163] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1007.744254] loop5: rw=1048577, want=63341, limit=112 [ 1007.758335] Buffer I/O error on dev loop5, logical block 63340, lost async page write [ 1007.776687] attempt to access beyond end of device [ 1007.782589] loop5: rw=1048577, want=114, limit=112 [ 1007.788917] Buffer I/O error on dev loop5, logical block 113, lost async page write [ 1007.801354] attempt to access beyond end of device [ 1007.806692] loop5: rw=1048577, want=115, limit=112 [ 1007.815226] Buffer I/O error on dev loop5, logical block 114, lost async page write [ 1007.826537] attempt to access beyond end of device [ 1007.832004] loop5: rw=1048577, want=116, limit=112 [ 1007.838552] Buffer I/O error on dev loop5, logical block 115, lost async page write [ 1007.846420] attempt to access beyond end of device [ 1007.854059] loop5: rw=1048577, want=117, limit=112 [ 1007.866876] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 1007.875345] attempt to access beyond end of device [ 1007.884655] loop5: rw=1048577, want=130, limit=112 [ 1007.889890] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 1007.897881] attempt to access beyond end of device [ 1007.902911] loop5: rw=1048577, want=131, limit=112 [ 1007.908322] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 1007.918459] attempt to access beyond end of device [ 1007.924302] loop5: rw=1048577, want=132, limit=112 [ 1007.930569] attempt to access beyond end of device [ 1007.936110] loop5: rw=1048577, want=133, limit=112 [ 1007.941158] attempt to access beyond end of device [ 1007.946286] loop5: rw=1048577, want=142, limit=112 [ 1007.951913] attempt to access beyond end of device [ 1007.957093] loop5: rw=1048577, want=143, limit=112 [ 1007.963103] attempt to access beyond end of device [ 1007.968161] loop5: rw=1048577, want=144, limit=112 [ 1007.974059] attempt to access beyond end of device [ 1007.980201] loop5: rw=1048577, want=145, limit=112 [ 1007.988031] attempt to access beyond end of device [ 1007.995049] loop5: rw=1048577, want=2457, limit=112 [ 1008.002693] attempt to access beyond end of device [ 1008.010108] loop5: rw=1048577, want=2486, limit=112 [ 1008.021674] attempt to access beyond end of device [ 1008.029054] loop5: rw=1048577, want=2487, limit=112 [ 1008.034313] attempt to access beyond end of device [ 1008.040492] loop5: rw=1048577, want=2488, limit=112 [ 1008.045644] attempt to access beyond end of device [ 1008.050656] loop5: rw=1048577, want=2489, limit=112 [ 1008.055727] attempt to access beyond end of device [ 1008.061874] loop5: rw=1048577, want=2510, limit=112 [ 1008.067060] attempt to access beyond end of device [ 1008.072022] loop5: rw=1048577, want=2511, limit=112 [ 1008.078173] attempt to access beyond end of device [ 1008.083231] loop5: rw=1048577, want=2512, limit=112 [ 1008.088417] attempt to access beyond end of device [ 1008.093514] loop5: rw=1048577, want=2513, limit=112 [ 1008.109276] attempt to access beyond end of device [ 1008.114216] loop5: rw=1048577, want=2562, limit=112 [ 1008.119374] attempt to access beyond end of device [ 1008.124311] loop5: rw=1048577, want=2563, limit=112 [ 1008.129585] attempt to access beyond end of device [ 1008.134535] loop5: rw=1048577, want=2564, limit=112 23:44:45 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:45 executing program 5: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x30, 0x0, 0x9}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000580)={r1, 0x8, 0x9, 0x2}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='io.stat\x00', 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000600)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$binfmt_aout(r2, &(0x7f0000000440)={{}, "", [[]]}, 0x120) 23:44:45 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x6800}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6000000000000000) 23:44:45 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:45 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x900000000000000}, 0x0) [ 1008.139677] attempt to access beyond end of device [ 1008.148065] loop5: rw=1048577, want=2565, limit=112 [ 1008.153154] attempt to access beyond end of device [ 1008.167110] loop5: rw=1048577, want=2574, limit=112 [ 1008.172320] attempt to access beyond end of device [ 1008.178684] loop5: rw=1048577, want=2575, limit=112 23:44:45 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xfeffffff00000000}, 0x0) [ 1008.213997] attempt to access beyond end of device [ 1008.233565] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1008.252940] loop5: rw=1048577, want=2576, limit=112 [ 1008.258293] attempt to access beyond end of device 23:44:45 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x400000000000000}, 0x0) [ 1008.281289] loop5: rw=1048577, want=2577, limit=112 [ 1008.297600] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1008.303447] attempt to access beyond end of device [ 1008.316565] loop5: rw=1, want=4945, limit=112 23:44:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f00000000c0)="040400000700000000000000fff5", 0xe, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x20000000003, @remote}, 0x1c) 23:44:45 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x60}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xa00000000000000) 23:44:45 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) dup3(r0, r0, 0x80000) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:45 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="4d64d55065762f6c6f6f703000"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:45 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0xa}, 0x0) [ 1008.510557] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4b98, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sync() [ 1008.581931] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:45 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x34000}, 0x0) 23:44:45 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xeffdffff00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf0ffffffffffff) 23:44:46 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x600000) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000000c0)=0x4) 23:44:46 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x3e8}, 0x0) 23:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x100000000000000) 23:44:46 executing program 5: syz_execute_func(&(0x7f0000000000)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3bcb4dbbbb8064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 23:44:46 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x40000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000) io_destroy(0x0) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@mcast1, @mcast1, @ipv4={[], [], @local}, 0x1, 0x81, 0x0, 0x400, 0x5, 0x80000, r2}) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x5, 0x1) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:46 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x2000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1008.989784] IPVS: ftp: loaded support on port[0] = 21 23:44:46 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xa}, 0x0) 23:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x60000000) 23:44:46 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB='p0\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lsetxattr(&(0x7f0000000080)='./control/file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)='sysv\x00', 0x5, 0x3) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000004c0)={"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"}) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1009.113255] IPVS: ftp: loaded support on port[0] = 21 23:44:46 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xeffdffff}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xfffffff0) 23:44:46 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) read(r0, &(0x7f0000000240)=""/98, 0x62) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB='/dev/oop8\x00'], &(0x7f0000000380)='./control\x00', &(0x7f0000000200)='ramfs\x00', 0x1000, &(0x7f00000000c0)='GPLkeyring$md5sumtrusted\x00') write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:46 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x2000000000000000}, 0x0) 23:44:46 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe803}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf0ffff) 23:44:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x80001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f00000001c0)="ea0a006900baf80c66b8881aa38866efbafc0cec66b9ea02000066b85530000066ba000000000f309a809c06010f07ff6e00baf80c66b88a48a78266efbafc0cb89eabef6766c74424000d0500006766c7442402aa0000006766c744240600000000670f0114242e366736f30f59ce0f01cb", 0x72}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:47 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xe00}, 0x0) 23:44:47 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r1, &(0x7f00000000c0)="3dec1c976efdbeca9c3a312b9ca69e1b7a027b3961c5cf0065a3da29576459f3e1ff9a6f4626e23d5c", 0x29, 0x4800, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x3, 0x1, {0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast2}, 0x1000}}}, 0x80) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) fsetxattr$security_selinux(r1, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x2) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r3) 23:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x48000000) 23:44:47 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x1f4}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:47 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./control\x00') close(r0) 23:44:47 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x34000}, 0x0) 23:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x4c00) 23:44:47 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xa00}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:47 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB='/dev/lVop0\x00'], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1010.038707] *** Guest State *** [ 1010.042148] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 23:44:47 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xfffffffe}, 0x0) 23:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf00) [ 1010.132643] CR4: actual=0x00000000000026c0, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1010.203604] CR3 = 0x00000000fef00000 [ 1010.221634] RSP = 0xffff8801c26e7350 RIP = 0xffffffff812108b9 [ 1010.246513] RFLAGS=0x00010042 DR7 = 0x0000000000000400 [ 1010.268233] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 1010.282740] CS: sel=0x0010, attr=0x0a09b, limit=0xffffffff, base=0x0000000000000000 [ 1010.296515] DS: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0x0000000000000000 [ 1010.312930] SS: sel=0x0018, attr=0x0c093, limit=0xffffffff, base=0x0000000000000000 [ 1010.330491] ES: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0x0000000000000000 [ 1010.339201] FS: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0x00007f5da907c700 [ 1010.352014] GS: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0xffff8801dae00000 [ 1010.381680] GDTR: limit=0x0000007f, base=0xfffffe0000001000 [ 1010.390975] LDTR: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0x0000000000000000 [ 1010.404741] IDTR: limit=0x0000ffff, base=0xfffffe0000000000 [ 1010.414206] TR: sel=0x0040, attr=0x0008b, limit=0x00000067, base=0xfffffe0000003000 [ 1010.422910] EFER = 0x0000000000000000 PAT = 0x0407050600070106 [ 1010.429923] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1010.437930] Interruptibility = 00000000 ActivityState = 00000000 [ 1010.444329] *** Host State *** [ 1010.448110] RIP = 0xffffffff812108be RSP = 0xffff8801c8ae7350 [ 1010.454207] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1010.461277] FSBase=00007f5da903a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 1010.469656] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1010.475661] CR0=0000000080050033 CR3=00000001bba1d000 CR4=00000000001426f0 [ 1010.483283] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 1010.491242] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1010.497870] *** Control State *** [ 1010.501445] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1010.508821] EntryControls=0000d1ff ExitControls=002fefff [ 1010.514429] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1010.522173] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 1010.530749] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1010.540404] reason=80000021 qualification=0000000000000000 [ 1010.548813] IDTVectoring: info=00000000 errcode=00000000 23:44:47 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x7afe6b0f, 0x4) syz_emit_ethernet(0x423, &(0x7f0000001100)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) 23:44:47 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x2000, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000000c0)={0x8, 0xffffffff7fffffff}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0xfa, 0x80000000, 0x101, 0x0, 0x5, 0x80, 0x1, 0xfffffffffffffffe, 0x6, 0x7fffffff, 0x80000000, 0x80, 0x800, 0xffffffff, 0x6, 0x3d6d400000, 0x9, 0x7ff, 0xfffffffffffffffe, 0x948c, 0x20, 0xffffffff, 0x8001, 0x1, 0x3, 0x200, 0x3663ea60, 0x1ff, 0x5, 0x5, 0x0, 0x8a73, 0x9, 0xffff, 0x5, 0x0, 0x36e6, 0x1, @perf_config_ext={0x40, 0x5}, 0x100, 0x1f, 0x4, 0x1, 0xfff, 0x0, 0x7}, r2, 0xe, 0xffffffffffffff9c, 0x8) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:47 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x2}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xfeffffff) 23:44:47 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xeffdffff00000000}, 0x0) 23:44:47 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000100)='./control\x00', 0x1) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1010.554379] TSC Offset = 0xfffffde0ef15e532 [ 1010.559332] EPT pointer = 0x00000001c4e8601e 23:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x7) 23:44:48 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x18000000}, 0x0) 23:44:48 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x6000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:48 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@setneightbl={0x14, 0x43, 0xa01}, 0x14}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) 23:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x3f00000000000000) 23:44:48 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x20000000}, 0x0) 23:44:48 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getpeername(r0, &(0x7f0000000080)=@ethernet, &(0x7f0000000100)=0x80) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:48 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x6800000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:48 executing program 5: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) symlink(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x0) 23:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x11000000) 23:44:48 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x200740) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000200)="5569f98bb046fa462274b270297289c63dd12f53dd78df8fcbfa15a4a152a0c9c9fc1922d99fb89ee24afa3a829ef5ab2c4404d0a488c2361b7d8506444f36c847b4f90f13c647423cedc174f25fd58438a4b46a13fb7268647c331922729a836aab3664b4c1d3e1ab7901982712f0bba329ef88e3fb4ce61a74242571bf1284b0778297b5ed5dbb030f49e2592c7e491eb19a7c14948a14e15c72a9d7d0877279e8280015bdd7473de93b5c571a24d00b0438587489042de3ce93c5807e5c774690c2a929260d456c40a7c60a301d6fc09a2ef93a3a362a28b7cb1518c320") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0xffff, 0xfffffffffffffffb, 0x110e847a, 0x0, 0x1ff, 0x3, 0x6, 0x800, 0x276, 0x40, 0x6, 0x8, 0x4, 0x38, 0x2, 0x20, 0x7fffffff, 0x7}, [{0x7, 0x2, 0x4b98, 0xda, 0x154b, 0x5, 0xfffffffffffffffd, 0xd3}], "4438de", [[], [], [], []]}, 0x47b) io_destroy(0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:48 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xf401}, 0x0) [ 1011.164262] overlayfs: failed to resolve './file1': -2 23:44:48 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x700}, 0x0) [ 1011.240018] overlayfs: failed to resolve './file1': -2 23:44:48 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xffffffff00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:48 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB='ev/loop0\x00\x00\x00'], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000080)={@mcast1}, &(0x7f00000000c0)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, r2, 0x3c, 0x1, @in6={0xa, 0x4e22, 0x8000, @local, 0x7fffffff}}}, 0xa0) close(r0) 23:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6000) 23:44:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") 23:44:48 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x2000}, 0x0) 23:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x3f00) 23:44:48 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x40000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:48 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:48 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xfeffffff00000000}, 0x0) 23:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x68) 23:44:49 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x400000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:49 executing program 4: mkdir(&(0x7f0000000080)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:49 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1800}, 0x0) 23:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6c) 23:44:49 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400000, 0x0) mmap$binder(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r2 = creat(&(0x7f00000000c0)='./control\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) 23:44:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000140)) 23:44:49 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xfffffffffffff000}, 0x0) 23:44:49 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe00010000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x500000000000000) 23:44:49 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0x1000, "33d5c000f1e4126f52cff0e244d87a56e201884408ee9a298eb9239ded614c077b859ff0c1f3b5445335217a189f97e709612ded6d01c3f090fbddcf7c19b7c9dcc08d38adf53eeb846dbe0d8b3c84e4c9aaa89308589db57034eae7dbea882addedf5e77333bf0a65288dfc9dccb18da0eb7c2c3c278a10710f671df93814cf725973e624b21980fb0578b6ca8f023eb020f50e267930e263963e650735ed04fd8ea059d94fc6f2a3b6238213b092a36ee4aa763c9aff39aebf73604305d01d50303cc8d0281d1204d51edf95e164f650168503d05402757cce9fc47e6c1a3e98ca0646747b5882f18b8b722ff04bb752e723d3e5fcc4b7ae4264038e5956387d129e8a1fa4874c3e8b520b5793b7cec00907588f6d2e670952181aef0dbc99808c55681c9b27b1caea5651cbf7c1daaae566ab0d36763850129f0afb3306d8116059900525262474cc311e8f47444803654b6c257003e424b686a7b2d11967c974a5e20ffe0c2b2f265f75e6073da060661a2d426ddcba96da641c167c292304fb34efc1571df9d7f4ae7dbd70e5c280d49ed320be2da0f8c5ef4d045476dbb5e7c740ec1b04f44ef1699bed55e3e13d1939b2aa3d91966c90079b3058c40e513f222a3689fff17f4feabd45f8bcf81891eec939b7df4eaceb4fd09baaa5068fc50b9f0548395323190d35e485bdfe93d5492244e41912be5e47c81e4646d4f40777cc887d1c9ee76f2f4e5784c90d78e0032de2d14448ad6ee58cf2afb7734d85b8624784426c9da3edd08a22b9de158cdd26d35ccb24819206e95673ada1f12ef827bfd210e84a6da8477492885713e073fb716b35d378fb90701b44e6771dc4663c5037df56b41499ca802c28fb6952b8add0a9279be552c34dd7330fb926ff57db21f7b22ff0b8557dbcad64338531e8a1f18548aef4b5c42a977439c2820d0d4bc95fa9b10db7d37b8a89383f865e7bcf988ad1752938d945857580c0cf3200ade56a48f7befa8ca467e1e665face6b5e51c19a7100e76ce4f65ac82e518b78137b5337db5324a2195f9de8552685d33218362b9dea627e146bd18aba8d342f22720bd6bcc9e1e15b79b1e9b5b89f7eb46687b7ca5d5ad0725428a1193db4a8d455ffe4491dcc4e7a6d56a50789d28989b749f9be3a3d686c3ca56152a81bd252a12cdfbcaf0c0436d9a12b00881402dd238389be2aaf7136a0cacb0669b26a939ff9b8745fca07e803d312a780241df6a97f9ee9a8cc2f88d83dc6a988bebad448f85af2853ca48e44990db99f8dab64129830024290c250b0c2857693dec1eec718aabc7a26d35372dbbc3d27cd7a33bbcd43ce68935e854da3f102b42b408acea5b6019b89aec04dc316e027ea60421bc125ded22317a3209104ea602ebe2db66fba7265ae642954dc1d4803ef5f98d1a9f32fa04371a76ed6799e3deec5c04e1d2b798f53fd6c6a4eb3c7d4c7e6d96004a1434dd07c11b33dbf3af4dbc9b53d667836194818166b1020baab2c7ee18b344d90356d9cea25125c35cc95728fd2f19c1dd748734cf1faa4f427f23e1736bb3e9d1bf7d5237c20751f0800e08a5b3f21702e5afec9bb69d743e66ddf4c65e44266e24556f997ba465f2c3987647aeceb3c8c959cb9ab911bdb3565e48e31141cdc848c25fa02f23afee897b46a3722807a70ead736e3391a995607d93359fdec22b80b96ef975853da018e0aca6a9a23f7e2025edfb1769f5a546cd91134f5409c535ed685f35c7c3de07ec5823acdf1159727a1d35084c48a1b49d0afb2fe1dae2729d9fc9e8d9ea056113b29f87a5b01e674befb30a715fffdb8be5d4b1f9254b2689983e1ea0f82fad474cb44a8fb603dd975e4f29aa3ba0860391b76d8d7791d862c0e71333f7246233ffa35c210a0b5d787fb870e6883baa0c78bc5fd8e867f565dde1e7bb531295615b0220c78087ffd524ed465d52dbe87b44711120a7fcbffcc53f15c8315f88e41344b4a2e603231c0c4503dc2cf32b6c23eae74aa267af402d95f0ce3c4f707b786ba11d1cce888c3ff9b2df3c313ea74d8eec1e1ab2ae1217801ae3f844cc19b792c12714bedbff39ac2aaffd4fe1f84b4490984cbc3118a361c781f27190e41220a8fe8c6d8f8ed1b1f01161cca8be3d81a6acf33a559785296d6fa5868dd3797c85dba97d4fb7c4bd85bcac66dd044f6f63b49c49445f90b9f22a9ca2a3d428c0302202ddd6029e646f8ca366c5a178f8d6987cd84557c9676f78404e8c68df08a304a3c2782af80ea8e7c4262a5bc10a329f1b0e3267ff5d100aca6717f6115a8f0771dda7dc2c72dd14389f9102f75b5c44fc5d8fc0e068c949fca08883cf2ad8a4923c7e315376312162e427670cd6999db64cdce1be5d7ac728f64a545952f4b92826eed41f3d403000ab6361fed42f8afedc3beac3f1f114dfbc3f374d0180f32100529aadce1d9f126f22b0e005e6f78549144b98a55080a2c0e8683ffa03546106160cb36c73754548dfe9c7336266b6c53fef2ef0e5900feb37ef61afb9be53f1e7d905b8bb070516042119194b47f73a26bea14a32c35cc54789baf9119332bc6f224ab823e7dfd37044f7682439e748cb4e61c43c335abb532dd515c7f7f1ef42528cd1b3b81a04db97640eea7df7265017f4e0d892ed2549dcfb48bff2ad825a222b09ce700a95e2fddad353a452a867300a4b13d543d5e6ddb741db0248d9f4ee101a0304fa82a42a3b3ca850367a9f3f1866ba3845c518171a68f7939903c54caa3f33f2f2c302c300b92bed212d9cbcc5f6f8a342a60cbe642faba002eea160d81a5f53f0c82783b86e2228ffd10d27c9c3965eee9b434605a4a8dcfaa85510809c717d83ce3d1c531734b5cc005633a2a42abfc4b5c4585568407f354f516fd8e1c011d13e82856e4dbdd460f203ff59109cb35bc12fbbc3ea306006c339605acbea30033ebd92ce4b815e5f73d51294023a166960c782659056a0a776c79d0051e59e0ff36980af7bc2cb325786c77bfa31593ea7e84513e9da93fb46de24c57a9d74f9ca39894c5efd4c4bf1e1eaec1d246b12be7a0bce0af5568238baf5a479c7c74c19875fd69dda47da9e21ce458f92534386eb8332de415c12be95973dc14e7e6e6020e9214cf812a1db6bb4a9ca4a0e5a1ac9141d8fb0adcac8f9c92f931b3132e3a90409c064980d92bf91c991645bf4894bf6ae9112c4556e0250adfae509330602401caf325f19d79a036dfb63aa73de12866f47c06cdcaad47570e2e43b5b2827b33c74f33f5b612a1551ca06afce1075df86ef40eee4c38cb1bd76afaf127e820fc1bad1c5a91b1ec215bb5c8d00fba6ed9cc1afe2647570987f17878f5f495a8ec5c8070d65d755f69de5f1e57937e2db20692a16cd1a208c8036f1367f42c8f16e5f21d1ce22057f7f083dea4a4143e4726df23008bb242ca30004f43e82f37173e244ec9f5d771cc9d0bd12729f375c75ae95dc372ce0be9ff937bc681f1e4f821d5c488272c68a7816543ba3a84d1c21d14fa5a4fbfd96be684a44944d1893f7613403462209040443685f0729b16045e4c2bd720270dfbbdca65edea8a3772356e1493ef4ad2ac758333ade5b2d1ca90442db62df14444291fe667d7691133f9b34e18a7967aa6c798636d167e69bd2d825062dfcc1f23fb12df767f5943e4db91830bfe1fb567553c59e4a55b487a46a87cc7dfe2b9f6e9728d05b3e07fa04d1776be2caa9134ca9c74c3523a1aff706473c5cc7372ee85df7c3240bbd5118ee3d9b18d10989ad1cfa4d07aefe9cdbaecf28a4f782504b69484128f7e4023003cc41a3edcdb83eed167e64f6155911ca82ec6366ea777eaf6ebd15ec1fe6d84869c823bdf46ca8d1527654406422396cb1478f50979c05159b5df5dd21897b2f2d8b9786e6e9b3e2d35cf31e48d6aefcc7c63bf127ad7ddc0ab4789e8997fe203cad4b93c0b65f4e3fe9d5ca2bd64574b2f407d48beafc15d691aaff444e69a126f4a6ce93ce0e8c905871369abea2f048ffba7432973d87aac91a7a6bf05c477022a8dd8e9b93940d2270a3fc32cf507d6daec24299516a5d08a45ca5c136e6c9a1940801898ac231acae7dc46741d53e5416c7302a0620d512746ce6de14fa4592ad76ec98f8ef0db5d399eb444059dd125ea582c7005ccc0ccb89aeb047ad646843b3c9980b97e6493ccfe580d3dfe620b724864ccfb66c75c7bf84db2118d7f8c3b96d885d6084e7e4f8b7404ff26f26d2543a74a3aa17c1b92d31d2815b4e8f6984d0169432ffd5af39b1a3e76d5f3636bbb389e9c8e701efe69fccb8e3d96713b31de18e2afe8d43affaff3693fc63ca3c5250bf86fa9808f419bdf3a1bd3576de6f03f150417a39f81b662fb946cbe0a465423658c1349589ca921fd7038f21b37846eaa5e6b1e2cbdab1d51f04f23519ad3a7839e2dbcb241b1f89a0a9bc624bfd19f184a52b63c1695ed579b22c80b85c442b8928af234f91040276c6b8dd8e61aca39c57a68a5af8c9b649f0639f7f791c4a26e665bb67c838fd588a9d0449fc081ad5eb16627011532adf79d2566f53382f3478417734b9ea525b4bd8eb6047c2e69702a1a9696f8be1785524c00ae845e65533a8f3a249d03e8d8d77f7ebdde7819df71f60a7ba1d714083f376ebe52b7fdc7418cd834be1a7a3bf03140473e26700374c08054fa1974bd03cce0e3a9c80fce804796396c347905c1011bea8fb3201fd5ed87d16432ab4e94c861e6a64199cae47476b7196955d34ee52d78e193509b5c452ee50798ee79d4f804960f612f55a5f407c53d8e211cc4095f5dffc88a813c8a5f70a60943ca4a180fe36e92fd816502aa80fd2fffc6e68fb14766ad0cbd1a9d5bdfe33f44b76713d0015af244e556220f65b4501367c99412e0b0ca057495709a7aa87897ac6395f46e34d7277ee8f6318314839f4711dea67f8ddfa60e116bf4babfbcf80bf52a01b9a4df3cbb9770e80478476370b02abac93e134e40b1742eef68a3a0bafec2d8aa2de345d9ab2a91f67f1cad5a8c7b74083f0b36625b0e8b3142fc18dd47627aa5143a8c3760f0b8ce060ca7f34a3f62b86880d15e4dd0d30a3e6c5a6c72e645c334ca549c3b67c1a4fa7ae793442c166250e9719625d81090f6903f4837baa065177d21c0b95bae2ab195d684eb0f2ae2aef111172adff4b6b9a6cde75868ce8568f8383402cbcbfb50e0241721b7feff2384971425048461e3f8c46c85f1d6066bcb392006723a0501e1af7ca9834a556f0550b00483e0ba830640628a1b2fe6883469323148b24c73438233728755c50e4d227934240dc6706b1fc2101d636ac245723100466504fae7286498cd111c83dda5b7233d1f74a0dce66aaaa7214b8ee081b49c68f0b17f3e2b498a4362982cdb42f640d22ba6282c134b80f370a78b3352ba7acf5929d668b0d66cfd66f6d47dabb652f686b08d1d91f93f4aede716cdd30cee87f5710d264432ecf0a4243c4da9c69346e2637b0f8226cab3eb68194db1b223fe0cceab71cb2f7a7801df8c878196813aafa8432553d950cbf2d3abbdc0925fc01960ea33ac8fe974525e3889180d21899d302efb2fb8e0839ea441bc4f7c899cbc9dca38cc1251b269b899bb6696653558429def5b8375ad1959b79e5bf5a50b491d49a422056be9792fae12b6a5bd91b85955b70ecd4b816ac3580bcf877bdfa50af670320552c165c917ce038dcf5c2549433e9e8f7769cf6c0ec8c3fbd932a2d3c4b343b0ffbc88d2169355162536e2"}, &(0x7f0000000080)=0x1008) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r2, 0xea, "8fdf7fb2977053592aec72563f2ac77424292673fe87314164266e8919e5cf73a6006eb60ad6103942263afbfff8f08e4124fa142cfa640e84801c765e14aee143f4c49bd207812755f0243c627f29690fa23fbb2a744fb00dc1ae2f4fcbc34e1391f41d161a19bfe2863908b5b4ea189d19b3835b547d1b0d6232cb57cc459f1f762f3886288d265375e32d97aa168e73e5f6e5ee8eb2537454992db22e098104ccf2188036ba7b1ff1145f09d773744793a090c84bc8b685d599c202c4168c7b6d396ee228e746b870888d083a7ace30854a818e48f020f58b00418903baddb7f628c7d09451ee0900"}, &(0x7f00000000c0)=0xf2) mount(&(0x7f0000000440)=ANY=[@ANYBLOB='/dop0\x00\x00\x00\x00\x00\x00'], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:49 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x20000) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x4, 0x1f, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_setup(0x7, &(0x7f00000000c0)) io_setup(0x6, &(0x7f0000000100)=0x0) io_destroy(r2) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) [ 1012.377614] validate_nla: 22 callbacks suppressed [ 1012.377625] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:49 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x700000000000000}, 0x0) 23:44:49 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x1000e}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1012.429741] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6800000000000000) 23:44:49 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuacct.stat\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) r4 = getuid() getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000700)='./control\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000007c0)='./control/file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./control/file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x7}, [{0x2, 0x4, r2}, {0x2, 0x2, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x7, r6}], {0x4, 0x2}, [{0x8, 0x7, r7}, {0x8, 0x1, r8}], {0x10, 0x7}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r9 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r9, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1012.586351] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:49 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1c00}, 0x0) 23:44:49 executing program 3: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_destroy(0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1012.633181] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:50 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) read(r0, &(0x7f0000000280)=""/223, 0xdf) 23:44:50 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xf401000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xffffff7f00000000) 23:44:50 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xe}, 0x0) 23:44:50 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000200)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x4, [0xa9f, 0x0, 0x5, 0x8000]}, &(0x7f00000000c0)=0xc) close(r0) 23:44:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) syz_mount_image$hfsplus(&(0x7f0000000400)='hfsplus\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f00000009c0)={[{@gid={'gid', 0x3d, r1}}]}) [ 1013.337781] hfsplus: gid requires an argument [ 1013.349493] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1013.361168] hfsplus: unable to parse mount options 23:44:50 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x7}, 0x0) [ 1013.387242] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1013.415995] hfsplus: gid requires an argument 23:44:50 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x1000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1013.444729] hfsplus: unable to parse mount options 23:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x3f000000) 23:44:50 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x900000000000000}, 0x0) 23:44:50 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) [ 1013.571729] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:50 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$9p(r1, &(0x7f0000000200)="2483171731d80deb7a96de81f89dcbb419496ef5052f37dd4fdc46a756a9044787329ed0d5b6c29e9dab75447e9802ac77a18e2319724e1f8f5af571185b3761923ee2cf0bf80c87cfd6eb39efcd1b067464da7e5bf62c04b79d1176106e78a02b30996633bed52b229b28c702c102cd08f64bd40ce28661880952fc3394fe38ac0a260bb6b7875f556c51abed5bf5fb2743ded6bac5d2103cdf98e2fbd34dec4d2625a1af339c720dcaf099e4ecbdc79ad7376256718e47c9667896", 0xbc) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x74, 0x4, 0xffffffffffffffc1, 0xff}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1013.615557] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1013.703535] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1013.796729] overlayfs: filesystem on './file0' not supported as upperdir 23:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x2000) 23:44:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x48b) getdents64(r1, &(0x7f0000000000)=""/57, 0xfffffffffffffd17) 23:44:51 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x16000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:51 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:51 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xe803}, 0x0) 23:44:51 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000080)='./control/file0\x00', 0x4) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f64656c6f6f70b400"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1014.228661] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1014.255746] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:51 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x4}, 0x0) [ 1014.301104] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:51 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:51 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x3f000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:51 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x40030000000000}, 0x0) 23:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xa) 23:44:51 executing program 5: 23:44:51 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mprotect(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1000000) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="0200000000000000000000f829b8739fb16d13300aef43acae15ecebc5d86a629f37f89c1b93874c2dc292184c900eeb04e905974dbe5b147e21ac971dc64f3e5067f326e9ce6c0475792542904fbe50e09045c27b7398ab991ab044010cf3cc673854ce94c62ed2b6a2c56024d6868acf24d0235ad7fa963aede7bc40d8b643fea5e56e03e6e34890e088fe0f8721afdcdc89aa62bc4c9949bf33b213ef82e6a4a2e7e9a4dbff810009483e32d420edc36703cdc588793103ba64417de38f93cfa0814bb19bef0d80a691c2add369b4adda2c4b0497b46bb8ac566cbe07523b90e267f4d7a2a256c56987ed0edac655b615b27c8e"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1014.559019] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:51 executing program 5: 23:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x700000000000000) 23:44:51 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1c00000000000000}, 0x0) 23:44:52 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:52 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:52 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xffff0000}, 0x0) 23:44:52 executing program 5: 23:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x68000000) 23:44:52 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x4}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x4, 0x0, 0x0, @time, {}, {0x8}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') mknod(&(0x7f00000000c0)='./control/file0\x00', 0x8001, 0x8) close(r0) [ 1014.988868] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:52 executing program 5: 23:44:52 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x60000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:52 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xa00}, 0x0) 23:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x2000000) 23:44:52 executing program 5: 23:44:52 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:52 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1c}, 0x0) 23:44:52 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe8030000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xff00) 23:44:52 executing program 5: 23:44:52 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x109000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x49, 0x101400) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0xffffffffffff85d0, 0x4, 0xfff, 0x4, 0x9, 0xfffffffffffffffd, 0x1, 0x800, 0x101, 0x200, 0x8, 0xf5, 0xff, 0x0, 0x7fffffff, 0x80000001}}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f6f5830e7ffff398b2133"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000340)={0x401}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lremovexattr(&(0x7f0000000080)='./control/file0\x00', &(0x7f00000000c0)=@random={'osx.', 'sysv\x00'}) unlink(&(0x7f0000000040)='./control/file0\x00') close(r1) [ 1015.469111] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:52 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xa00000000000000}, 0x0) 23:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x500) 23:44:52 executing program 5: 23:44:52 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe00}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:52 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:53 executing program 5: 23:44:53 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x40000}, 0x0) 23:44:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x7a00) 23:44:53 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f00000000c0)='./control\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./control\x00', &(0x7f0000000140)='sysv\x00', 0xfff, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) [ 1015.771305] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:53 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:53 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x3f00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:53 executing program 5: 23:44:53 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xf0}, 0x0) 23:44:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x34000) 23:44:53 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000080)={0xf2e9, 0x20000800, 0x1000, 0x8, 0x6, 0x200, 0x2, 0xefb, 0x7, 0x8}, 0x10) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2b4bd16959fb0800000000000000b280"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:53 executing program 5: [ 1016.103289] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:53 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xfffffdef}, 0x0) 23:44:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x74000000) 23:44:53 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:53 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x100000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:53 executing program 5: 23:44:53 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xe803000000000000}, 0x0) [ 1016.388608] overlayfs: failed to resolve './file1': -2 23:44:53 executing program 4: 23:44:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x4c000000) 23:44:53 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:53 executing program 5: 23:44:53 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x4000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1016.620217] overlayfs: failed to resolve './file1': -2 23:44:53 executing program 4: 23:44:53 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xffff000000000000}, 0x0) 23:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf) 23:44:54 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:54 executing program 5: 23:44:54 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xf4010000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1016.813362] overlayfs: failed to resolve './file1': -2 23:44:54 executing program 4: 23:44:54 executing program 5: 23:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x3) 23:44:54 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xf4010000}, 0x0) 23:44:54 executing program 3: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:54 executing program 4: [ 1017.029077] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:54 executing program 5: 23:44:54 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xffffff7f}, 0x0) 23:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x7a00000000000000) 23:44:54 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xffffff7f}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:54 executing program 4: 23:44:54 executing program 3: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:54 executing program 5: 23:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x400000000000000) 23:44:54 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x11000000}, 0x0) [ 1017.346622] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:54 executing program 4: 23:44:54 executing program 5: 23:44:54 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x68}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1017.436047] validate_nla: 22 callbacks suppressed [ 1017.436057] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1017.523046] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:54 executing program 4: 23:44:54 executing program 5: 23:44:54 executing program 3: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:54 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x18}, 0x0) 23:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0xf0ffffff00000000) 23:44:55 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xa}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:55 executing program 4: 23:44:55 executing program 5: 23:44:55 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x9}, 0x0) 23:44:55 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x4000000}, 0x0) [ 1017.968304] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1018.003670] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:55 executing program 4: 23:44:55 executing program 5: [ 1018.051356] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:55 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:55 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x6}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:55 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xe8030000}, 0x0) 23:44:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x20000000) 23:44:55 executing program 4: 23:44:55 executing program 5: [ 1018.269584] overlayfs: missing 'workdir' [ 1018.344726] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:55 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:55 executing program 5: 23:44:55 executing program 4: 23:44:55 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xa000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1018.391316] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:55 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x400300}, 0x0) 23:44:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x400300) 23:44:55 executing program 5: 23:44:55 executing program 4: [ 1018.617652] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1018.646536] overlayfs: missing 'workdir' 23:44:56 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x4}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1018.682914] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:56 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xa000000}, 0x0) 23:44:56 executing program 5: 23:44:56 executing program 4: 23:44:56 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x4c) [ 1018.912972] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:56 executing program 5: 23:44:56 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x8000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:56 executing program 4: [ 1018.963790] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:44:56 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xf401000000000000}, 0x0) [ 1019.009524] __ntfs_error: 2 callbacks suppressed [ 1019.009534] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x6c00) [ 1019.090569] overlayfs: missing 'workdir' 23:44:56 executing program 4: 23:44:56 executing program 5: 23:44:56 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xe000000}, 0x0) 23:44:56 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x68000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:56 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x4000000) 23:44:56 executing program 4: 23:44:56 executing program 5: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x3ff, 0x101000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000400)=@ng={0x4, 0x0, "a5e166916abe8e"}, 0x9, 0x2) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000e80)={{}, {0x1, 0x7}, [{}, {0x2, 0x4}, {}, {0x2, 0x1}, {}], {0x4, 0x4}, [{}, {}], {0x10, 0x1}}, 0x5c, 0x3) 23:44:56 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xe00000000000000}, 0x0) 23:44:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, 0x0, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) [ 1019.434003] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1019.441712] 9pnet: Insufficient options for proto=fd [ 1019.468594] overlayfs: missing 'lowerdir' 23:44:56 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, &(0x7f0000004640)={0x0, 0x989680}) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) [ 1019.516024] 9pnet: Insufficient options for proto=fd 23:44:56 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xa00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:56 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:56 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x8000085b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x800000000000003, 0x100000000000003) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x12, 0x0, 0x0, @multicast2}}}}}, &(0x7f0000000180)) 23:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) [ 1019.720488] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1019.762029] overlayfs: missing 'lowerdir' 23:44:57 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x100000000000000}, 0x0) 23:44:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f0000000340)=0x20) 23:44:57 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x300000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x298400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000380)={@loopback, @multicast2, r3}, 0xc) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite\x00') bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'speck128\x00'}, 0x58) 23:44:57 executing program 5: clone(0xfffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xfffffef3) tkill(r0, 0x9) 23:44:57 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:57 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1800000000000000}, 0x0) 23:44:57 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000080)='./control/file0\x00', 0x4) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f64656c6f6f70b400"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:57 executing program 1: userfaultfd(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) [ 1020.110507] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:57 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x1600000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:57 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'veth0\x00'}, 0x18) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0xb, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) readahead(r0, 0x9, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) dup3(r0, r1, 0x0) [ 1020.221633] overlayfs: missing 'lowerdir' 23:44:57 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xf0ffff}, 0x0) 23:44:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:44:57 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:57 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000080)='./control/file0\x00', 0x4) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f64656c6f6f70b400"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:57 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x4000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) ioctl$void(r0, 0xc0045878) 23:44:57 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1100}, 0x0) [ 1020.471420] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1020.553822] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore 23:44:57 executing program 5: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141040, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0x80) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)) [ 1020.599415] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 23:44:58 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:58 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x3f00}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x0, 0x8}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0xffffffffffffffff, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0xffffffffffffff48}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'dummy0\x00', {0x2, 0x4e23, @rand_addr=0x6}}) 23:44:58 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000080)='./control/file0\x00', 0x4) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f64656c6f6f70b400"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') close(r0) 23:44:58 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x400000000000000}, 0x0) 23:44:58 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x80000000, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x2e, 0x80800) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000003c0)={0x2004}) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x8000000000000000) ioctl$int_in(r2, 0x800000c0045006, &(0x7f0000000000)=0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000180)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) read(r2, &(0x7f0000000040)=""/187, 0xbb) [ 1020.847904] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1020.859515] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 1020.914645] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 23:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="f6ffffffffffffff0000010000000800040002000000"], 0x1c}}, 0x0) 23:44:58 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x600}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:58 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x9000000}, 0x0) 23:44:58 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1, 0x0) 23:44:58 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xffffff7f00000000}, 0x0) [ 1021.135835] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x82, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @broadcast}, &(0x7f0000000280)=0xc) sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=@canfd={{0x2, 0x8, 0x401b, 0x1}, 0x25, 0x2, 0x0, 0x0, "025b489329b88788f14b8f1b3656820f408e7d64bf3c953d5ec42a2fae5a69b9b41bcfab5b8fb2dc8733b885ad748dd3c5594e1764ced5c7c3612b34e7455d55"}, 0x48}}, 0x800) [ 1021.179600] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore 23:44:58 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000080)='./control/file0\x00', 0x4) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f64656c6f6f70b400"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') [ 1021.236994] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 23:44:58 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:44:58 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x10001, 0x100) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000680)={0x1, 0x6, [{0xd2, 0x0, 0xc24}]}) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80319}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) 23:44:58 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x4000000000000}, 0x0) 23:44:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101002, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000080)=""/36, &(0x7f0000000100)=0x24) [ 1021.466502] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:44:58 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1c000000}, 0x0) 23:44:58 executing program 3 (fault-call:3 fault-nth:0): mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:44:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6d0600000000000000") preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) 23:44:58 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x3e8}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x2a, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], 0x1}) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="ee017d3122ee7a2a41e79d90f552849282ceb8bea831e38a7fbdeed0fd4702512d86e40e672ece36a6bd94cc9c26b9b3893aac796a647ecafb6e9eaafd18756f7699b1edb1eb014b01050c885440b0c6c2388e48389d643d2feaa58d53ff11728752878da516b794c7b08f16db6084c8c97b3e4314d1b170aef4643ff8f6710844837f7685f3f12597d1beec8ff26c9c7092d7e02b565f74a978eba317bcfb764183fdade9f22e6a747ee07faaf67f51377a7de36cfe52de107bb0a3afeb408c124ba6ad1765e56f16bdec0a964769132d5c99bbb4de843acb198e3d76370ed3ffc0ebd43423f8f7589435dfae93de4a019f950177e1209d73", 0xf9, 0xffffffffffffffff) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000440)=0x7, 0x4) r4 = getgid() keyctl$chown(0x4, r2, r3, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@security={'security\x00', 0xe, 0x4, 0x480, 0x230, 0x230, 0x138, 0x0, 0x230, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000040), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x12}, @loopback, [0xffffffff, 0xffffffff, 0xff, 0xff000000], [0xff000000, 0x0, 0xffffffff, 0xffffffff], 'irlan0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x87, 0x58, 0x6, 0x40}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x89, 0x8001, 0x8001, 0x0, 0x1, 0x2000, 0x108}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0xc, "99dd88a1ffbe4e26071cd4d5b23d4b05063292b1b068ff7fbc30e1c00cc2"}}}, {{@ipv6={@mcast1, @loopback, [0xff000000], [0xffffffff, 0x0, 0xff0000ff, 0xff0000ff], 'dummy0\x00', 'lo\x00', {}, {0xff}, 0x3a, 0xfffffffffffffff9, 0x2, 0x10}, 0x0, 0xc8, 0xf8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x7fffffff, 0x800, 0x1}, {0x1, 0x1, 0x800}, 0x40, 0x3399}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d3, 0x9, 0x6, 0x2}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x0, 0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffffff, 0x0, 0xffffffff, 0xff], 0x4e20, 0x4e20, 0x4e22, 0x4e22, 0x6, 0x96, 0x20, 0x8, 0xff51}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x40000000000008}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uhid\x00', 0xffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000480)) write$P9_RVERSION(r0, &(0x7f0000000400)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13) write$UHID_DESTROY(r5, &(0x7f0000000300), 0x4) 23:44:58 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x7000000}, 0x0) [ 1021.823205] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1021.885530] FAULT_INJECTION: forcing a failure. [ 1021.885530] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.925369] CPU: 1 PID: 25095 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #265 [ 1021.932800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.942179] Call Trace: [ 1021.944801] dump_stack+0x1c4/0x2b4 [ 1021.948487] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1021.953728] should_fail.cold.4+0xa/0x17 [ 1021.957825] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1021.957847] ? get_pid_task+0xd6/0x1a0 [ 1021.957867] ? graph_lock+0x170/0x170 [ 1021.957892] ? find_held_lock+0x36/0x1c0 [ 1021.957916] ? find_held_lock+0x36/0x1c0 [ 1021.957968] ? ___might_sleep+0x1ed/0x300 [ 1021.966984] ? arch_local_save_flags+0x40/0x40 [ 1021.967012] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1021.967036] __should_failslab+0x124/0x180 [ 1021.967054] should_failslab+0x9/0x14 [ 1021.967072] kmem_cache_alloc+0x2be/0x730 [ 1021.967096] ? __lock_is_held+0xb5/0x140 [ 1021.974984] getname_flags+0xd0/0x5a0 [ 1021.975009] user_path_at_empty+0x2d/0x50 [ 1021.975032] path_setxattr+0xd6/0x230 [ 1021.975054] ? setxattr+0x450/0x450 [ 1022.024378] ? trace_hardirqs_on+0xbd/0x310 [ 1022.028719] ? __ia32_sys_read+0xb0/0xb0 [ 1022.032867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1022.038254] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1022.043727] __x64_sys_lsetxattr+0xc1/0x150 [ 1022.048082] do_syscall_64+0x1b9/0x820 [ 1022.051970] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1022.057330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1022.062254] ? trace_hardirqs_on_caller+0x310/0x310 [ 1022.067264] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1022.072298] ? recalc_sigpending_tsk+0x180/0x180 [ 1022.077080] ? kasan_check_write+0x14/0x20 [ 1022.081330] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1022.086274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1022.091831] RIP: 0033:0x457579 [ 1022.095029] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1022.114014] RSP: 002b:00007f84650b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1022.121716] RAX: ffffffffffffffda RBX: 00007f84650b7c90 RCX: 0000000000457579 [ 1022.128983] RDX: 0000000020000680 RSI: 0000000020000540 RDI: 0000000020000440 23:44:59 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000080)='./control/file0\x00', 0x4) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f64656c6f6f70b400"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) 23:44:59 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x900}, 0x0) [ 1022.136264] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1022.143547] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84650b86d4 [ 1022.150829] R13: 00000000004c2793 R14: 00000000004d39a8 R15: 0000000000000005 23:44:59 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:44:59 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x4, 0x820a, 0x1, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1}, 0x8) 23:44:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03000000000010000000010000000800040002000000"], 0x1c}}, 0x0) 23:44:59 executing program 3 (fault-call:3 fault-nth:1): mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:44:59 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x11}, 0x0) 23:44:59 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1f4}, 0x0) 23:44:59 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x101080, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$inet6(0xa, 0xf, 0x1ff, &(0x7f0000000040)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2080, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000025c0)=0x101, &(0x7f0000002600)=0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') [ 1022.345813] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1022.399224] FAULT_INJECTION: forcing a failure. [ 1022.399224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1022.411091] CPU: 1 PID: 25129 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #265 [ 1022.418480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.427858] Call Trace: [ 1022.430486] dump_stack+0x1c4/0x2b4 [ 1022.434152] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1022.439369] ? mark_held_locks+0x130/0x130 [ 1022.443619] ? perf_trace_lock_acquire+0x15b/0x800 [ 1022.448575] should_fail.cold.4+0xa/0x17 [ 1022.452660] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1022.457783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1022.463351] ? check_preemption_disabled+0x48/0x200 [ 1022.468390] ? graph_lock+0x170/0x170 [ 1022.472229] ? mark_held_locks+0x130/0x130 [ 1022.476498] ? perf_trace_lock+0x7a0/0x7a0 [ 1022.480754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1022.486323] ? _parse_integer+0x134/0x180 [ 1022.490501] ? graph_lock+0x170/0x170 [ 1022.494328] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1022.499886] ? _kstrtoull+0x188/0x250 [ 1022.503714] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1022.509275] ? check_preemption_disabled+0x48/0x200 [ 1022.514315] ? debug_smp_processor_id+0x1c/0x20 [ 1022.519006] ? perf_trace_lock_acquire+0x15b/0x800 [ 1022.523969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1022.529528] ? should_fail+0x22d/0xd01 [ 1022.533440] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1022.538580] __alloc_pages_nodemask+0x34b/0xde0 [ 1022.543280] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 1022.548510] ? find_held_lock+0x36/0x1c0 [ 1022.552622] ? ___might_sleep+0x1ed/0x300 [ 1022.556794] ? trace_hardirqs_off+0xb8/0x310 [ 1022.561230] cache_grow_begin+0x91/0x8c0 [ 1022.565319] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1022.570888] kmem_cache_alloc+0x665/0x730 [ 1022.575058] ? __lock_is_held+0xb5/0x140 [ 1022.579159] getname_flags+0xd0/0x5a0 [ 1022.583010] user_path_at_empty+0x2d/0x50 [ 1022.587186] path_setxattr+0xd6/0x230 [ 1022.591016] ? setxattr+0x450/0x450 [ 1022.594846] ? trace_hardirqs_on+0xbd/0x310 [ 1022.599192] ? __ia32_sys_read+0xb0/0xb0 [ 1022.603277] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1022.608658] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1022.614133] __x64_sys_lsetxattr+0xc1/0x150 [ 1022.618498] do_syscall_64+0x1b9/0x820 [ 1022.622750] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1022.628135] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1022.633090] ? trace_hardirqs_on_caller+0x310/0x310 [ 1022.638122] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1022.643154] ? recalc_sigpending_tsk+0x180/0x180 23:44:59 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xfffff000}, 0x0) 23:44:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20040, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200002, 0x0) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x9, 0x4000000000000000, 0x7, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x9}, @in6={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, [], 0x1b}, 0x1f}}]}, 0x50}}, 0x4800) 23:44:59 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x3000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1022.647934] ? kasan_check_write+0x14/0x20 [ 1022.652210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1022.657082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1022.662297] RIP: 0033:0x457579 [ 1022.665513] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1022.684438] RSP: 002b:00007f84650b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1022.684457] RAX: ffffffffffffffda RBX: 00007f84650b7c90 RCX: 0000000000457579 [ 1022.684473] RDX: 0000000020000680 RSI: 0000000020000540 RDI: 0000000020000440 [ 1022.684482] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1022.684491] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84650b86d4 [ 1022.684499] R13: 00000000004c2793 R14: 00000000004d39a8 R15: 0000000000000005 23:45:00 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000080)='./control/file0\x00', 0x4) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f64656c6f6f70b400"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) 23:45:00 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1000000}, 0x0) 23:45:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x460}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x70bd2a, 0x4000000000, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}]}, 0x1c}}, 0x0) 23:45:00 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x4000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:00 executing program 3 (fault-call:3 fault-nth:2): mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:00 executing program 5: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:00 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xf000}, 0x0) [ 1023.222949] validate_nla: 17 callbacks suppressed [ 1023.222982] netlink: 'syz-executor1': attribute type 3 has an invalid length. 23:45:00 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:00 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x1100000000000000}, 0x0) 23:45:00 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xfffffdef}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x44ee) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400080, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000100)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:00 executing program 5: init_module(&(0x7f00000000c0)=']user@eth1\x00', 0xb, &(0x7f0000000180)='./cgroup/syz0\x00') r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000008916, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r1) socket$vsock_stream(0x28, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x14002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000400)={r2, 0x80, 0x5, "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"}) 23:45:00 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000080)='./control/file0\x00', 0x4) 23:45:00 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xf0ffffffffffff}, 0x0) [ 1023.503693] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000a, &(0x7f0000000300)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000180)=0x30) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="00ffffceecefce8fada72d0e8bdc24ffd103749d1bb5547004000f8887c6477f281db961a02b66e500000000000000000000002acae8c3f9ce26a630e4e32ca98ae392"], 0x43}}, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r4 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c090000000000000070") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r5, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) write(r5, &(0x7f0000000900)="1102ea373406b21d9bc444ba83f952d57b52f57f53bbf7bdedb5d362ddbb8481de598149d6a8d515d6baa6a4f2fe29511d6f0c4a0d4977f4aa1b9a1488d387afb5c54099f65395e38ca84b3c1fe8896530ab7f6d1ac6415e9dffea1e2db57fac4a61ddf40a739ada2c12a7fdaf14d340039c61", 0x73) ppoll(&(0x7f00000001c0)=[{r0, 0x2008}, {r3, 0x801d}, {r5, 0x80}, {r1, 0x28}, {r2, 0x2}, {0xffffffffffffffff, 0x80d4}, {r3}], 0x7, &(0x7f0000003740)={0x0, 0x989680}, &(0x7f0000003780), 0x8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) r7 = socket$inet6(0xa, 0x1000000200002, 0xfffffffffffffffe) ioctl(r4, 0xfffffffffffffffa, &(0x7f0000000240)="025cc85c20000000000000") syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) dup3(r0, r7, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) 23:45:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x8, &(0x7f0000000340)=""/217) 23:45:00 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe000100}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:00 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system/posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:00 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 23:45:01 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xfeffffff}, 0x0) 23:45:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c64927c", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:01 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0xeffdffff}, 0x0) 23:45:01 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xffffff7f00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1023.847267] overlayfs: filesystem on './file0' not supported as upperdir 23:45:01 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) unshare(0x60000) 23:45:01 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)="73797374656d2e706f7369785f61636c5f616363657373f6", &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x66b, 0x129800) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}}, 0x0) [ 1024.095750] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1024.096336] __ntfs_error: 3 callbacks suppressed [ 1024.096345] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1024.135022] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1024.189449] overlayfs: filesystem on './file0' not supported as upperdir [ 1024.202800] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:01 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xa3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000005200)={0x2, 0x303, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x1, 0x0, 0x0, 0x0, 0xf44f, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x8}) syz_open_pts(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r1, 0x1, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0x0, &(0x7f0000005180)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=""/139, 0x8b}}, {{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/38, 0x26}], 0x2, &(0x7f0000000500)=""/198, 0xc6, 0x2}, 0x1ff}, {{&(0x7f0000000600)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000700)=""/15, 0xf}], 0x3, 0x0, 0x0, 0x7cab}, 0xffffffffffffff64}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x9}, 0x40}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/248, 0xf8}, {&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/57, 0x39}, {&(0x7f0000000f00)=""/130, 0x82}], 0x8, &(0x7f0000001040)=""/20, 0x14}, 0x800}, {{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)=""/43, 0x2b}, {&(0x7f0000001140)=""/24, 0x18}], 0x2, &(0x7f00000011c0)=""/150, 0x96, 0xfffffffffffffe00}, 0x200}, {{&(0x7f0000003340)=@xdp, 0x80, &(0x7f0000003500)=[{&(0x7f0000001280)=""/55, 0x37}, {&(0x7f00000033c0)=""/151, 0x97}, {&(0x7f0000003480)=""/88, 0x58}], 0x3, &(0x7f0000003540)=""/190, 0xbe, 0x100}, 0x1ff}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/175, 0xaf}, {&(0x7f0000003740)=""/114, 0x72}, {&(0x7f00000037c0)=""/7, 0x7}], 0x3, &(0x7f0000003840)=""/105, 0x69}, 0x10001}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/216, 0xd8}, {&(0x7f0000003a80)=""/3, 0x3}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/45, 0x2d}, {&(0x7f0000004b00)=""/189, 0xbd}, {&(0x7f0000004bc0)=""/130, 0x82}], 0x7, 0x0, 0x0, 0x2000}, 0x7ff}, {{&(0x7f0000004d00)=@can, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/8, 0x8}, {&(0x7f0000004dc0)=""/228, 0xe4}], 0x2, 0x0, 0x0, 0x7}, 0xffffffffffffe4f0}], 0xa, 0x100, &(0x7f00000051c0)={0x0, r2+30000000}) recvfrom(r1, &(0x7f0000005300)=""/101, 0x65, 0x10000, &(0x7f0000005380)=@ax25={0x3, {"5f1b4f9eb63234"}, 0x100000000}, 0x80) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) 23:45:01 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:01 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x11000000}, 0x0) 23:45:01 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x300}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:01 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xfffffffffffff88f, '\x00', 0x21}) 23:45:01 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0xffffffffffffffff, 0x1, 0x20, 0xa7fb03ceca64a4da, 0xfff}, 0x2, 0xff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000e66308a32401854debad33c14b88e6b06aa642cc91b28a9b180d18644efb0f8ebe8e4cc88647b286fb077b686d3bce59c5ceb869e79f0f7be905d7da11957c8ed7a8f86afff450b51aa416084fdfeb473f8fbff518e3cacea0846d7afb49219d743c9002af760000000000000000000000", @ANYRES16=r3, @ANYBLOB="26000000000000000000010000000000000002db8830"], 0x1c}}, 0x0) [ 1024.529748] dccp_close: ABORT with 1061 bytes unread 23:45:01 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1000000}, 0x0) [ 1024.595227] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2d, 0x6, 0x0, {0x1, 0x4, 0x4, 0x0, 'fou\x00'}}, 0x2d) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xffffffffffffffdb, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0300000000000000010001000000"], 0x14}}, 0xfffffffffffffffd) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:45:02 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xeffdffff}, 0x0) 23:45:02 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) [ 1024.698251] overlayfs: filesystem on './file0' not supported as upperdir 23:45:02 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x1600}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:02 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) [ 1025.029849] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1025.098158] overlayfs: filesystem on './file0' not supported as upperdir 23:45:02 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = socket(0xa, 0x3, 0x1000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='ip6tnl0\x00', 0x10) getsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000100)=""/237, &(0x7f0000000000)=0xed) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xaf, 0x103) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000200)={0x2000000, 0x2}) fcntl$getflags(r0, 0x401) sendto$unix(r0, &(0x7f0000000000), 0x5a4, 0x0, &(0x7f0000000080)=@abs, 0x6e) 23:45:02 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x7000000}, 0x0) 23:45:02 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) 23:45:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x3}}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xdc7f, 0xffff, 0x52, 0x2, 0x0, 0x9, 0x3, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0xb2, 0x5, 0x80, 0x2, 0x6}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r3, 0x8001, 0x0, 0x2, 0x8}, &(0x7f0000000340)=0x18) 23:45:02 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x6000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:02 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:02 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x700000000000000}, 0x0) [ 1025.675047] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) tkill(r2, 0x27) timer_create(0x2, &(0x7f0000000080)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000240)="c4d2cde44a2754160e00c0faa32f947674231423fad3d1e5bb1912eeaa31d2e7a18a13aeeb67c99b604f3bc52a0ab276c8b49f985fa6f34801cd81d886aff6a1c5eb4bbb971ebbd8d634b87bf304acc28547d0631adb628b97eedd4c6f6c848ff5ccdc1dbbc46419a3e0ab493f4668c56a5a04a218be246e5b4e9e67397dfa894618e4f2f3c760efaca3396654043f6cbad5444e6662cd62e9eaf13044d4377c0026", &(0x7f0000000300)="2746ea77b87b2f89ff0a71404dcf2b357060fa4d3c01b07573900d02587b7af0a81cb0431990c475aa6bef750e681ffb250eb4038c062ac7b62eac212ed6469a0fddb4ef919e49e57cdc5d6bc26d7a2841fd777a41e2317c97ed66cb14a620471bb7e8669557b2172b8e7d3f28446cd109085d781bf9653175ff0ccf5afbc4b9f40f4bbefd0a4595dd60e9bfe2469660f4f0725e1495398ed691458e72eaffacc815e05b315ae5a6674dd76b0c93aaa2ec743a18e76bab14e66da4776b53ffcd0e"}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0), &(0x7f0000000400)) 23:45:03 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x7fffffff, 0x2, "f65b7c49f37865ed5c8898811edbfde8f1166525e8a556e4e50b2ff9d45fe895c45e12450640b689f92aa2ac5468dbe2d6bc0cea34cc093796adb302eb3dca29883cf96fe8c2e19a714f98a0401017e3"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1025.732853] overlayfs: filesystem on './file0' not supported as upperdir [ 1025.772763] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:03 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x16}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000200)=""/66) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100040a0}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[]}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000540)=""/239) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000500)={@remote, 0x4c, r5}) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000211000000000003e9536e9e4ae75681d00", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) dup2(r2, r3) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x15}, 0x1b}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6}]}, 0x38}}, 0x0) 23:45:03 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) [ 1025.849044] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:03 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) [ 1025.910683] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:03 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:03 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xfffff000}, 0x0) 23:45:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) socket(0x0, 0xdbce231fe0aef7f5, 0x4af1) r4 = getegid() socket$inet(0x2, 0x7, 0x6) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r2, &(0x7f0000000440)={0x6e, 0x7d, 0x2, {{0x0, 0x52, 0xef, 0xc79c, {0x0, 0x1, 0x8}, 0xaa100000, 0x7, 0x8000, 0x2, 0x4, 'fou\x00', 0xa, '(+security', 0x11, 'posix_acl_access/'}, 0x7, 'keyring', r3, r4, r5}}, 0x6e) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0xc6) 23:45:03 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xe803000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1026.080703] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:03 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1026.132688] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1026.197866] overlayfs: filesystem on './file0' not supported as upperdir [ 1026.206401] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:03 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1c00}, 0x0) [ 1026.275853] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:03 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x200000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:03 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x900000000000000}, 0x0) 23:45:03 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) [ 1026.540551] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1026.564365] overlayfs: filesystem on './file0' not supported as upperdir 23:45:04 executing program 5: r0 = eventfd(0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x6, 0xb, 0x6, 0x3, 0x50, 0x9}, @jmp={0x5, 0x5, 0x7, 0x8, 0x1, 0x50, 0xfffffffffffffffc}, @jmp={0x5, 0xb48, 0x3, 0x7, 0xa, 0x4, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x1d47, 0x6, &(0x7f0000000100)=""/6, 0x41f00, 0x1}, 0x48) ioctl$FICLONE(r0, 0x40049409, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x6, 0x1) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x1, 0x7, 0x3f, 0x9, 0x9}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x81}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8}}, [0xc72, 0xaa, 0x84a6, 0x9, 0x8, 0x9, 0x29, 0x904, 0x1, 0x8, 0x80000001, 0x9, 0x7f, 0xfff, 0x7fff]}, &(0x7f00000004c0)=0x100) sendmsg$can_bcm(r2, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r3}, 0x10, &(0x7f000000eff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01004000000023009c10579e4d9f4f419561a93401b0593ed7c22a557b28add21210b38de727ba97c9751e87f1f7d155da5f2ee72214e6bbdccbddb5dc3843a58941b3ce5adcdb6d66ec355d4c8e8d742a1687a50b26988a976e39a4dd567a1cd0", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000068759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"], 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth0\x00', 0x4000}) 23:45:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000040)=0x101, 0x4) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000340)) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xa0, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0xc}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x4, 0x1, 0x36f, 0x400, 0x64}, &(0x7f0000000440)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000480)={r4, @in={{0x2, 0x4e23, @remote}}}, 0x84) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c006b9a", @ANYRES16=r2, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:04 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:04 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x4000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:04 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x400000000000000}, 0x0) 23:45:04 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:04 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xf0}, 0x0) [ 1026.929272] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1026.993424] overlayfs: filesystem on './file0' not supported as upperdir 23:45:04 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) 23:45:04 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)="73797374656d2e706f7369785f61636c5f61636365737302", &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:04 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x40000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0300b427240aa947bd02000000010000000000000000000000000000000089762b4a1d433a81e6af092fac29b4ec35a5574c26b4549ad8bb19ebb5d94463000dac327fcb59a68747cca30000000000"], 0x1c}}, 0x0) fcntl$setstatus(r0, 0x4, 0x400) [ 1027.297780] overlayfs: filesystem on './file0' not supported as upperdir 23:45:04 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45965a5c4f0f0000000030e12924ad83aa300fc62284f975187612"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) fcntl$setflags(r1, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x4bb, &(0x7f0000000300)=""/187}, 0x48) 23:45:04 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x400000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000001", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:04 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)="73797374656d2e706f7369785f61636c5f6163636573738c", &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:04 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xeffdffff00000000}, 0x0) 23:45:05 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x840, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4) socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000003ca143bd22a70e9aa208474bbced791e997ab5f517a32290abb43b6d6718c9f3dff37838a443a7f59a3e5f65d093dbcca2173105e8aadc77d94c19eb27e88600673f12a44cec6f0ed2ee26b1a49436a897f0dded9640275a7b13a9e97c0e7e8939cd8f194e4b8e1187f17411f62b37a7492724af0860399862e7ee", @ANYRES16=r2, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:05 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x2000}, 0x0) 23:45:05 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) [ 1027.811333] overlayfs: filesystem on './file0' not supported as upperdir 23:45:05 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x300000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x3e0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x60900) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040)=0x3, 0x4) tkill(r2, 0x1000000000016) 23:45:05 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x400, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000280)=0x90, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7, 0x800) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000100)) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}}, 0x0) r4 = gettid() sched_getattr(r4, &(0x7f0000000080), 0x30, 0x0) 23:45:05 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xe}, 0x0) [ 1028.064736] serio: Serial port pts1 23:45:05 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:05 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x60000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:05 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) [ 1028.135303] overlayfs: filesystem on './file0' not supported as upperdir [ 1028.167653] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:05 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x700}, 0x0) [ 1028.234797] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1028.281728] serio: Serial port pts1 23:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03fffffffd000000000001000000080004000e000000"], 0x1c}}, 0x0) accept(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r3, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000002c0)={r4, 0x3, 0x9}, 0x8) 23:45:05 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1028.383192] overlayfs: filesystem on './file0' not supported as upperdir 23:45:05 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xe00}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:05 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1100}, 0x0) 23:45:05 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000002c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="757070657264697299872cb3f2274a091b9a3d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531"]) r0 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x9, 0x7, 0x80000001, {r1, r2+10000000}, 0x80, 0x2}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 23:45:05 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:05 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) 23:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1eef82aa0d0500000028a98bdb02c6d4b5ea72648ac52096fac546e53536b2026b9ee7c60f6016f0539794accf5e16e5d3479d", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:05 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1028.685190] overlayfs: unrecognized mount option "upperdir™‡" or missing value 23:45:06 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xf401000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="c535ef3d008000", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:06 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xf0ffffffffffff}, 0x0) [ 1028.754983] overlayfs: unrecognized mount option "upperdir™‡" or missing value [ 1028.779037] overlayfs: filesystem on './file0' not supported as upperdir 23:45:06 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)="73797374656d2e706f7369785f61636c5f61636365737303", &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:06 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000100)=0x1, 0xfa213f2435bb6366) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2825cc9753f2987a", 0x8}, {&(0x7f0000000140)="cf3587d5695ccc0e084ca3c6060dd39776756d379a4dfdf468b211f26f2685c23e4f498aaa84ebef6b56faf10edf9555b39923ee606983ce83f211c14a906b44f2825a9c088a01e3bd5e0be1754ad69e5285246842ba29627b031d60631cb7aea59a341edede151cc44bcd006704f96198bf0cd49f077ac20bcde0338f99971418266a5a481175ade3044daa30c1c3547eca913da696d3a247f836aa2d5d2df3f0812c0078026e23d9d1024133bbe8b8e65fc08b42f08bb13db5aa42265054a1a86939ab20c04fa7d956cd75f052f208222c21b2f44d770938b75b8630590cefbac718eb63834ae83692aa34e24bd29d1d3f", 0xf2}], 0x2, &(0x7f0000000080)}, 0x3}], 0x1, 0x20004bc0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x9) 23:45:06 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xe803000000000000}, 0x0) 23:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03001000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:06 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xffffffff00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:06 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1029.102654] overlayfs: filesystem on './file0' not supported as upperdir [ 1029.112660] __ntfs_error: 8 callbacks suppressed [ 1029.112671] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:06 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x20000000}, 0x0) 23:45:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000100)=0x1, 0xfa213f2435bb6366) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2825cc9753f2987a", 0x8}, {&(0x7f0000000140)="cf3587d5695ccc0e084ca3c6060dd39776756d379a4dfdf468b211f26f2685c23e4f498aaa84ebef6b56faf10edf9555b39923ee606983ce83f211c14a906b44f2825a9c088a01e3bd5e0be1754ad69e5285246842ba29627b031d60631cb7aea59a341edede151cc44bcd006704f96198bf0cd49f077ac20bcde0338f99971418266a5a481175ade3044daa30c1c3547eca913da696d3a247f836aa2d5d2df3f0812c0078026e23d9d1024133bbe8b8e65fc08b42f08bb13db5aa42265054a1a86939ab20c04fa7d956cd75f052f208222c21b2f44d770938b75b8630590cefbac718eb63834ae83692aa34e24bd29d1d3f", 0xf2}], 0x2, &(0x7f0000000080)}, 0x3}], 0x1, 0x20004bc0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x9) [ 1029.154490] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1029.196406] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:06 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x3e8}, 0x0) 23:45:06 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:06 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xeffdffff}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 23:45:06 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:06 executing program 5: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000002c0)=0xef) r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x43a7e7e9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip_vti0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 23:45:06 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xffff000000000000}, 0x0) [ 1029.473617] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1029.531384] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1029.538146] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:06 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x40030000000000}, 0x0) 23:45:06 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:06 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)="2f6465762f7573626d6f6e23009be6bb12844d2b0e95e52bd0a0e0206be08989654b5d004945425c1eac9147a97a17d26244d8158eb832ed5975de96cb9e65028baad308175c76e8119f4a70d78f14e4ff788a143ce867e39d7e1815c856f6a9abc26e2088f50b834c45430c79817549733288735f7e26faba6d623b9eb92b0fcda7abea149bb7c7aba13aeedcefc4078eee7958081c66258b34fc14b1b1eab104") mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x8}, &(0x7f0000000380), 0x1400) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4008641a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[0x81]}) r1 = add_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000480), 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x0, r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000003c0)={0x0, 0x0, 0x100000001, 0x6}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0xfffffffffffffffd, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000015c0)={0x3, 0x1, 0xb0e1, {0x77359400}, 0x7fff, 0x2}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000600)=ANY=[@ANYBLOB="b4ce5ab2cb81d3aad5de01ceb7e66ea851ba8857f5f7b0b998ecfac5b5d6efbcdfc99216644f9aebe439eef99b8b8b0600000065d16d917be1193916d52c2b526bd4e1bbb7ca5597dc0bbd4c6b320fb3ff9b50f78136e31f4682bb09bcfc7db8b39d6d10100c0000b3f4c27540a317b1f3071c82963e9b80141520a6c5ef0292ba526259f523dfe678b0da4bca42fbe496b717f838b336f4a76c126ef78f6e878dee6d1c0c5217ab81fc37544013bb02f8163a12e0d7bd83af2fd9f2d2f4561bd55e0c457632779572c3664f8725238666495a150c60fc8cb31f0e8ad525019b"]) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) 23:45:06 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xe803}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1029.600984] overlayfs: filesystem on './file0' not supported as upperdir 23:45:06 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$l2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @broadcast}, 0x2, 0x3, 0x1, 0x1}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x0, 0x2, 0xd7, 0x0, 0xcc}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r3, 0x9}, 0x8) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r4, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) getsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:45:07 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xf401000000000000}, 0x0) 23:45:07 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:07 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1029.808028] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1029.876034] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1029.909116] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:07 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xa00}, 0x0) 23:45:07 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x200000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1029.990727] overlayfs: filesystem on './file0' not supported as upperdir 23:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0600fe537abade54bbe8df937b621134fd09", @ANYRES16, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:07 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000017c0)=[{&(0x7f0000001a00)}], 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB='0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x34000}, 0x0) 23:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030000000000800000000100000008000400020000009eb7189773ab8efdf7aaf66c3833e4a9ff4c21bea9b9367297d347b8dee2c5f8b8a68ff9bf5e90ac6bff0b4429cebcc785e57cf7"], 0x1c}}, 0x0) readahead(r0, 0x5, 0x800) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x40) getsockname$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) 23:45:07 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xe00010000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:07 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00612d6b7beede0365984dc5420ac0db88014496cf17480940886eeafbe2988df3783d674cf25663546da1c050a945e19456050ed30586655a80489e3927ad14be3579d644f2547080f17ffb803d47fe3d6884eaa28338c7e499381a182ae572f1ac46558a6caace31d3dead4d100fd8e6f4e8bbe9a6"]) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8000, 0x4000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x11, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @rand_addr=0x8000}, {0x2, 0x4e20}, 0xbe, 0x7f, 0x3f80000000000, 0xfffffffeffffffff, 0x2, &(0x7f0000000180)='team_slave_1\x00', 0xfffffffffffffff7, 0xd8, 0x7ff}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) [ 1030.286359] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:07 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1030.339945] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:07 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1f4}, 0x0) [ 1030.407442] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1030.433158] overlayfs: filesystem on './file0' not supported as upperdir [ 1030.472157] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8050) 23:45:07 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xa00000000000000}, 0x0) 23:45:07 executing program 5: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100, 0x8001) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x9, 0x8, 0x3, 0x1, 0x3}) unshare(0x8000400) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 23:45:07 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:07 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0xffffff8c, 0x0) 23:45:07 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xe803000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1030.680343] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:08 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xe00000000000000}, 0x0) [ 1030.755801] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:08 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030000b600008ade00000000000000"], 0x1c}}, 0x0) [ 1030.817342] overlayfs: filesystem on './file0' not supported as upperdir 23:45:08 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x3f00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:08 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x11, @broadcast, 0x0, 0x0, 'lblc\x00'}, 0x2c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000180)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000340)={0xfff, 0x81, 0x8, 0x0, 0x0, [{r2, 0x0, 0x3}, {r2, 0x0, 0x15}, {r3, 0x0, 0x7}, {r2, 0x0, 0x7}, {r3, 0x0, 0x5}, {r1, 0x0, 0x99}, {r1, 0x0, 0x716a}, {r0, 0x0, 0x9}]}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 23:45:08 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x40000}, 0x0) 23:45:08 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0xfffffff6, 0x0) 23:45:08 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffc}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0062000698169a509bb3fbaea8d12ea44a2cf7a0dfad08004e25ed4857b9e53a9d9eead00814ce8993d69f05872bfc7d472a2aee992c2d91cd006d7ecfc2daf27fb14fa10494cb98a798362e71485cf1329a888037338f9fff4edb99964f908b282b0446f9a01deb7788d5952ec2cdd8febbc30c6f8627e7fdcc80ce555554121213aaa87c143c4a379bcef7c689aae8bdc6", @ANYRES16=r1, @ANYBLOB="e0ff23ac70f107ea21a00000000000010000007b00040003000580c3c74d6f9238678092f3348a7a63b7b870381469ea27e7d18e7ffc58c9b5968023231e200fef7757447327bb2c0a442556c0ce60a0ed4e9761c31ba529710906f1204e6c9dec60784f111fabd5dc881e6aa71260ec0394e878bfe9decd4a66a9dd2a6633ecdafa8f161e540d4a1433cd61ccecf82d0e2fd9418050618dcad2e5d922ac5ca22e4d02d393159b8a0b896c578f15f35f515100f45be165b5033a3699875a2ebf0ef7da6ff022dc196d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 23:45:08 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x11, @broadcast, 0x0, 0x0, 'lblc\x00'}, 0x2c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000180)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000340)={0xfff, 0x81, 0x8, 0x0, 0x0, [{r2, 0x0, 0x3}, {r2, 0x0, 0x15}, {r3, 0x0, 0x7}, {r2, 0x0, 0x7}, {r3, 0x0, 0x5}, {r1, 0x0, 0x99}, {r1, 0x0, 0x716a}, {r0, 0x0, 0x9}]}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 23:45:08 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x900}, 0x0) 23:45:08 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x3f000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1031.087029] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1031.122092] overlayfs: filesystem on './file0' not supported as upperdir 23:45:08 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x3, 0x0, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:08 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000000)="a899c924ef79f61e384990610decf7166ae8d4c4568900f24c6a0bc9660103e87e003e2e8e2eaa8ca7de7b1a8d2ac0065903547921ffd217497bf9b8711786108f9896c27dad7ef5b47882cd32300c01afce06e992f75264c0da620b4d9b4ee60359c5393f8ee97f218111ea31cb05b62c6e593bfdf9457ef922820548ee727899e24de5255b1e8c571c8837dee1a109d461df9223") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x0, 0x0) r2 = timerfd_create(0x7, 0x80000) kcmp(r0, r0, 0x6, r1, r2) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=@known='security.ima\x00', &(0x7f0000000580)='}vmnet1(-+\x00', 0x2f6, 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') 23:45:08 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x8cffffff00000000, 0x0) 23:45:08 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xa}, 0x0) 23:45:08 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xffffff7f}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2040, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:08 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1031.514430] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:08 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xfffffdef}, 0x0) 23:45:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@loopback, @multicast1, 0x1, 0x3, [@multicast2, @empty, @multicast1]}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'ip6_vti0\x00', @link_local, [], @dev, [], 0xb0, 0xb0, 0xe0, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x8bd1, 0x0, 0x0, 0x0, 0x3}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) 23:45:08 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200040, 0x40) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0xffffffffde3faa65) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') setsockopt(r0, 0x8, 0x8, &(0x7f0000000100)="2d0f23ef744d098642a4a4eab1eb2d8dec52", 0x12) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x27e, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="030000010000009d0bffc2887be2658b504eaebeba129445b9743cbdc852a1061f6e8be8b8535f6678a5cf5a99ec2890e93aa12cc98a2ec4266d5d1c60ac3f9429cd6c2e13e4f70472041ad2bf7f4c8e194fd6d2e881f99136f0507b7d97343bc09ab42e8a52d1187ebb0acad46dad3ae4d804b7a26fcb390247d6daf8170f4ca4cbc98f028141ec62a02efe87deeab3c491154fb75a958d86e815b61fc5b4f7a4bffcf12e3e3e919e3d2f2510955dfc6b12e4f926a1340ae43017397b2b618d7a3f"], 0xfffffffffffffd85}}, 0x4) [ 1031.651061] overlayfs: filesystem on './file0' not supported as upperdir [ 1031.673565] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:09 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x6800}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:09 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1c00000000000000}, 0x0) 23:45:09 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0xf6ffffff00000000, 0x0) 23:45:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030bf0347a1638b595308e2c2d6f64b303030303030303030346532312c6d6d61912c6673", @ANYRESHEX=r1, @ANYBLOB="2c61707072616973655f747970653d696d617369672c686173682c736d61636b6673726f6f743d6e6f646576182c6673757569643d323275313f627d302d776562322d007f66322d613e33392d6366363337727f612c00"]) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0) mlockall(0x0) 23:45:09 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:09 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xf401}, 0x0) 23:45:09 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:09 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x6800000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1032.020181] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:09 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1032.113998] overlayfs: filesystem on './file0' not supported as upperdir 23:45:09 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x9}, 0x0) 23:45:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="12b5b54e4f5fa8e6f86300000002", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) ioctl(r0, 0x8000, &(0x7f0000000240)="abc4150d872cf319fa520c2de93c4aa41228d65dbf5fb5870d7fdbd28b4c8d511aed0f200a891f901503d02ba0e29e168cb0452eec7fe6e3af69bcd2a9758b46542ca7abe312c6e49449514513a1d083340c2b935fe67f1918984f0a3d5934652d6ef42a0d47fa") sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 23:45:09 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x8cffffff, 0x0) 23:45:09 executing program 5: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f00000001c0)=[{&(0x7f00000003c0)="3f306c7006ae1ccd7b9de9200132c67b9b52a7ab5c929727f88e761d27663f1f7d99cdfb415ec03bb55388ec8a98427f9196ecc778a94d3303ed3bcaa2acef044d3f010d36b30241354694ca22d77a28c17f88b95edcc3a1564d200547d88fdf7593a4454ae0ccb2e37568168dc69a6dd4fb6084ceb2f019dcf0887c406e841c6fef136e2505a421ce314739", 0x8c, 0x2}, {&(0x7f0000000480)="3dbedaf3291ec1cbf9d34ea9625efade127b6c1d276463e63e8f9f5426ecb88fe286830d1772f28b365fa46e938429300976debb0ac6c8fd10924d1e3473cc62ca6ef7d51ebf64a1cb2c31b569a8c12dcae12bca71611e9c51d288ddd05d7a80abf8d49f67348d73b636aed248db7b0d920bca86c59eab7549a234497bf5393f65d4a7284a6a9148506db33fee33d2d29985d3d97fff409ef4790589b6f4a3870acc03d6d3e8450e85f1419565bffb1237b731af7c5ffc4228f34fc737", 0xbd, 0x2}], 0x0, &(0x7f0000000640)={[{@errors_remount='errors=remount-ro'}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ascii'}}, {@smackfsdef={'smackfsdef', 0x3d, "216264657623c13a"}}, {@fsuuid={'fsuuid', 0x3d, {[0x75, 0x66, 0x65, 0x32, 0x36, 0x77, 0x35, 0x3f], 0x2d, [0x77, 0x0, 0x62, 0x61], 0x2d, [0x39, 0x35, 0x35], 0x2d, [0x32, 0x66, 0x30, 0x66], 0x2d, [0x35, 0x62, 0x7f, 0x77, 0x33, 0x76, 0x38, 0x7c]}}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user', 0x3d, '\\vmnet0#vmnet0vmnet0mime_typemime_type-,em0trusted'}}, {@audit='audit'}]}) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x1, &(0x7f0000000180)="153f6234488dd25d766070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000180)=ANY=[]) write$binfmt_script(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1024) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 23:45:09 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xeffdffff00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:09 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000100)={{0x3, 0x0, 0xffff, 0x3, 0x80}, 0x6, 0x6}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000000040002000000"], 0x1c}}, 0x0) 23:45:09 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 1032.547383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 1032.552751] overlayfs: filesystem on './file0' not supported as upperdir 23:45:09 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x3, 0x0) 23:45:09 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x3, 0x442) linkat(r0, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/236, 0xec, 0x2, 0x6, 0x101, 0x0, 0x5}, 0x120) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000500)="1685e689c2361bf183316489c08ed1ef31018bdad67f3b1fa8a747a9aa49b9f11c72386654a801917303dfc6d9c4c3321554bc37d4284d5f58dd3ecb8364b008945f53d9776e8b39083c8492b70707238ca4d42e5a82eb459f76aee2fa8b712bce3aedac18d4efd59b", 0x69}, {&(0x7f0000000580)="a0f04ab07ae5a47c0f2ff3b2afb2f8975b00d144919665c06d41f74deb5decde5109cbeaac43eb7577d49aaf92a56e", 0x2f}], 0x2, 0x0) clone(0x2006001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$int_in(r2, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r2, &(0x7f0000000180), 0x7) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x8000, 0x4) 23:45:09 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:09 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x9000000}, 0x0) [ 1032.604564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 23:45:09 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x4000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030000000000000000000100000008000400020000001e200d76606b14dcf74f503739cee82e824987d989e45530df992111072c6bf3e3faa33a2402009c5ba709d29a24d4a943d1a11dffef352219b5f800000000d7c5dd0c768ea510086ee07b9b800bb4c727fd69a33e261519f4420ef5510185f6daea014e48c7b12e5333f53b363f9a829e943f548eb3f0c8df"], 0x1c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40000, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x1, 0x0, 0x400, 0xffff, 0x3, 0x20}, 0x79c}, 0xa) 23:45:10 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xa000000}, 0x0) 23:45:10 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1032.782360] overlayfs: filesystem on './file0' not supported as upperdir 23:45:10 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x100000000000000, 0x0) 23:45:10 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x11}, 0x0) 23:45:10 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x2000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) getpgid(r1) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xf68, 0x10600) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000080)={0xa133, 0x3f, 0xfe00000000000000, 0x9, 0x8, 0x1c}) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000100)=0x8, &(0x7f0000000240)=0x4) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xffffffffffffffac, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000", @ANYRES16=r2, @ANYBLOB="03b0b17b10ed0c1c0416f9c0e3f141b13400229c5a6f00000000010000000800040002000000"], 0x1c}}, 0x0) fsync(r0) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000140)='gid_map\x00') 23:45:10 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1033.155121] overlayfs: filesystem on './file0' not supported as upperdir 23:45:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x2) fcntl$setlease(r0, 0x400, 0x0) ioctl(r0, 0x8916, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/softnet_stat\x00') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x80150, r1, 0x0) syz_emit_ethernet(0x7ffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="898e73426a8c584b"], &(0x7f0000000040)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x0, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000200)={0x20, 0xffffffffffffffda, 0x1, {0x0, 0x2}}, 0x20) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x8000) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x9, {0xfffffffffffffffb, 0x8, 0x7, 0x0, 0x7, 0x9}, 0x6, 0x100000001}, 0xe) 23:45:10 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x7}, 0x0) 23:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:10 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xe000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:10 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:10 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0xf6ffffff, 0x0) 23:45:10 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0) [ 1033.346414] validate_nla: 8 callbacks suppressed [ 1033.346424] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:10 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1033.442140] overlayfs: filesystem on './file0' not supported as upperdir 23:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x5090c8cc01d7c96b) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030000000039fb000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:10 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x600000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a0800030001000022fc2e2e267b9e33c6b41cdf99690f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000fcdbdf2508"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000440)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) prlimit64(r3, 0x0, &(0x7f00000001c0)={0x2}, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:45:10 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0) 23:45:10 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x3000000, 0x0) 23:45:10 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1033.623065] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1033.687341] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:11 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xf0ffff}, 0x0) 23:45:11 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xf4010000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:11 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1033.821556] overlayfs: filesystem on './file0' not supported as upperdir 23:45:11 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x2, 0x0) 23:45:11 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xe000000}, 0x0) [ 1033.959346] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1033.996089] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:11 executing program 5: getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x54) openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) timer_create(0x2, &(0x7f0000000300)={0x0, 0x2d, 0x1, @thr={&(0x7f0000000280), &(0x7f0000000300)}}, &(0x7f0000000500)=0x0) timer_getoverrun(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback, 0x10000000000000}}, 0xfffffffffffeffff, 0x7, 0x100000000, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r3 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r4 = dup(r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000780)='/dev/snd/seq\x00', 0x0, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1a) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000140)=""/186) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5eb, 0x0, 0x100}, &(0x7f0000000580)=0x14) r5 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x120e, 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00') getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000400)=0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x0, 0x50d, 0x224, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4, 0x0, 0xd2f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@local, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000006c0)=0x231bf95e10055fb4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0xffffffff}, 0x8) umount2(&(0x7f0000000380)='./file0\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) 23:45:11 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:11 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x4000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:11 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x24000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xfffffffffffffddc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r3, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) [ 1034.173307] __ntfs_error: 9 callbacks suppressed [ 1034.173317] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:11 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xe00}, 0x0) 23:45:11 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:11 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x6}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0xc01}, 0x20}}, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000180)=""/62, 0x3e}], 0x3, &(0x7f0000000200)=""/30, 0x1e}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 1034.321778] overlayfs: filesystem on './file0' not supported as upperdir 23:45:11 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f00000003c0)=""/250, 0x371) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0xffffffffffffffc1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x3, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000300)) 23:45:11 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x300000000000000, 0x0) 23:45:11 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x18}, 0x0) 23:45:11 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') syz_emit_ethernet(0xaa, &(0x7f0000000240)={@local, @local, [{[], {0x8100, 0x80000001, 0xcc0b}}], {@mpls_mc={0x8848, {[{0x101, 0x2, 0x4, 0x80000001}], @generic="a9666aa8867d8800918d1871bb49f96b7bb24ca8e9e7bb2d41306ef14be9a9da8748a214688d8d22ceaf5b45a3aa014206b7483c9302ae5bd820f6f76666b2f8149a75dff96d390a01af6fc7829233bbb9a92267c984bb93f654f8ae295ed5031eace06fe0bea32b6bcfcea2bb5eecb82f83599c4f641d31fa120d44c6d788a47753b553e1c5b1fe9a7ee3975ff22221ed563bda"}}}}, &(0x7f0000000040)={0x0, 0x3, [0x6ec, 0x33e, 0x7bf, 0xe2a]}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:11 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) 23:45:11 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xa}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1034.709107] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1034.722140] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:12 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 23:45:12 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1034.797881] overlayfs: filesystem on './file0' not supported as upperdir 23:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xffffffffffffff72, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x3}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) 23:45:12 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x1000000, 0x0) 23:45:12 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xfffffffffffff000}, 0x0) [ 1035.091748] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1035.202699] overlayfs: filesystem on './file0' not supported as upperdir 23:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xffffffffffffff72, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x3}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) 23:45:12 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x1000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:12 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r2 = dup3(r0, r0, 0x80000) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x66, 0x1, "066dfb6035afed82ca126455b8a4652df7784602f1b2def0582aacce8ca45c5aac6ad013988be8b5365e9eb6f22fc49647e5273cf408ae179556db5906202bec838ae5aa12199fcfe7ec30bb12086d4f812fad0c5a8aba24e63ca46cfe52"}, &(0x7f0000000080), 0x1000) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:12 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x400300}, 0x0) 23:45:12 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x300, 0x0) [ 1035.475479] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1035.483062] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:12 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x18000000}, 0x0) 23:45:12 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1035.524704] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1035.575912] overlayfs: filesystem on './file0' not supported as upperdir [ 1035.589506] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:12 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x4}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xffffffffffffff72, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x3}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) 23:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000240)="306f95ac0035272491941d959acbb7e2b4528e8a4648a0e74a64284d00b67ca849c2b48378a9cafa136e9dc3be450054bfb96c2120a72cbb4659612c37c61fe67f1acd52623ac0f8350d66c1b14dfe1f3b3e7bcbb1392ae532957e1e90ca4bab4af1776108be81641f4af544cce5", 0x6e, 0xfffffffffffffff9) keyctl$negate(0xd, r2, 0x7f5, r3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:13 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:13 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xf4010000}, 0x0) 23:45:13 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x200000000000000, 0x0) [ 1035.749493] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xffffffffffffff72, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x3}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) 23:45:13 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xe}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:13 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1800}, 0x0) 23:45:13 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x400000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000240)="d41f23e7aa45570a23c169018355c8e574d2c208536b486a19575f15978d1a02791e91edb6d7756b59f906e78f0baa26b55179e1bc5a2ed4a55f3f6ca4bdb39f60a81f68ce80fc6fe01cc0b3a53f6ef73b00c66a0dc95485d273e274836425ca419946e95e0e538b304c0efda39c44f45014a8d938c88b758334d7f28c4df7bdc6ccdc039a236e59a04468eb06e39836ba6f261410c62d06c0a7853da8e5dbf13976af57f492") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCXONC(r1, 0x540a, 0x8) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="033f0200001d"], 0x1c}}, 0x0) 23:45:13 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1035.989792] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') 23:45:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00') ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x400) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:13 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1100000000000000}, 0x0) [ 1036.072659] overlayfs: filesystem on './file0' not supported as upperdir 23:45:13 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x4000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:13 executing program 4 (fault-call:5 fault-nth:0): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') [ 1036.173569] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:13 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0xffffffff00000000, 0x0) 23:45:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 1036.224134] FAULT_INJECTION: forcing a failure. [ 1036.224134] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.286422] CPU: 0 PID: 26357 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #265 [ 1036.293845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1036.303242] Call Trace: [ 1036.305874] dump_stack+0x1c4/0x2b4 [ 1036.309542] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1036.314784] should_fail.cold.4+0xa/0x17 [ 1036.318886] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1036.324014] ? graph_lock+0x170/0x170 [ 1036.328267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1036.333802] ? graph_lock+0x170/0x170 [ 1036.337594] ? graph_lock+0x170/0x170 [ 1036.341387] ? print_usage_bug+0xc0/0xc0 [ 1036.345444] ? check_noncircular+0x20/0x20 [ 1036.349673] ? find_held_lock+0x36/0x1c0 [ 1036.353738] ? __lock_is_held+0xb5/0x140 [ 1036.358006] ? ___might_sleep+0x1ed/0x300 [ 1036.362697] ? arch_local_save_flags+0x40/0x40 [ 1036.367288] __should_failslab+0x124/0x180 [ 1036.371700] should_failslab+0x9/0x14 [ 1036.375519] kmem_cache_alloc_node_trace+0x270/0x740 [ 1036.380635] __kmalloc_node+0x33/0x70 [ 1036.384431] kvmalloc_node+0x65/0xf0 [ 1036.388144] alloc_netdev_mqs+0x17b/0xfe0 [ 1036.392666] ? vti6_tnl_xmit.cold.20+0x32/0x32 [ 1036.397261] ? free_netdev+0x440/0x440 [ 1036.401177] ? debug_smp_processor_id+0x1c/0x20 [ 1036.405841] ? perf_trace_lock_acquire+0x15b/0x800 [ 1036.411195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1036.416910] ? graph_lock+0x170/0x170 [ 1036.420723] ? perf_trace_lock+0x7a0/0x7a0 [ 1036.424972] ? find_held_lock+0x36/0x1c0 [ 1036.429030] ? graph_lock+0x170/0x170 [ 1036.432832] ? ipip6_tunnel_locate+0x283/0xab0 [ 1036.437411] ? lock_downgrade+0x900/0x900 [ 1036.441554] ? check_preemption_disabled+0x48/0x200 [ 1036.446570] ? __lock_is_held+0xb5/0x140 [ 1036.450657] ipip6_tunnel_locate+0x653/0xab0 [ 1036.455065] ? ipip6_tunnel_update+0xab0/0xab0 [ 1036.459666] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1036.465198] ? _copy_from_user+0xdf/0x150 [ 1036.469948] ipip6_tunnel_ioctl+0xe5d/0x23d7 [ 1036.474457] ? sit_tunnel_xmit+0x30d0/0x30d0 [ 1036.478862] ? perf_trace_lock+0x7a0/0x7a0 [ 1036.483288] ? perf_trace_lock+0x7a0/0x7a0 [ 1036.487516] ? graph_lock+0x170/0x170 [ 1036.491305] ? graph_lock+0x170/0x170 [ 1036.495289] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1036.501031] ? _parse_integer+0x180/0x180 [ 1036.505369] ? graph_lock+0x170/0x170 [ 1036.509165] ? lock_release+0x970/0x970 [ 1036.513131] ? find_held_lock+0x36/0x1c0 [ 1036.517199] ? sit_tunnel_xmit+0x30d0/0x30d0 [ 1036.522044] dev_ifsioc+0x41d/0xa80 [ 1036.525689] ? dev_ifsioc+0x41d/0xa80 [ 1036.529498] ? register_gifconf+0x70/0x70 [ 1036.533659] dev_ioctl+0x698/0xcc0 [ 1036.537194] sock_ioctl+0x484/0x690 [ 1036.541239] ? routing_ioctl+0x890/0x890 [ 1036.546351] ? ksys_dup3+0x621/0x680 [ 1036.550811] ? find_held_lock+0x36/0x1c0 [ 1036.554902] ? routing_ioctl+0x890/0x890 [ 1036.558982] do_vfs_ioctl+0x1de/0x1720 [ 1036.563317] ? __lock_is_held+0xb5/0x140 [ 1036.567373] ? ioctl_preallocate+0x300/0x300 [ 1036.571793] ? __fget_light+0x2e9/0x430 [ 1036.575961] ? fget_raw+0x20/0x20 [ 1036.579415] ? __sb_end_write+0xd9/0x110 [ 1036.583482] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1036.589039] ? fput+0x130/0x1a0 [ 1036.592347] ? do_syscall_64+0x9a/0x820 [ 1036.596506] ? do_syscall_64+0x9a/0x820 [ 1036.600823] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1036.605427] ? security_file_ioctl+0x94/0xc0 [ 1036.609832] ksys_ioctl+0xa9/0xd0 [ 1036.613278] __x64_sys_ioctl+0x73/0xb0 [ 1036.617162] do_syscall_64+0x1b9/0x820 [ 1036.621044] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1036.626405] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1036.631506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1036.636518] ? trace_hardirqs_on_caller+0x310/0x310 [ 1036.641532] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1036.646547] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1036.651561] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1036.656843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1036.662030] RIP: 0033:0x457579 [ 1036.665217] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="9f831580174b11d0264177ee64"], 0x1c}}, 0x0) rt_sigaction(0x26, &(0x7f0000000100)={&(0x7f0000000040)="c4a1cd6760a9c402c597dcc422adb96988362e36f34135b5000000c4614d73f106466690c4017e126100c481816b3a0f183fc441f251a54fe4eeb6", {0x8}, 0x80000000, &(0x7f0000000080)="6545dbe2660f6d51fe44df1a66430f65be0c000000c4629d9e73a6479dc4c1f92eb7000000000f5b5340c401a9f59100000000c44195daf7"}, &(0x7f0000000140)={&(0x7f0000000240)="c403857e93faffff205ec4c2698e7909c4c1f911b3d70000008fa9889391da4180332e2e66f341a566450ff524c46766430f382219660f383c601e450fc70cfdf1000000c4837909501d81", {}, 0x0, &(0x7f0000000340)="c4c24946fc43f67b0664f20f45b300000000c4a20d909456090000008f68709e823eb100007f8d0d00000000f2e08d0fee31c44105fbd0c463f96093ce000000b9"}, 0x8, &(0x7f00000001c0)) [ 1036.684288] RSP: 002b:00007f95ddb07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.692218] RAX: ffffffffffffffda RBX: 00007f95ddb07c90 RCX: 0000000000457579 [ 1036.700087] RDX: 0000000020000140 RSI: 00000000000089f1 RDI: 0000000000000006 [ 1036.707350] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1036.715234] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f95ddb086d4 [ 1036.722864] R13: 00000000004c8648 R14: 00000000004d0828 R15: 0000000000000007 23:45:14 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xf401}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x2000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) [ 1036.876263] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 1036.932844] overlayfs: filesystem on './file0' not supported as upperdir [ 1036.949690] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:14 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x3}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:14 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x2000000, 0x0) 23:45:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xe8030000}, 0x0) 23:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='z\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r1], 0x3}}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x3, 0x5}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x9, 0x9}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x800}, &(0x7f0000000400)=0x8) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000800)=0x0) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000900)=[0x0]) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000940)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000a80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000b40)=0x0) r12 = getuid() lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c80)={0x0, r2, 0x0, 0x1, &(0x7f0000000c40)='\x00'}, 0x30) r15 = geteuid() r16 = getegid() r17 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0}, &(0x7f0000000d00)=0xc) getgroups(0x3, &(0x7f0000000d40)=[0x0, 0xee00, 0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000d80)=0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000dc0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000ec0)=0xe8) r22 = getgid() r23 = getpid() r24 = geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, 0x0}, &(0x7f0000000f40)=0xc) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001280)=0x0) getresuid(&(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)=0x0) r28 = getegid() r29 = getpid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001380)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000001480)=0xe8) getgroups(0x7, &(0x7f00000014c0)=[0xee01, 0x0, 0x0, 0x0, 0x0, 0xee01, 0x0]) r32 = memfd_create(&(0x7f0000001b80)='proc-ppp0\x00', 0x2) sendmmsg$unix(r2, &(0x7f0000001c00)=[{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="6b0f34e3c409cfe6074f9c6d4d", 0xd}], 0x1, &(0x7f00000004c0)=[@rights={0x30, 0x1, 0x1, [r2, r2, r2, r2, r0, r3, r3]}], 0x30, 0x1}, {&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000580)="ef4dd3f8d1ef33b14fe1b4250b44512e9b380c3c8f064ab4d34495e14865c6dde08408f467a44e8b4382d7d484f02d9d2d99a5510677b8bf9f40a79c8811edc4797df251dd5ddbaa75c759090d048e241afe4c09cd6131f5b0a2f1b469e9d1d889ba17063d2ccc1e658e251b7bfe65f1c0a7b8a28edcb8f68d4141dcd296dfd4f8edf42f0e37385fd1306bf7d54e139d4b8e8be08a1a5081c0f7e670467f1ba0ee8701ef75f276e24396c654a8f98b0fe622ebabeaa7ee70d8afbb9ec3065186d3e504d9abe93c9ee7f64ed21d9f7c6361889775c5cebd717eb2eec8793b8090", 0xe0}, {&(0x7f0000000680)="2f64c05b39359362ae9e4f74", 0xc}, {&(0x7f00000006c0)="da223d7d867f2f69a8edd93e9e84c525917021d6338faf6beab94f63956e8079652cbd346cff446593873215938f3c5a01cf8a67e66b505e59855b76fdbc02110cc0072334065a30a34ca57d62777bc3e49d698e04184b97afad2694c27145e18e5bb9f0fb3b70c43587075408270c6be5bbdc045e1cccaef803c6301571f28cbcc1c57ce33f4706b0699487b6b21c3c0a337135fb3e2b97107ce99ef7729dc1f657d85504e292323b67473fb1c06a2067fdf4f22e58dd2523098c36316c2dc138e1e8bf4a0008b08f9e1eb25a03228e1064", 0xd2}], 0x3, &(0x7f0000000f80)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}], 0xe0, 0x40004}, {&(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001100)="4b6df9fe8b2515025fcd4bbee7147c4599c1679ed0c9cd293a12654d930599cb6da2638cb6dc176d6730ffb3a9c5efb67b6ec75a06065560fdc68fe3", 0x3c}, {&(0x7f0000001140)="136b81f85e5fe72235468a063631e54e78ff560ed5050fbdb7582e8a29a9bd8bf42b23459694b7ece6afb0ab1c575fe7bffe61e832dca8920a90bae7ecb76648100702bb88489a1a6356656b80b1bc39a1a7315ff89fb04340322e80592d4f48a9517eebccc4b0ef703fdf72429d74fd7037a4730739bd42b48df3d2a0bc07cf0148e3068cf2f0f424b73f9760925337c057b50ea3d43d603b1fc4860f78b34a783f76b13c7fc162a02062ab8689fe5de288cd85f2e6abc5f990c5b509d2c8edfed4180a304ff2129426f7d76ec11e90e5cb5bd262178698de4c66f343c56da6e279b447ae4decc1a670af11ed27b0dd95e9d6", 0xf3}], 0x2, &(0x7f0000001500)=[@cred={0x20, 0x1, 0x2, r26, r27, r28}, @cred={0x20, 0x1, 0x2, r29, r30, r31}], 0x40, 0x20000800}, {&(0x7f0000001540)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f00000015c0)="df19352ef2efa3161d333a2ccafdc5fcc9086ca0fb17b6439273f122b8378381e5c5b9cdc9d7e00f535d14e6dc243a08524a66f07f3c0c8b5bab185cecca1c9ab302e418ce8ac0c86a51a767e18413439b8e18e52da3a1c2f30274f264383bbffcfa1484270e4ce87141b01b9feb263cdcdd042f5bdae9eaaef95e8a9f18421de7ca83ee43cb2887f5", 0x89}, {&(0x7f0000001680)="b6e0fe3f5727cb7490af4001ab73541d5a69cee35a7df154198bf7022d0052dea9e933cd6d910e65d2708d94b0d5b519f8e01138457ec34054f0d45e1d9dc7b56b2a03b71f4fac99a36810bc7bb91b26b94f6a71df8743044e83bd8783ea8a9899dd96554d31654be35ff5b69b351f6502952d2a08c172eea64caabc4045779e83e016be7212f5dec1fd7f5dfd09eaa175db05c8b8515007bb5e6e1caf1225ae5c59dfb4e1dd656a100a0a0f90ad8a632e8675b8f41e0e16dfef7bebfe9d498c595c01c00dba3ca25a8218b39a0b0eaf37e2ccf74a288108da515be1595394c7292490f0ce9f", 0xe6}, {&(0x7f0000001780)="632e116f80b96465182b9ded195dc692fcfb4c9635825de781a110a3dab02fb43c5bed3cfe2ca9d3b5b4164a8777be8625d638d91a3472ad3f342ab5bc9578edf8d75ef671c5bf858b62e7141cdefa2779e03ca69efc66f78ec9e73ec5a524c7306991a7828295d3813999db8153e5716bc3744d0c5049a82eb0e9d70e8bcc9c8366fff24d172e32a4e38993e936ac9e65aa7dd9af943309987720366dfef55bd46a94db30c0eb25cc380b650560fcf1b7e955a1cace27a065c22dadd47d9f7eb8db2274625d8a445c983b141c030d08971c168438242b6635489f962bd87410ec84a40c", 0xe4}, {&(0x7f0000001880)="a5b7e6e1d943e92e91fd9835e7d537d9adfddf95ffb7c97d209195ed544b764dfeada675b6886d9829c473826f836796889f217de75309dc029e8856f8af916e27031c541287f27eba7405c63ee4650e2de7f94fa5626da46228e7c93a4d0d99abe9ff3124c941bd87", 0x69}], 0x4, 0x0, 0x0, 0x880}, {&(0x7f0000001940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001b40)=[{&(0x7f00000019c0)="b0b1c2b4e9efefb85eeb87693875d1c190c0a7f6e395b16d6fe8a12aaab377110a67c963a558938694ff452bc1176572501aa14f081d2bfa5b538fc98c131ad1bc9efaad52e62f328732a2e62b152984575a119f03640174640fbdf088770bd6a2b5f0d8cc233c3f5e0dfffaf667dbb2e66c7a67e76cfe4eb84ca39e26c19360516108197ec0baa8c4e983dbbc49bc7658f3cf22aa2c115b963fd176adb5b2c597e750be84dc8ead44007a", 0xab}, {&(0x7f0000001a80)="de6287531bf27da333d30330f9e7961cfd57159cf56ae9cb7e8986f4413bebcb29c42a0e4e2a4c01d2279fd14d949cf0f9de4478266b48f6bd09411dcf1436be3bd9cdd1f31b2621b64b50ca590bf17dd649b65822dfde37d05dfac4b762101e1f4a4e8b61f268264bdcf55d18303cee2ae80c1838667d096cea46891d14d8eae8a1c7c7fd41519d30f27d05c505b04d7a4c866df99c7681fd68a0fa50f5c01add011082441e74", 0xa7}], 0x2, &(0x7f0000001bc0)=[@rights={0x28, 0x1, 0x1, [r0, r32, r2, r3, r3, r2]}, @rights={0x18, 0x1, 0x1, [r2, r3]}], 0x40, 0x4044000}], 0x5, 0x40000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r4, 0x4}, &(0x7f00000001c0)=0xfffffffffffffe3b) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0xf7b}, 0x8) 23:45:14 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='sit0\x00') 23:45:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:14 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x16}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1c000000}, 0x0) [ 1037.222577] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000400171277e0726b65ef3d3cb7b022a75d043f2f401977a45728fa15bf4a583c54254dcb659ded4074697ad54f2295c32dabe1a2b10a9e6ef87dbc4a99080e7409264199cf8edefb41a48bd98bab5e8d94", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) [ 1037.302271] overlayfs: filesystem on './file0' not supported as upperdir [ 1037.331188] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:14 executing program 5: r0 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r0, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xf000}, 0x0) 23:45:14 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0xf6ffffff00000000) 23:45:14 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f4, &(0x7f0000000140)='sit0\x00') 23:45:14 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x4000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4001fc, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x8001, 0x9, 0x1ff, 0x100, 0x0, 0xfffffffffffff801, 0x20, 0xd, 0xfffffffffffffff8, 0x3, 0x8, 0x400, 0x2, 0x0, 0x9a, 0x100000001, 0x6, 0x22, 0x3, 0x8, 0x8, 0x1, 0x1, 0x9, 0x0, 0x4, 0x2, 0x1, 0x7, 0xffffffff, 0xffffffffffffde2f, 0xecff, 0xffffffffffff5763, 0x200, 0x2, 0x101, 0x0, 0x8, 0x0, @perf_config_ext={0x8001, 0x2}, 0x4002, 0x5, 0x80000000, 0x0, 0x400, 0x0, 0x400}) 23:45:14 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xe803}, 0x0) 23:45:14 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r0, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:15 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc0045878, &(0x7f0000000140)='sit0\x00') [ 1037.690033] overlayfs: filesystem on './file0' not supported as upperdir 23:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000800", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:15 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x68000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:15 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x4}, 0x0) 23:45:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:15 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x100000000000000) 23:45:15 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x894a, &(0x7f0000000140)='sit0\x00') 23:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:15 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1c}, 0x0) 23:45:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:15 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x60}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:15 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5451, &(0x7f0000000140)='sit0\x00') [ 1038.103578] overlayfs: filesystem on './file0' not supported as upperdir 23:45:15 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x114, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x16}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x39}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x17}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0300a9cd5dfb9ad9cdd20000000000008000010000000800040002"], 0x1c}}, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x181280) write$nbd(r4, &(0x7f0000000340)={0x67446698, 0x0, 0x0, 0x0, 0x4, "de94087883942d4199e76d1facf288c8c4a17797b0e03434655fbd375e9584d4ec6cb1d0e40ec7598b98ecd6c0e94d981897cad620b9829bb5aec1e24fcef0b67e26f52819128bac748bdf78d3823b1f95c3755ef4cf4655850209b7889f727664f4685239a405be35a39155da03c953d4d2d2db1df80237caa97709dcc697040abe905cd342d0eec317d4bdda0993712fd6f56490ee201b839c094842c6e4a3bd76d27b28bc147b87133fed8faffae7e5e127335864a75e310dbfe811bdb2d9ac2a0c2844f11970b792a474dcc31447dad7d5753461132b693a8aa87b93474407a1eb96f6717c806c5b09cfecefd4c35101ea7d9836f28b2fd1b8b8323735debb7721031482f102be8d79b42b2ee44879f033c1acf51c12cf378e900b1fec4e567774aec5be446fe212c130250b20f4b37074806271d0a3f1e9fb88e07afa16cb740fdfbb36c259b8f02699c89460fe52fd0e13d45d43d21f434210e5be44cc15e854e110d973cc070728e48d0dc9804f87e166aa69b9dc39ab5de2ec4b26b26d6a35170d2f727f4d88cb195e48e1782a90b09c9b683b34655b13ae39c1eabf282fcd4f58ba249f2f90b5a8323763fdadbce4631dd28abaabcef32ba36ba3594d5b0fe1f9d87e2e2edce64750d6aef9c6b1d554e3736ad8082047603be955fdfccafe49c0ffc2197285d170ea6d4720a98b4cec60d7f1804b4fc3782f0446d7ef43b6c34b6abca1bd83c66186a733d095a530ce32f000c9d3027aa838d4b58a148b25b358183801f3218c97c416b33163708d3a4d1a19859feed853e001e2946fab2ce1cdfc6a7dc7136572fdd51caba6c5cec9453f7bbdaedbf1a421fc533f935a7592a8019fddba8d63ef026e87086e8d8005c2440dd82cc43e877a12e1b6ed0157c57471c3447425821ecc39e43e4a384056d18fcb272d0e6b1be84ffe5f9f1fb9c9ae2615afc044d3e73175e180829d8dc21e9e10aaa139473e47a5adc8f2160e1d072391c05d3d24cd2e6dbf782c20372dd9fc0f49d8a6e6c30de7dab9b7560ea997b4612ef0dcdd216acf5b85d3f12f8e38e11a46b67ccd1436cf1104977c0675a9745378938a3c532729eb2cb816770e28f2c9edaf7d6cd81e3881e0fba1ce75c04c60b75b7776566c4c1c9062e90059146c44a23c7dca082b0b5bbbd24f0683acca9a85e0a9bdc443b5c534965a28c417bf88994f7fcc97aa32b3d823c8c9e24b37413a4b27901dd20545cc2fc71c2287c5146e15481d6f0eefbdde80e33b45c407b4f0eaedf563929b0695266182b9364414b42d6fad6399c650afb35a18fc8c93e9841854a834af494d515dad338d26f2f934f30355b9a67641f668d77e9e9b926b17b1ca1dd54c1125fd4fd37cb887c0ffca6cbb1f1019541f2de26238455d4b7b5dd2a3c0440bee5f054967f3a911d2e9c789038b17e3548e84b4a04188495d804ad66c24004b9acdbec17bdf2447342fff4687b5e0becb833988c8f871e7a721f7ca96c4bcaecd314792d1f6b2e92b2469d7a2d8b240c24a185a6033c158d786b7270eedb475722c04461f3b665b9d4ae5d5a421ecc88a8cb4774c1d732fd360461d15e1523edd03487e5397fbd24b00153cc5d0c8f188905958547a753bc0c6078fa2dfe285c221214e0d1d8960dd8c53dec241d664752f764052424fb6a0c2dcc893e2aa38b672f77581235e3b085198600af8c9300388e1acd33fdc8ec5d0b3c256f258272d7eb083e8dc40e2a96a97dcf05197e72dc712ffa798f0294a0474efeed9eb49fd93696523b809d52873a96c3ebfa9930a4eff240330a2d02682a90b5ceabd8cc4d5102142626026590722831eaa6ca5f963bfd5cf98e647d9f48d3c6b55e44d7e43af5ac0f6d26ef7f0f99eb059d2a38987e99ea07a8d664b591545b5c442819b471d0a8aef6ca2731d3c33f52224848777c3804c95e4dbae15de7012f74916b4b645cbef5b4666f8c110c389ee008bc0bdffea4cc9574732035c8cb31c3c150e18f34359ae8ee1806202855aaa0beee07df4705591c953fa626cfd9c87858b2aaac6d068175a0f3f3a115b942a8cddeb8e95bf3e636e957d439dbff027cacf75d0b8a8c8f5c7a1a233e5fbe0c50147e40cff94bf2ea04897995585d153e433edc2ee738161ce353eff32e49d5173b199ad47c37e1f459dbead8cfd14726ff2e15babac58905694c95b75ac60159133cebb3ee8a0e0fef29271b9eca1f3f77ecbf6b392518720a747a360485b7b6e396dab26119205531ee954c39d5ef465c1038ed050924a8b604f12e218d1cca7970f1ffcbe4b1238c923bdf4a858f56dbf5145383f6070dd190aad5c6526f2b61499ed3f0ec46042ed88f08ba688459ccdbc084fd0e1feb2836c9bdbfe65665cfe5f267353771b076668388a10730f207d1ae5c413acbcec669edf37111e89500f18df2213eedc472d708557273ce66969e1340ce9573935ba969280638fb919535fcf290d223e318867aac387dbc24bc368065a0db1498e7ed4ea7818c6a7b85a62640341b6d1176ff71ac7c6c6478929239022c8e7dc5b4eef560d96f5dda3727bc2077fec341f1c657d1dcc9fb83dbfb17e3e27c4e1c3a75d294da93e39da2446ddf65a2a42b16aabbc924e2246c56bcdd6114aca9cda7c9293c0015c0787700f02b3d481341bb2e3f91e3f038e586c6c20413e21ac3992d145411253c59a6622101b07d747b8b60d97e9c7ba0a4035584847ff0496ce3ade818f3c005ae92554a5a6f04a6f64fddc81e191c3a7e7f8467d31fd42e3be7a83a46c7f329793a7f4dd6610a991979a7c7c504909679f04c65daa116e34433fef8049e0153d722a27e01e58b2af8168bef21f347fcccf276b521383bbb120b2eb6a2f1e32e6b02c415d76af9e7b9d89e040e815a04c33e20429346b5910e056a908765bf0522575b7b850612c5572d8918c16febec0ac1943346ad075b4d6c24f4b79fe92a00022cbb112fe5565295a41b2ae1ffd236cc8e7345178bcf977f069dea030a095f75e18149a8f690f3a99291e90d474cbfa69cbbbaf0b64d7c8e50e58a67e5595c12627aa08e11e1f9ecb038b32e2054a44665cd5a26c8ff8ee00596de044432943ade07f5ad90457b4b88ea11eed30651becb325f6383ad6cfb410bf9ab35d6a3ff717423c7d107bade138774dc5749f56e4ed2c1cc78186aaa247d8e2763cc07c38f2066b6f72b121cb307a27d225b20a2e3276b100576532ed049af1849adccb2f4edfa68a9ec21788ea757ba32d5264ca120570236b8ae23b691852069ef05b4bc1263c2348a03e50dc0030b2425abc06a9c4a2a89b6210086b12efa5b8d7130ce86d418d0fa63c3d6c13d254c0dd64692825bec447e4e3fd45bacb75c7b57ecf2ceb750849d3686e0a30a4667729bf1bef3bdd816cc55d29f037b586b2173d762bd33a9c4083f32e622c254537935473a566d1cdc3e1c7fcf55134711be06f8a435330cdae41629abcecbc038b08951084f2c92476dfd3464c4fa37af5b8d52bef66fa776d5689b2ad2eff9e41b6d6ab1859805d29490e7f267989a18a0f0679f50834f40e3a3cb73a30a09d807df5d58139056f0541eb004dbfb6272c0ed85fd4d867fc6fbb630f6ee62bb42c82d411ac7fdce96e5c3d9b2d56f5ae3ac1fa58a8781619b403245eb8b9625b6e3df522a86c38ab578be02dd126e145f0b484e3e7c81c54571ccbcefb8a466f7288fe7f5ffcf0fd3f2f5928a89c31053b710aa6c69fd55c40e56ec43e2dcf6bc1fa9883f86156cf182a2a1277808c95b89c9f77d4409d0ad7df9eefb6063673465e3081aa96a4af5116454379db2ab7e638b51f24b8642732ec3c09afa470319487a857be95cbecc62631cb785c1c5c988367ad251f813333b078fd65dc231745f021a1e69f725e4f363b970b53ad543302ddfe56203a9f7dc815120a595b8fecce75634f9775c4ecfc3a96251b75e3c6c42bd554dc130ac7baf97aa26bade78d48fb8c85cb11a2d23e7073ce0999891e6b7aec53e8fced651b3e75137a1c6a4e91a5e785c53f989f5ea56b379b2f9f1bea76e72814dbaa5d795710a8f8f806f8fbe3b65a98c873ba890ad068ec0fe14c3db74c5e05868fc057b7449d233f5e589f3c1cab37c240e62221d7dd91336e5b1d4559aa35849f6f567b0712a733cfef74a3493b76e8386ce8e70902a6acef4b5a6b19eeeb23b3568d54b2564c30eb954ba1de44e37dac0c16ea81c37a1937e71357d542349d14c02e943cfc1dc29486589e57e902a1eef891d968351a63d62f83664c75213cb2e243649ec43199e4e88776836427edfe8144c40a633eca776f5b58b9b6806424054f96f782e11e00eb5bd5b0c81e0089e99b0146c945e6a3a06274ebf37f427ef85cf11da1cda7db3ff5179245d4462636739a64ee9d1ca679540b9befbaba4ed2dc16e09cd838b01c11bff8202e84e1eb4979a4d05f202515d05ab88fc194372f1d9879b694a03c63204e64cc3beff4ecfdf3e49b93d17a1f52f8e494c15177430b81d9903feca2ac5140eec5e2e1dc2b4f844c2df4ed248474588a1158ca405438b7e39448151e7749daca15dfe963e2afb6fc4e88516c5c9ff1677e193fbd927adb29ae93e5db317f964f379903b53feb410cbd89b27b3125cf7297860c79cd9681906f6c8eaa34600510e31ad18dc92886dd79eee97f1c9da69b3bc94f20ebbd4e73aed4705ffe18b3174e816d2b4a361a0e539f3eb7835209facf4951343962996622ed5d2c93c1045b8b65de92b433f4fd714e22dadd1df36db28073c3ee4c85a4be4a2c0875efb75a33657ea64a0d723bfb12bbff7448e714d533394b9be5c31b107d46ad6d115ce083a0636776a0916782501dbea7de0da24dc92854102a73065fb7fd1f0cc5397eaad459f1d6e977b875c0df088d23386802a18d3e5582602c4525fae51f682bb223dacc85c95e0820cfa42a625c2f9639d09c6ea9ba9af353208ee6a90c98bb9c9f415a26dfb351b8bae20241f877d94085bc38720cbaf354b3f158a2f0d46f0ae880be7961b5a083361b5cd904a07af4fc06ce271b1ddadd29aad97ecabe7ceb7eb9765b37d63f12edc80b587255edf54cec962e5adf73172c1633c40f22a9f3fc71384ac613cbcf8185c38caff90e7a7cc718c0d518d2b82e0a330a6154a05895a07ff408b256e9e388c19c64cea96ddb978983f6e004f51d1913a75b49f8af32d5bd23e79d2b8d60f620e610e2fd4f60c61f5cc368be3335292b5db4bf70537693ef5fc8aa8f61a47c5d77731761293864222ccdecc91490ad70fb194d1b599787827988ce27308b654a10b67920ba74b712fca262d7bfb46fe08e83aa936274bf915ba7ad7f8ee7f10806fb057d505ef0b89e31618de2f8a785ae9239659f23669863c290062048a015dd17485f8062b3c013b1199834cc4c3ad323df6a8fd3e56ab1d7d11a29657a17361ebb26fa05be7608d512ffeda5d3a33dd808a5258f4fa2d51a9beb30a0de9165eade94417a09ea05e147a33a3b1030f8ecb50af1944d55e1e95cf64ca6178a50a808efdc21e4c06ab2562605bd54e7c0b417e6f8ee48c3d3ba10ef58945bd097fa6543c8f9840af68580044e7abe22b4a8143d89b53e58d490b8652f825804097aa82d23d4e957ddab4d4f4dacd184d3662b72948eb70b6d393f28c5264cade5440061f18dd0d31e5e4cea37aed213b822135aa45bd81f899c33c95a10d12e886c904ce12b9d14a1851ab4df45e41114cc35832725b8e18f88a81902a2d7af12d1cba16840b0a5"}, 0x1010) 23:45:15 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x3000000) 23:45:15 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x1800000000000000}, 0x0) 23:45:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:15 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x68}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:15 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000140)='sit0\x00') 23:45:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipddp0\x00', {0x2, 0x4e24, @remote}}) [ 1038.386720] overlayfs: filesystem on './file0' not supported as upperdir 23:45:15 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x2000000) 23:45:15 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xffff0000}, 0x0) 23:45:15 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4020940d, &(0x7f0000000140)='sit0\x00') [ 1038.510304] validate_nla: 7 callbacks suppressed [ 1038.510314] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:15 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xe00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1038.599226] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:16 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xffffff7f}, 0x0) 23:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, [0x4, 0x8cc7, 0x6, 0x4]}) 23:45:16 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8930, &(0x7f0000000140)='sit0\x00') [ 1038.727011] overlayfs: filesystem on './file0' not supported as upperdir 23:45:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:16 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x2}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:16 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0xf6ffffff) 23:45:16 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0xfeffffff}, 0x0) 23:45:16 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8911, &(0x7f0000000140)='sit0\x00') 23:45:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:16 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c41961d8cfb000000", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) [ 1039.049831] overlayfs: filesystem on './file0' not supported as upperdir 23:45:16 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x2) 23:45:16 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xfffffdef}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:16 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8949, &(0x7f0000000140)='sit0\x00') 23:45:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x309, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030000008b5e66780000010000000800040002000000"], 0x1c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0x0, 0x3, {{0x0, 0x1, 0x6, 0x9, 0x1f, 0x3f, {0x1, 0x3, 0x212, 0x0, 0x34, 0x4, 0x4, 0x0, 0x9, 0x7, 0x1ff, r2, r3, 0x7}}}}, 0xa0) 23:45:16 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1039.329006] __ntfs_error: 8 callbacks suppressed [ 1039.329015] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:16 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8920, &(0x7f0000000140)='sit0\x00') 23:45:16 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x1000e}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1039.430974] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1039.451241] overlayfs: filesystem on './file0' not supported as upperdir 23:45:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x309, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 1039.484124] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:16 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:16 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0xffffff8c) 23:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x10000000000000, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 23:45:16 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891f, &(0x7f0000000140)='sit0\x00') 23:45:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r1, 0x309, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:17 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:17 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x8000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1039.763467] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1039.804627] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1039.824390] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:17 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:17 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f7, &(0x7f0000000140)='sit0\x00') [ 1039.863415] overlayfs: filesystem on './file0' not supported as upperdir [ 1039.902477] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x309, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:17 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x8001, 0x8, 0x4, 0x11, 0x1, 0x6}, 0x2c) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') 23:45:17 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:17 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x300000000000000) 23:45:17 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x6000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:17 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8931, &(0x7f0000000140)='sit0\x00') 23:45:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r1, 0x309, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:17 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1040.202181] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:17 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xa00}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:17 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000140)='sit0\x00') [ 1040.280482] overlayfs: filesystem on './file0' not supported as upperdir [ 1040.320588] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r1, 0x309, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 1040.369384] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:17 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x200000000000000) 23:45:17 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x88, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr}, @in6={0xa, 0x4e22, 0x1ff, @mcast2}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x550, @loopback, 0xff}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x4a6, 0x3}, 0xc) 23:45:17 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc0045878, &(0x7f0000000140)='sit0\x00') 23:45:17 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1040.543608] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:17 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x6000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r1, 0x309, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 1040.597831] overlayfs: filesystem on './file0' not supported as upperdir [ 1040.627913] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1040.630090] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:18 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x1000000) [ 1040.719237] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:18 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8933, &(0x7f0000000140)='sit0\x00') 23:45:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r1, 0x309, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:45:18 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x101000) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'bcsh0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') syz_mount_image$ceph(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000200)="669cb34ef62a49515be89959fd853e5f2cb245c4ba7bfe8ca93e74679cc53c83025305bfcb4ed87999fd641196b9f95617dcb2c98baaeac2eb99a096e27d1fd5229688a4c65cf0bbaedf46c91ae13eb05556f6c3b9c8a3dbd181ddf2a5a940f1ed8ca5eddad3995a236d763e76b85ceca7fac4553720bd3eccbd382340d73fac5f0cb00a9773fecc5efcb95ccd17479af508e4bc0e739e0fa2de", 0x9a, 0x6}, {&(0x7f0000000340)="7357b686a489f54aba3536cfdfca66fe6258514353238c317bad9a6e53b0adf34b978903c8f67d2ee3493f8103e0d41365bc3961330644099048d5dee6eceff0336c6d36195a5a1a36af8aa273726340594225b3f0121a7370643817f076ff", 0x5f, 0xb18}], 0x2a60010, &(0x7f00000003c0)='\x00') chdir(&(0x7f0000000040)='./file0\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[]}}, 0x0) 23:45:18 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x16000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1040.908050] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:18 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x2, &(0x7f0000000140)='sit0\x00') 23:45:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x309, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 1041.003617] overlayfs: filesystem on './file0' not supported as upperdir 23:45:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:18 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x8cffffff) 23:45:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8004044}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xac, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2245}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0xac}}, 0x8000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:18 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x40000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:18 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5460, &(0x7f0000000140)='sit0\x00') 23:45:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 1041.356256] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x210001) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0) 23:45:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:18 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000140)='sit0\x00') 23:45:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x10) 23:45:18 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x6000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1041.465619] overlayfs: filesystem on './file0' not supported as upperdir 23:45:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1041.530618] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:19 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x3) 23:45:19 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8947, &(0x7f0000000140)='sit0\x00') 23:45:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:19 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:19 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xe8030000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:19 executing program 1: r0 = dup(0xffffffffffffff9c) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000700)) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000240)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7ef6, 0x400) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000740)=@req3={0xb9b3, 0x2, 0x7, 0x8, 0xffff, 0x0, 0xfffffffffffffffd}, 0x1c) r6 = geteuid() write$P9_RSTATu(r0, &(0x7f0000000640)={0xbd, 0x7d, 0x2, {{0x0, 0xa3, 0x4, 0x44, {0x20, 0x1, 0x7}, 0x40000000, 0x7, 0x2, 0x2, 0x12, '/dev/snd/pcmC#D#c\x00', 0x47, 'keyringem0/#trustedvboxnet0#[$selinuxselinuxeth1wlan1nodeveth1bdev)ppp1', 0x12, '/dev/snd/pcmC#D#c\x00', 0x5, 'syz1\x00'}, 0x5, 'syz1\x00', r4, r5, r6}}, 0xbd) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') write$UHID_CREATE(r3, &(0x7f0000000340)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000100)=""/38, 0x26, 0x20, 0x400, 0x2a, 0xd4c5, 0x6}, 0x120) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="03000000000008000400020000000000000000000000"], 0x1c}}, 0x0) [ 1041.832856] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:19 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000140)='sit0\x00') 23:45:19 executing program 5: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x1000e}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:19 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1041.925685] overlayfs: filesystem on './file0' not supported as upperdir [ 1041.983473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 23:45:19 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x3e8}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:19 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0xfffffff6) 23:45:19 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:19 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8970, &(0x7f0000000140)='sit0\x00') 23:45:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c6eb38077fa80f404c60000", @ANYRES16=r1, @ANYBLOB="03000000000000000000000000000006040002000000"], 0x1c}}, 0x0) 23:45:19 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:19 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000140)='sit0\x00') 23:45:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:19 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:19 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x100000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1042.299113] FAULT_INJECTION: forcing a failure. [ 1042.299113] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.387411] CPU: 0 PID: 26959 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #265 [ 1042.395455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.404832] Call Trace: [ 1042.407449] dump_stack+0x1c4/0x2b4 [ 1042.411627] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1042.417210] should_fail.cold.4+0xa/0x17 [ 1042.421692] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1042.427022] ? graph_lock+0x170/0x170 [ 1042.430860] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 23:45:19 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1042.436713] ? graph_lock+0x170/0x170 [ 1042.441398] ? graph_lock+0x170/0x170 [ 1042.445220] ? find_held_lock+0x36/0x1c0 [ 1042.449325] ? ___might_sleep+0x1ed/0x300 [ 1042.453495] ? arch_local_save_flags+0x40/0x40 [ 1042.458275] ? trace_hardirqs_on+0xbd/0x310 [ 1042.462992] ? _raw_spin_unlock_bh+0x30/0x40 [ 1042.467445] __should_failslab+0x124/0x180 [ 1042.471710] should_failslab+0x9/0x14 [ 1042.475538] kmem_cache_alloc_node+0x26e/0x730 [ 1042.480148] ? __local_bh_enable_ip+0x160/0x260 23:45:19 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1042.484852] ? _raw_spin_unlock_bh+0x30/0x40 [ 1042.489552] __alloc_skb+0x119/0x770 [ 1042.493304] ? skb_scrub_packet+0x490/0x490 [ 1042.497654] ? netlink_insert+0x15a/0x3f0 [ 1042.502100] ? __netlink_insert+0x13b0/0x13b0 [ 1042.506642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1042.512205] ? netlink_autobind.isra.34+0x232/0x310 [ 1042.517246] netlink_sendmsg+0xb29/0xfc0 [ 1042.517274] ? netlink_unicast+0x760/0x760 [ 1042.517291] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 1042.517311] ? apparmor_socket_sendmsg+0x29/0x30 [ 1042.517330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1042.517350] ? security_socket_sendmsg+0x94/0xc0 [ 1042.517366] ? netlink_unicast+0x760/0x760 [ 1042.517387] sock_sendmsg+0xd5/0x120 [ 1042.517406] ___sys_sendmsg+0x7fd/0x930 [ 1042.517422] ? find_held_lock+0x36/0x1c0 [ 1042.517445] ? copy_msghdr_from_user+0x580/0x580 [ 1042.517464] ? lock_downgrade+0x900/0x900 [ 1042.517486] ? proc_fail_nth_write+0x9e/0x210 [ 1042.517510] ? __fget_light+0x2e9/0x430 [ 1042.517528] ? fget_raw+0x20/0x20 [ 1042.517551] ? kasan_check_write+0x14/0x20 23:45:19 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1042.517569] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1042.517593] ? wait_for_completion+0x8a0/0x8a0 [ 1042.517622] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1042.517638] ? sockfd_lookup_light+0xc5/0x160 [ 1042.517659] __sys_sendmsg+0x11d/0x280 [ 1042.517679] ? __ia32_sys_shutdown+0x80/0x80 [ 1042.517695] ? __sb_end_write+0xd9/0x110 [ 1042.517716] ? fput+0x130/0x1a0 [ 1042.517734] ? do_syscall_64+0x9a/0x820 [ 1042.517751] ? do_syscall_64+0x9a/0x820 [ 1042.517780] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1042.517806] __x64_sys_sendmsg+0x78/0xb0 [ 1042.517825] do_syscall_64+0x1b9/0x820 [ 1042.517841] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1042.517861] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1042.517881] ? trace_hardirqs_on_caller+0x310/0x310 [ 1042.517901] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1042.526230] ? recalc_sigpending_tsk+0x180/0x180 [ 1042.526250] ? kasan_check_write+0x14/0x20 [ 1042.608387] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1042.608416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1042.608433] RIP: 0033:0x457579 [ 1042.616750] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1042.710075] RSP: 002b:00007f5da907bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.710094] RAX: ffffffffffffffda RBX: 00007f5da907bc90 RCX: 0000000000457579 [ 1042.710103] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1042.710111] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1042.710119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5da907c6d4 [ 1042.710128] R13: 00000000004c3566 R14: 00000000004d5370 R15: 0000000000000004 23:45:20 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x8cffffff00000000) 23:45:20 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:20 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891e, &(0x7f0000000140)='sit0\x00') 23:45:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r2 = dup(r0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000040)=""/26) [ 1042.783449] overlayfs: filesystem on './file0' not supported as upperdir 23:45:20 executing program 5 (fault-call:2 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:20 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x600}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:20 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:20 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fb, &(0x7f0000000140)='sit0\x00') [ 1042.992838] overlayfs: filesystem on './file0' not supported as upperdir [ 1043.062805] FAULT_INJECTION: forcing a failure. [ 1043.062805] name failslab, interval 1, probability 0, space 0, times 0 23:45:20 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0xffffffff00000000) 23:45:20 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1043.129533] CPU: 0 PID: 27021 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #265 [ 1043.136985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.146364] Call Trace: [ 1043.149142] dump_stack+0x1c4/0x2b4 [ 1043.152766] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1043.157962] should_fail.cold.4+0xa/0x17 [ 1043.162032] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1043.167576] ? graph_lock+0x170/0x170 [ 1043.171369] ? save_stack+0xa9/0xd0 [ 1043.174996] ? kasan_kmalloc+0xc7/0xe0 [ 1043.178878] ? find_held_lock+0x36/0x1c0 [ 1043.183238] ? ___might_sleep+0x1ed/0x300 [ 1043.187569] ? arch_local_save_flags+0x40/0x40 [ 1043.192142] ? kmem_cache_alloc_node+0x5ac/0x730 [ 1043.196893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1043.202442] __should_failslab+0x124/0x180 [ 1043.206676] should_failslab+0x9/0x14 [ 1043.210473] kmem_cache_alloc_node_trace+0x270/0x740 [ 1043.215583] __kmalloc_node_track_caller+0x33/0x70 [ 1043.220548] __kmalloc_reserve.isra.39+0x41/0xe0 [ 1043.225662] __alloc_skb+0x155/0x770 [ 1043.229547] ? skb_scrub_packet+0x490/0x490 [ 1043.233873] ? netlink_insert+0x15a/0x3f0 [ 1043.238016] ? __netlink_insert+0x13b0/0x13b0 [ 1043.242686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1043.248224] ? netlink_autobind.isra.34+0x232/0x310 [ 1043.253246] netlink_sendmsg+0xb29/0xfc0 [ 1043.257309] ? netlink_unicast+0x760/0x760 [ 1043.261560] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 1043.266661] ? apparmor_socket_sendmsg+0x29/0x30 [ 1043.271438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1043.277873] ? security_socket_sendmsg+0x94/0xc0 [ 1043.282630] ? netlink_unicast+0x760/0x760 [ 1043.286861] sock_sendmsg+0xd5/0x120 [ 1043.290656] ___sys_sendmsg+0x7fd/0x930 [ 1043.294627] ? find_held_lock+0x36/0x1c0 [ 1043.298713] ? copy_msghdr_from_user+0x580/0x580 [ 1043.303474] ? lock_downgrade+0x900/0x900 [ 1043.307620] ? proc_fail_nth_write+0x9e/0x210 [ 1043.312113] ? __fget_light+0x2e9/0x430 [ 1043.316078] ? fget_raw+0x20/0x20 [ 1043.319554] ? kasan_check_write+0x14/0x20 [ 1043.323779] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1043.328710] ? wait_for_completion+0x8a0/0x8a0 [ 1043.333315] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1043.338850] ? sockfd_lookup_light+0xc5/0x160 [ 1043.343344] __sys_sendmsg+0x11d/0x280 [ 1043.347743] ? __ia32_sys_shutdown+0x80/0x80 [ 1043.352145] ? __sb_end_write+0xd9/0x110 [ 1043.356397] ? fput+0x130/0x1a0 [ 1043.359672] ? do_syscall_64+0x9a/0x820 [ 1043.363990] ? do_syscall_64+0x9a/0x820 [ 1043.368343] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1043.373811] __x64_sys_sendmsg+0x78/0xb0 [ 1043.377869] do_syscall_64+0x1b9/0x820 [ 1043.381753] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1043.387284] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1043.392205] ? trace_hardirqs_on_caller+0x310/0x310 [ 1043.397235] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1043.402240] ? recalc_sigpending_tsk+0x180/0x180 [ 1043.406999] ? kasan_check_write+0x14/0x20 [ 1043.411241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1043.416079] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1043.421702] RIP: 0033:0x457579 [ 1043.425245] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1043.444318] RSP: 002b:00007f5da907bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1043.452213] RAX: ffffffffffffffda RBX: 00007f5da907bc90 RCX: 0000000000457579 [ 1043.459824] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1043.467278] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 23:45:20 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x3f00}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1043.474545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5da907c6d4 [ 1043.481810] R13: 00000000004c3566 R14: 00000000004d5370 R15: 0000000000000004 23:45:20 executing program 1: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)={0x1, {{0x2, 0x4e20, @local}}, 0x1, 0x1, [{{0x2, 0x4e22, @loopback}}]}, 0x110) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:20 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8994, &(0x7f0000000140)='sit0\x00') [ 1043.616117] validate_nla: 11 callbacks suppressed [ 1043.616128] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:20 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1043.665528] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1043.679794] overlayfs: filesystem on './file0' not supported as upperdir 23:45:21 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f9, &(0x7f0000000140)='sit0\x00') 23:45:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:21 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xa00000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:21 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x300) 23:45:21 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03005ceebe41e9fd20cbc300100053b62dea29ccaa002733043d7491ce42a04ac2f700010000"], 0xffffffffffffff01}}, 0x40000000000) 23:45:21 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8924, &(0x7f0000000140)='sit0\x00') 23:45:21 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000002000040002000000"], 0x3d0}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) r3 = getgid() getgroups(0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getgroups(0x5, &(0x7f0000000480)=[r2, r4, r5, r6, r7]) 23:45:21 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000140)='sit0\x00') [ 1044.048995] overlayfs: filesystem on './file0' not supported as upperdir 23:45:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x200001d0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:21 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x1600000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:21 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000003c0)=0x1, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000180)=0x7, 0x4) socketpair$inet(0x2, 0x5, 0x6000000, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r1, &(0x7f0000000300)=""/95, 0x5f, 0x100, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x182) accept4(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x80800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000480)={0x7, 0x8, 0xcdf, 'queue0\x00', 0x1}) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./ffle0,workdir=./file1\\\x00']) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) 23:45:21 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x280) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) membarrier(0x4d, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="00fb9d0401bfb3dfefe5e8892058eb17fd027c2e8b288955ce6a3f26d53e0a01b9d02abe46c0969dd5615d9cd33823ffbeed8eee51a09f04d69cb44db3be8c764acc5468e55ff7a08c179b055002000e049a66b15d4c372bea2b24173c7da035ad563b730abb37d28a4d9d4f24aab0ab89e2942f35578847d1173904d3e8022c3bcf1d7179e239060000004c02e9000000000000000000000000000000"], 0x9d, 0x1) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000240)={0x5, 0x3ff, 0x1ea, 0x40, 0x7, 0x9cae, 0x3}, 0xc) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000080), 0x25e, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r2, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) r3 = eventfd2(0x8, 0x800) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000440)={r4, 0x1b}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000380)) 23:45:21 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5421, &(0x7f0000000140)='sit0\x00') 23:45:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xc00e0000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:21 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xffffff7f00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:21 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1044.404892] overlayfs: failed to resolve './file1': -2 23:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x3ff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000002c0)={r2, 0x1}, &(0x7f0000000340)=0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r3, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 23:45:21 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8929, &(0x7f0000000140)='sit0\x00') [ 1044.491673] overlayfs: failed to resolve './file1': -2 23:45:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:21 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x3, 0x40800) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000280)={0x6, r1, 0x1}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x498, 0x330, 0x100, 0x100, 0x0, 0x100, 0x400, 0x400, 0x400, 0x400, 0x400, 0x5, &(0x7f0000000180), {[{{@ip={@rand_addr=0xe1, @empty, 0xffffffff, 0xffffffff, 'erspan0\x00', 'erspan0\x00', {}, {0xff}, 0xff, 0x2, 0xb}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x4}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @broadcast, @broadcast, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @local, @empty, @icmp_id=0x65, @port=0x4e22}}}}, {{@uncond, 0x0, 0x128, 0x160, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x6, 0xa2725d6dde9b24eb, 0x2}}, @common=@set={0x40, 'set\x00', 0x0, {{0x2e77, [0x6, 0x8f, 0x3f, 0x4, 0x0, 0x8], 0x200, 0x34, 0x9b}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x12, @empty, @multicast2, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @remote, 0xff, 0xffffff00, 'ip6tnl0\x00', 'dummy0\x00', {0xff}, {}, 0x1, 0x2, 0x2}, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @remote, @empty, @port=0x4e23, @port=0x4e21}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) [ 1044.578531] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:21 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xe000100}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:21 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:21 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40049409, &(0x7f0000000140)='sit0\x00') [ 1044.638244] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf00}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) [ 1044.756232] __ntfs_error: 5 callbacks suppressed [ 1044.756245] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:22 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8913, &(0x7f0000000140)='sit0\x00') [ 1044.858054] overlayfs: filesystem on './file0' not supported as upperdir 23:45:22 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x1600}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xffffff9e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:22 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) r0 = socket$l2tp(0x18, 0x1, 0x1) accept(r0, 0x0, &(0x7f0000000140)) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:22 executing program 1: shmget$private(0x0, 0x4000, 0x78000400, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xffffffffffffffda, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0xff71}}, 0x0) 23:45:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:22 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000140)='sit0\x00') 23:45:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:22 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x1f4}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xfffffffffffff000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x3f, @local, 0x4e22, 0x0, 'nq\x00', 0x20, 0x3, 0x5e}, 0x2c) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) [ 1045.219564] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:22 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8990, &(0x7f0000000140)='sit0\x00') 23:45:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1045.332769] overlayfs: filesystem on './file0' not supported as upperdir [ 1045.348658] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1045.368401] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x1206000000000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1045.427529] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:22 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:22 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x3000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:22 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8995, &(0x7f0000000140)='sit0\x00') 23:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9072ad86fe1593c595dace51aff56e8efcd664cfd27b07fd9abe6ec20113e985e443765997f145ee4a9a2a881c4b09504a8ec7a203c040ca19384a1c98d6788f95550cb5f2fd60df2290a132ac2575d13733cd9a13da75f04eeaeb78097aa3208e5a1b57e428f90b9bbfea9bb5a99fbc8e6c294ccdecaf304231896d05000ebf165d9c658981cf96be719b663e354299cf4c251df0375bb579e55ef4a7896ffbeadc4e32ba978fd73f78873861c45839a9857b57f69a646c0573f724ce71fda5f2dc9f90f6805f2614983d3b", @ANYRES16=r1, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1045.645098] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:23 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8993, &(0x7f0000000140)='sit0\x00') 23:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) get_thread_area(&(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x4000, 0x5f3880ff, 0x2a, 0x0, 0x55c, 0x8, 0xffffffff, 0x3}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x8, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000, 0x408001) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000240)={0x0}) r4 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xca, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00634040030000000000000003000000000000000000000001000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="6375ce6d844d8798ac3a7b3e17c48ae0f7a51945e8d19ec27c9acc9916554d6558e3abd75436f2eccdd6def4d9ef219a0fcaac03f52be57d7f564dfbd750675be66346e5dca9534dba187e2ee7ac4339de6d2db5b3b31616f23b8b4d6f728339783b85ca400e0d50401cd5fa991168c7e81b86f544cfc297106308033395f393ad96144f0f95501f58b6c5d61e6b8e3d76", @ANYRES64=r2, @ANYBLOB="0100000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000100000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="06630440030000000b630000076304400200000008631040", @ANYRES64=r3, @ANYRES16=r0, @ANYRES64=r4, @ANYBLOB="12634840040000000000000004000000000000000000000001000000000000000000000068000000000000003000000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000002b00000000000000852a747000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000000100000000000000852a687701000000", @ANYRES64=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="02000000000000000e630c40010000000000000000000000"], 0xf0, 0x0, &(0x7f0000000540)="99a98d66cba7a7b7d6e7de7fa74adabdffb82d65aa262478c97be05e103772d814863ea4a28cec927249477683077edb63bf49c1289ff9f12e004f8f82f86bc02cc8f401380dfb05a416716a7421453c06d71c4e6719493e4014a936e425f1e895e69c96ed27e9fe1c591206e5fc026423746a3d9a5723400abfc917c31ff4c097afbd2870e035ac5487dd6e17d3404b8efbd93f1e4a8cd3369d6cd359bbfa57a9f8c5d55ca8cb3d103a1f87843ce5542f7d1df2d7c0bb80887002f4bdc0b7221e26453024da00e6dc4da8e51e8fe97d88b4ec57b2c2e2b52640de5f5070e61cd46c905021500df4bae4831cdf1026c3"}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[]}}, 0x4000000) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000680)=0x9, 0x4) 23:45:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x40000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1045.720318] overlayfs: filesystem on './file0' not supported as upperdir 23:45:23 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x400, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000200)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000340)=0xe8) r4 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={r1, r3, r4}, 0xc) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2013080}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x75c40c0720ad0b71, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000600)={@remote, r2}, 0x14) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000003c0)={0xc, 0xffffffff, {0x57, 0x1ff, 0x5, {0x3e5, 0x103}, {0x2, 0x8}, @cond=[{0xff, 0x3f, 0xfffffffffffffffc, 0x1, 0x0, 0x200}, {0x0, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x1}]}, {0x56, 0x2, 0x7, {0x4, 0x9}, {0x9, 0x3}, @const={0x40, {0x6, 0x1f, 0x9, 0x10000}}}}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file1\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT, @ANYRESHEX], 0x5, 0x0) 23:45:23 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x9effffff}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:23 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8942, &(0x7f0000000140)='sit0\x00') 23:45:23 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0xa000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1046.050448] ntfs: (device loop3): parse_options(): Unrecognized mount option /dev/snapshot. [ 1046.113644] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:23 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xec0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:23 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5450, &(0x7f0000000140)='sit0\x00') [ 1046.156722] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 1046.214132] ntfs: (device loop3): parse_options(): Unrecognized mount option /dev/snapshot. 23:45:23 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:23 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x7bd8c54d, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="be0ef59454cb79ce1a1ecb125cf44cf0bd4474255ec0b46b86ca988e3a13ff77fbad03642d7fb1e76c8560e161ec55bca5051f69ec8441fee0e9ed0f286238525fada8fd7b6cd07cb247715c33f8dca4c97635e4b512dac2b98e8257403f94a0f837c1088310422e5acb22e198d7e03588368b1de771ef8bcbd8dfd1307cb806fc3e244a495eacc9ca81e064c0ed89e7c0f3bedc40c1f5a00a71234e755f219dff021977e7faeb0b18765baea87603788a5d893f696a1c8193c1a0aa9bcd7770", 0xc0, 0x10000}, {&(0x7f0000000900)="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", 0x1000, 0x7fffffff}, {&(0x7f0000000280)="d8282984b4fcc85a5b381d1c2a948b497435d9492b10e3339baa1772a232c70b94e953a346bb60e7f0a0645a98c488ae422406e46ba19d77c86784eb1786dd640df191b4b732028c29d607981587f84f8da4c3cdfe8712bb30bc297d272fbf8f6eec51733dc1c45d23a4d1dee760de7541d250cc410b6153cb0b2fc1e7def7ff152fc4b1a4f470f5ec95e5d15658a446ba11169b7bcfbc3f4cbd4cb72aeb34489c491ef7bb19771ec31ba4b8cce56bbc7466a49cccc5a65802ef60956cd0532f0688191986f1fdbbbd69200404d767ecf62db5c49c0edaa0681231a35908c73e8a8d8f8dfd9ec8d9", 0xe8, 0x1000}, {&(0x7f0000000380)="efe55bbf28c3f021e7c3d7c4c2d141a5fb972ff930b7388ad81dd19cc9ae16fe51a3c1b4664dc54567f98b", 0x2b, 0xffffffff}], 0x200080, &(0x7f0000000580)={[{@clear_cache='clear_cache'}, {@nossd_spread='nossd_spread'}, {@check_int='check_int'}, {@max_inline={'max_inline', 0x3d, [0x7f]}}], [{@euid_gt={'euid>', r0}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@pcr={'pcr', 0x3d, 0x21}}]}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x401, 0x100000000, 0x10000, 0x8, 0x100000001, 0x100, 0x3f, 0x401, 0x3, 0x4, 0x6a3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="f9"], 0x1) r4 = syz_open_pts(r3, 0x4800) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20000000000007f}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x7f}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0300000000eb00000000010000000700e70002000000"], 0x1c}}, 0x0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x4, 0x400) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x101000, 0x0) 23:45:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x300}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x200000000000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:23 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8932, &(0x7f0000000140)='sit0\x00') [ 1046.478505] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:23 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xfffff000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:23 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000140)='sit0\x00') [ 1046.519297] overlayfs: failed to resolve './file1': -2 [ 1046.534236] overlayfs: failed to resolve './file1': -2 23:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 23:45:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0xf4010000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:24 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) inotify_init1(0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) [ 1046.691438] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:24 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc0189436, &(0x7f0000000140)='sit0\x00') [ 1046.741903] netlink: 'syz-executor1': attribute type 4 has an invalid length. 23:45:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) [ 1046.792053] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x100, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000100)="be9cf4c73708b4773d6f232983c1dc8121e024917e8cfb2eb6e9c439557e261ec9e86157dac8b3eeb0418c708ee1a53317bc4766fa895e4463381aceb51f8fcd5d8c8b9a4b3fe4b4886f3d8d8cb40368009b8411f4d2d9431da1a80179d7a3", 0x5f, 0x8ad, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0008b556c6ce26c70ff51ff5f1c4da37220000f932a4451c2f54056131d37886a95b276a64e1d4f764ad90246264ff5be6d32f08d8cda953a160bb40c529014f0921b3a9b0d193acd6433e13d4fb5f16011f47306494efb8883508329e0fcf04052435dd2bba2ef1f7c80ff19769ba03000000d1b398d1b1587bd2545882db7a483a5e6be51fd0960566a95b0f30a92498de466adf2d", @ANYRES16=r2, @ANYBLOB="03000000000000000000010000000800040002000000"], 0x1c}}, 0x0) 23:45:24 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0xe000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1046.881154] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1046.920284] overlayfs: filesystem on './file0' not supported as upperdir 23:45:24 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f8, &(0x7f0000000140)='sit0\x00') 23:45:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:24 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x18603, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000180)={0x4, 0x7ff, 0x40, 0x9}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x402000, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r3, 0x3, 0x0, 0x200000000000000, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) 23:45:24 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0xffffff7f}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:24 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000140)='sit0\x00') [ 1047.200044] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1047.266619] overlayfs: filesystem on './file0' not supported as upperdir 23:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xc00e0000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:24 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) r1 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r0, r1, 0x1c, &(0x7f0000000180)={0x3c, 0x9, 0x3, 0x2}) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:24 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000140)='sit0\x00') 23:45:24 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x6000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:24 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x42000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) socketpair(0xb, 0x804, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r2, 0x301, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000045}, 0xc081) 23:45:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:24 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f5, &(0x7f0000000140)='sit0\x00') 23:45:25 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1047.704138] overlayfs: filesystem on './file0' not supported as upperdir 23:45:25 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x6800}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:25 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = socket$netlink(0x10, 0x3, 0x3) accept4(r0, &(0x7f0000000140)=@rc, &(0x7f00000001c0)=0x80, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:25 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000004c00000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f00000005c0)}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000700)=ANY=[]) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040), 0xffffffff80000001, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x103000, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000240)) io_setup(0x7fff, &(0x7f0000000140)) io_setup(0xcd, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x90}, &(0x7f0000000540)=0x188) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x9, 0xfffffffffffffc00, 0x202, 0x3, 0x3, 0x10000, 0x9, 0x0, r3}, &(0x7f00000005c0)=0x20) r4 = shmget(0xffffffffffffffff, 0x2000, 0x780000a0, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x9a, "6a0708a70eee292214a130050e96e13e326f5e57cd34a654e8a0792fee1da39b1f386bd3af6755fe22df16d1f8d5d63106b634b3aed3a24766bd03cb92ce275f73925a87cedebb2c86afd771c1b983d9076806b8662edde0a3b3ca0d4b87f16c44c33ae6b3a46c0799808ee35dc183bc09b30d77ffbc626bcfcb5d44ce3e50e221beef7a263337a691d45057beb028239964232aec9e7c295f73"}, &(0x7f0000000000)=0xa2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r5, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYBLOB="86000000e87c86b567470d8452ba8cb8f91e3ebb2a19cf2ac8f27757898dacbdf103e7f6e534ef956c2292264725646a8e9ff96bbc8420ea331cc20bd7c940170b50467fb74c9706e60a58836e45ebf7b2c0f93abac337e36df7cc2c01830b31b5451307e18da1a0d011d6440743b5cbb0"], &(0x7f0000000080)=0x1) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x5000) syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x6, 0x401, 0x7fffffff, 0x10000}, &(0x7f0000000300)=0x20) 23:45:25 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:25 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000140)='sit0\x00') 23:45:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x40030000000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:25 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:25 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x60}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1048.108856] overlayfs: filesystem on './file0' not supported as upperdir 23:45:25 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000140)='sit0\x00') 23:45:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xc00e000000000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:25 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mkdir(&(0x7f0000000140)='./file0\x00', 0xd0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:25 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1048.243382] sit0: mtu greater than device maximum 23:45:25 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:25 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:25 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000004c00000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f00000005c0)}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000700)=ANY=[]) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040), 0xffffffff80000001, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x103000, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000240)) io_setup(0x7fff, &(0x7f0000000140)) io_setup(0xcd, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x90}, &(0x7f0000000540)=0x188) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x9, 0xfffffffffffffc00, 0x202, 0x3, 0x3, 0x10000, 0x9, 0x0, r3}, &(0x7f00000005c0)=0x20) r4 = shmget(0xffffffffffffffff, 0x2000, 0x780000a0, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x9a, "6a0708a70eee292214a130050e96e13e326f5e57cd34a654e8a0792fee1da39b1f386bd3af6755fe22df16d1f8d5d63106b634b3aed3a24766bd03cb92ce275f73925a87cedebb2c86afd771c1b983d9076806b8662edde0a3b3ca0d4b87f16c44c33ae6b3a46c0799808ee35dc183bc09b30d77ffbc626bcfcb5d44ce3e50e221beef7a263337a691d45057beb028239964232aec9e7c295f73"}, &(0x7f0000000000)=0xa2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r5, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYBLOB="86000000e87c86b567470d8452ba8cb8f91e3ebb2a19cf2ac8f27757898dacbdf103e7f6e534ef956c2292264725646a8e9ff96bbc8420ea331cc20bd7c940170b50467fb74c9706e60a58836e45ebf7b2c0f93abac337e36df7cc2c01830b31b5451307e18da1a0d011d6440743b5cbb0"], &(0x7f0000000080)=0x1) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x5000) syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x6, 0x401, 0x7fffffff, 0x10000}, &(0x7f0000000300)=0x20) 23:45:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf0ffff}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:25 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='sit0\x00') 23:45:25 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) [ 1048.493571] overlayfs: filesystem on './file0' not supported as upperdir 23:45:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xfffffff0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:25 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x4000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1048.704892] overlayfs: filesystem on './file0' not supported as upperdir 23:45:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:26 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x3000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:26 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES16]]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:26 executing program 1: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf00000000000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) [ 1048.972418] overlayfs: filesystem on './file0' not supported as upperdir 23:45:26 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:26 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/keycreate\x00', 0x2, 0x0) read(r0, &(0x7f0000000180)=""/165, 0xa5) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000280)={0x7f, 0xff}) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8) syz_mount_image$ntfs(&(0x7f00000002c0)='ntfs\x00', &(0x7f0000000300)='./file1\x00', 0x8, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000340)="974d1b0d04a6049ed18c680baa918c7405d6c0a8e26c422f0690bd8c0073881a30adee868a61d0f0f2c66400fd7acd16bad85d935971ceee6ba9db951b77e0ff368b9217f5fc477e9666c8f6b744a7a9b355e52569", 0x55, 0xc8d9}], 0x18010, &(0x7f0000000680)={[{@disable_sparse_no='disable_sparse=no'}, {@errors_continue='errors=continue'}], [{@fowner_gt={'fowner>', r2}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r3}}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:26 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0xf401}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:26 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8937, &(0x7f0000000140)='sit0\x00') 23:45:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x100000000000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:26 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x100) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setstatus(r1, 0x4, 0x6000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00003409ec8daf2321b8001c00339bc957b06ecb78a5d184ec5c010032c549721ed1"], 0x1}}, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0), 0x1000) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000340), &(0x7f0000002a00)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x8000, 0xb5, 0x7, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r3, 0x8000}, 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x62, @empty, 0x4e22, 0x2, 'sed\x00', 0x1, 0x2, 0x4b}, 0xe0) r4 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0xc1105517, &(0x7f0000001000)) 23:45:26 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x1206}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) [ 1049.522491] overlayfs: filesystem on './file0' not supported as upperdir 23:45:26 executing program 3: lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:26 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x68}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:26 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8002, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) r1 = socket$inet(0x2, 0x1, 0x0) r2 = dup(r1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r2, &(0x7f0000000200)="96", 0x1, 0x3fff, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000004c0)=0xfffffffffffffffc, 0x4) sendto$inet(r2, &(0x7f0000000100)="89", 0x1, 0x3fffffd, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 23:45:26 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b1, &(0x7f0000000140)='sit0\x00') 23:45:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x400300}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:27 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8002, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) r1 = socket$inet(0x2, 0x1, 0x0) r2 = dup(r1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r2, &(0x7f0000000200)="96", 0x1, 0x3fff, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000004c0)=0xfffffffffffffffc, 0x4) sendto$inet(r2, &(0x7f0000000100)="89", 0x1, 0x3fffffd, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 23:45:27 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8992, &(0x7f0000000140)='sit0\x00') [ 1049.841685] __ntfs_error: 16 callbacks suppressed [ 1049.841697] ntfs: (device loop3): parse_options(): Unrecognized mount option . 23:45:27 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x6000000000000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:27 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file1\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={0xffffffffffffff9c}) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x60) 23:45:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100000000, 0x40) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[{0x2, 0x7c3e}, {0x2, 0x1000001f}, {0xd081ca5254643587, 0x8000006}, {0x4, 0x33ddb4b6}, {0x6, 0x9}, {0x4, 0x5}, {0x3f863023fca10ca1, 0x6}], 0x7) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x8000) keyctl$dh_compute(0x17, &(0x7f00000000c0), &(0x7f00000004c0)=""/119, 0x77, &(0x7f0000001580)={&(0x7f0000000540)={'ghash\x00'}, &(0x7f0000000580)="f8417bf6a5091b56027e6538803b0105c21fd854b1c8797f3f1b5d0e8bb2438c9cda55aef1387da2bfa84063ac502eb6832f6dff25fcf44564638e7833fe3b6dad", 0x41}) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) 23:45:27 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc020660b, &(0x7f0000000140)='sit0\x00') 23:45:27 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x1000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1050.198948] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xffffff7f}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:27 executing program 1: r0 = accept$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f0000000240)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/70, &(0x7f0000000300)=0x46) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="45e22e280000"], 0x1) r2 = getpgid(0x0) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x19, 0x0, @tid=r2}, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000340)=0xece) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r1, &(0x7f0000000180)='\x00', &(0x7f0000000080)=[&(0x7f0000000040)='keyring+cgroup\x00'], &(0x7f0000000240), 0x1000) [ 1050.309089] overlayfs: filesystem on './file0' not supported as upperdir 23:45:27 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8971, &(0x7f0000000140)='sit0\x00') 23:45:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:27 executing program 1: r0 = syz_open_dev$dmmidi(0x0, 0x5f, 0x2504ffe) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "d4"}, 0x5) 23:45:27 executing program 3: mkdir(&(0x7f0000000140)='./file1\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x82000, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='9p\x00', 0x80001, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'vmnet0em1system'}}, {@access_any='access=any'}, {@privport='privport'}, {@version_L='version=9p2000.L'}], [{@permit_directio='permit_directio'}, {@appraise='appraise'}, {@subj_role={'subj_role', 0x3d, "5c282aff"}}, {@seclabel='seclabel'}, {@audit='audit'}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}]}}) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) 23:45:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x12060000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:27 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0xe}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:27 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000140)='sit0\x00') [ 1050.635807] ntfs: (device loop3): parse_options(): Unrecognized mount option 9p. 23:45:28 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x4200, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x80000000) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0x2, 0x7}, {0x4, 0x36a8}, 0x3, 0x2, 0x2000}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7ff) ioctl$UI_SET_SWBIT(r2, 0x8008551d, 0x0) [ 1050.720466] ntfs: (device loop3): parse_options(): Unrecognized mount option 9p. 23:45:28 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xc00e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:28 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0xeffdffff00000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:28 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891d, &(0x7f0000000140)='sit0\x00') 23:45:28 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = socket$inet6(0xa, 0x2, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r1, 0x84, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x10001}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x7f, @mcast1, 0x100}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x101, 0x5, @local, 0x3}, @in6={0xa, 0x4e22, 0x3fe, @loopback, 0x9}]}, &(0x7f00000002c0)=0x10) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:28 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000007c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x103000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) shutdown(r0, 0x1) ioctl$KVM_SET_PIT(r3, 0xc048ae65, &(0x7f0000000240)={[{0x0, 0x0, 0x1, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}]}) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80002) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f00000000c0)={0x2, 0x7e0, 0x2, 0x1, 0x3}) 23:45:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x612}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) [ 1050.989979] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:28 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:28 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8948, &(0x7f0000000140)='sit0\x00') 23:45:28 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x60000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x34000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:28 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1051.235392] overlayfs: filesystem on './file0' not supported as upperdir [ 1051.261108] ntfs: (device loop3): parse_options(): Unrecognized mount option . 23:45:28 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000140)='sit0\x00') 23:45:28 executing program 3: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) acct(&(0x7f0000000140)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[], 0x0, 0x0) 23:45:28 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:28 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x2}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 1051.622062] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 23:45:29 executing program 1: unshare(0x24020400) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@loopback, @rand_addr, r1}, 0xc) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) write$cgroup_pid(r0, &(0x7f0000000040)=r2, 0x223) 23:45:29 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x43732e5398417f1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000140)='si:0\x00') 23:45:29 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x9effffff00000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:29 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0x0, 0x0, 0x16}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:45:29 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) 23:45:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0xf000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x309}, 0x14}}, 0x0) 23:45:29 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1052.394087] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1052.401295] overlayfs: filesystem on './file0' not supported as upperdir [ 1210.217017] INFO: task syz-executor3:27893 blocked for more than 140 seconds. [ 1210.224325] Not tainted 4.19.0-rc6+ #265 [ 1210.228993] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1210.237055] syz-executor3 D21560 27893 29830 0x00000004 [ 1210.242710] Call Trace: [ 1210.245299] __schedule+0x86c/0x1ed0 [ 1210.249094] ? perf_trace_lock_acquire+0x15b/0x800 [ 1210.254060] ? debug_smp_processor_id+0x1c/0x20 [ 1210.258905] ? __sched_text_start+0x8/0x8 [ 1210.263250] ? perf_trace_lock+0x7a0/0x7a0 [ 1210.267564] ? perf_trace_lock+0x7a0/0x7a0 [ 1210.271849] ? graph_lock+0x170/0x170 [ 1210.275645] ? graph_lock+0x170/0x170 [ 1210.279583] ? find_held_lock+0x36/0x1c0 [ 1210.283663] schedule+0xfe/0x460 [ 1210.287106] ? __mutex_lock+0xbe2/0x1700 [ 1210.291177] ? __schedule+0x1ed0/0x1ed0 [ 1210.295145] ? kasan_check_read+0x11/0x20 [ 1210.299394] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1210.303818] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1210.308477] ? __ww_mutex_add_waiter.part.15+0x120/0x120 [ 1210.313947] ? mutex_destroy+0x200/0x200 [ 1210.318080] ? do_raw_spin_lock+0xc1/0x200 [ 1210.322394] schedule_preempt_disabled+0x13/0x20 [ 1210.327233] __mutex_lock+0xbe7/0x1700 [ 1210.331242] ? __x64_sys_acct+0xba/0x1f0 [ 1210.335303] ? save_stack+0xa9/0xd0 [ 1210.339033] ? mutex_trylock+0x2b0/0x2b0 [ 1210.343107] ? kasan_kmalloc+0xc7/0xe0 [ 1210.347075] ? kmem_cache_alloc+0x12e/0x730 [ 1210.351409] ? getname_flags+0xd0/0x5a0 [ 1210.355369] ? getname+0x19/0x20 [ 1210.358830] ? __x64_sys_acct+0x76/0x1f0 [ 1210.362906] ? do_syscall_64+0x1b9/0x820 [ 1210.367084] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.372474] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1210.377871] ? __check_object_size+0xb1/0x782 [ 1210.382382] ? usercopy_warn+0x110/0x110 [ 1210.386444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1210.392092] ? check_preemption_disabled+0x48/0x200 [ 1210.397183] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 1210.402772] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1210.408278] ? strncpy_from_user+0x3be/0x510 [ 1210.412710] ? digsig_verify+0x1530/0x1530 [ 1210.417045] ? kmem_cache_alloc+0x33a/0x730 [ 1210.421393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1210.427038] ? getname_flags+0x26e/0x5a0 [ 1210.431128] mutex_lock_nested+0x16/0x20 [ 1210.435186] ? mutex_lock_nested+0x16/0x20 [ 1210.439507] __x64_sys_acct+0xba/0x1f0 [ 1210.443410] do_syscall_64+0x1b9/0x820 [ 1210.447351] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1210.452741] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1210.457802] ? trace_hardirqs_on_caller+0x310/0x310 [ 1210.462828] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1210.467943] ? recalc_sigpending_tsk+0x180/0x180 [ 1210.472808] ? kasan_check_write+0x14/0x20 [ 1210.477140] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1210.481994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.487246] RIP: 0033:0x457579 [ 1210.490548] Code: 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 6a 60 09 01 87 01 8b 05 62 60 09 01 83 f8 01 0f 85 8a 00 <00> 00 b8 01 00 00 00 88 05 9e 65 09 01 84 c0 74 72 b8 01 00 00 00 [ 1210.509700] RSP: 002b:00007f84650b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1210.517582] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 1210.524849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 1210.532400] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1210.539818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84650b86d4 [ 1210.547285] R13: 00000000004bd66a R14: 00000000004cbe48 R15: 00000000ffffffff [ 1210.554579] INFO: task syz-executor3:27937 blocked for more than 140 seconds. [ 1210.561951] Not tainted 4.19.0-rc6+ #265 [ 1210.566532] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1210.574571] syz-executor3 D25304 27937 29830 0x00000004 [ 1210.580389] Call Trace: [ 1210.582985] __schedule+0x86c/0x1ed0 [ 1210.586696] ? perf_trace_lock_acquire+0x15b/0x800 [ 1210.591716] ? debug_smp_processor_id+0x1c/0x20 [ 1210.596406] ? __sched_text_start+0x8/0x8 [ 1210.600627] ? perf_trace_lock+0x7a0/0x7a0 [ 1210.604878] ? perf_trace_lock+0x7a0/0x7a0 [ 1210.609225] ? graph_lock+0x170/0x170 [ 1210.613036] ? graph_lock+0x170/0x170 [ 1210.616951] ? find_held_lock+0x36/0x1c0 [ 1210.621040] schedule+0xfe/0x460 [ 1210.624454] ? __mutex_lock+0xbe2/0x1700 [ 1210.628628] ? __schedule+0x1ed0/0x1ed0 [ 1210.632616] ? kasan_check_read+0x11/0x20 [ 1210.636838] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1210.641322] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1210.645919] ? __ww_mutex_add_waiter.part.15+0x120/0x120 [ 1210.651486] ? mutex_destroy+0x200/0x200 [ 1210.655600] ? do_raw_spin_lock+0xc1/0x200 [ 1210.659907] schedule_preempt_disabled+0x13/0x20 [ 1210.664719] __mutex_lock+0xbe7/0x1700 [ 1210.668686] ? __x64_sys_acct+0xba/0x1f0 [ 1210.672821] ? save_stack+0xa9/0xd0 [ 1210.676509] ? mutex_trylock+0x2b0/0x2b0 [ 1210.680668] ? kasan_kmalloc+0xc7/0xe0 [ 1210.684579] ? kmem_cache_alloc+0x12e/0x730 [ 1210.688997] ? getname_flags+0xd0/0x5a0 [ 1210.692990] ? getname+0x19/0x20 [ 1210.696344] ? __x64_sys_acct+0x76/0x1f0 [ 1210.700471] ? do_syscall_64+0x1b9/0x820 [ 1210.704542] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.709999] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1210.715199] ? __check_object_size+0xb1/0x782 [ 1210.719878] ? usercopy_warn+0x110/0x110 [ 1210.723962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1210.729590] ? check_preemption_disabled+0x48/0x200 [ 1210.734620] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 1210.740225] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1210.745526] ? strncpy_from_user+0x3be/0x510 [ 1210.750043] ? digsig_verify+0x1530/0x1530 [ 1210.754299] ? kmem_cache_alloc+0x33a/0x730 [ 1210.758776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1210.764340] ? getname_flags+0x26e/0x5a0 [ 1210.768498] mutex_lock_nested+0x16/0x20 [ 1210.772568] ? mutex_lock_nested+0x16/0x20 [ 1210.776876] __x64_sys_acct+0xba/0x1f0 [ 1210.780782] do_syscall_64+0x1b9/0x820 [ 1210.784665] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1210.790122] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1210.795074] ? trace_hardirqs_on_caller+0x310/0x310 [ 1210.800192] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1210.805225] ? recalc_sigpending_tsk+0x180/0x180 [ 1210.810057] ? kasan_check_write+0x14/0x20 [ 1210.814343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1210.819300] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.824503] RIP: 0033:0x457579 [ 1210.827751] Code: 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 6a 60 09 01 87 01 8b 05 62 60 09 01 83 f8 01 0f 85 8a 00 <00> 00 b8 01 00 00 00 88 05 9e 65 09 01 84 c0 74 72 b8 01 00 00 00 [ 1210.846715] RSP: 002b:00007f8465096c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1210.854515] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 1210.861854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 1210.869254] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 1210.876542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84650976d4 [ 1210.883919] R13: 00000000004bd66a R14: 00000000004cbe48 R15: 00000000ffffffff [ 1210.891241] [ 1210.891241] Showing all locks held in the system: [ 1210.897760] 1 lock held by khungtaskd/982: [ 1210.902117] #0: 000000004d119bf7 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 1210.910849] 1 lock held by rsyslogd/5225: [ 1210.915172] #0: 0000000001f33d0e (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 1210.923286] 2 locks held by getty/5315: [ 1210.927333] #0: 00000000fbdbd7a0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1210.935639] #1: 00000000841bee71 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 1210.944754] 2 locks held by getty/5316: [ 1210.948785] #0: 0000000017e20e72 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1210.957153] #1: 00000000bf0d462b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 1210.966058] 2 locks held by getty/5317: [ 1210.970131] #0: 00000000c02d4474 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1210.978495] #1: 00000000757e2c77 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 1210.987442] 2 locks held by getty/5318: [ 1210.991463] #0: 00000000be7f79ae (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1210.999853] #1: 00000000719ae35c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 1211.008803] 2 locks held by getty/5319: [ 1211.012770] #0: 00000000f01cb05c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1211.021121] #1: 00000000064c231a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 1211.030202] 2 locks held by getty/5320: [ 1211.034171] #0: 00000000b6e4d0d9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1211.042560] #1: 00000000d24c1252 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 1211.051529] 2 locks held by getty/5321: [ 1211.055535] #0: 00000000f791d31c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1211.063910] #1: 000000008962a51c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 1211.072949] 1 lock held by syz-executor0/19870: [ 1211.077664] #0: 0000000014665002 (acct_on_mutex){+.+.}, at: __x64_sys_acct+0xba/0x1f0 [ 1211.085751] 1 lock held by syz-executor3/27893: [ 1211.090512] #0: 0000000014665002 (acct_on_mutex){+.+.}, at: __x64_sys_acct+0xba/0x1f0 [ 1211.098713] 1 lock held by syz-executor3/27937: [ 1211.103644] #0: 0000000014665002 (acct_on_mutex){+.+.}, at: __x64_sys_acct+0xba/0x1f0 [ 1211.111850] [ 1211.113531] ============================================= [ 1211.113531] [ 1211.120608] NMI backtrace for cpu 1 [ 1211.124255] CPU: 1 PID: 982 Comm: khungtaskd Not tainted 4.19.0-rc6+ #265 [ 1211.131694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.141046] Call Trace: [ 1211.143630] dump_stack+0x1c4/0x2b4 [ 1211.147302] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1211.152489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.158217] nmi_cpu_backtrace.cold.3+0x63/0xa2 [ 1211.163320] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 1211.168507] nmi_trigger_cpumask_backtrace+0x1b3/0x1ed [ 1211.173776] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1211.178958] watchdog+0xb3e/0x1050 [ 1211.182503] ? reset_hung_task_detector+0xd0/0xd0 [ 1211.187344] ? __kthread_parkme+0xce/0x1a0 [ 1211.191682] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1211.196794] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1211.201909] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1211.206480] ? trace_hardirqs_on+0xbd/0x310 [ 1211.210790] ? kasan_check_read+0x11/0x20 [ 1211.215082] ? __kthread_parkme+0xce/0x1a0 [ 1211.219317] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1211.224832] ? kasan_check_write+0x14/0x20 [ 1211.229080] ? do_raw_spin_lock+0xc1/0x200 [ 1211.233309] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1211.238400] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1211.243933] ? __kthread_parkme+0xfb/0x1a0 [ 1211.248171] kthread+0x35a/0x420 [ 1211.251536] ? reset_hung_task_detector+0xd0/0xd0 [ 1211.256440] ? kthread_bind+0x40/0x40 [ 1211.260242] ret_from_fork+0x3a/0x50 [ 1211.264196] Sending NMI from CPU 1 to CPUs 0: [ 1211.269565] NMI backtrace for cpu 0 [ 1211.269573] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.0-rc6+ #265 [ 1211.269581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.269587] RIP: 0010:smp_reschedule_interrupt+0xf2/0x650 [ 1211.269600] Code: ea 03 80 3c 02 00 0f 85 c0 04 00 00 49 8b 04 24 31 f6 bf b0 00 00 00 e8 1c 32 20 00 48 c7 c7 e0 fa 06 88 65 ff 05 ba 83 42 78 69 ed cc fb 65 c6 05 83 83 42 78 01 0f 1f 44 00 00 e8 47 5b 96 [ 1211.269606] RSP: 0018:ffff8801dae07ea0 EFLAGS: 00000016 [ 1211.269616] RAX: 0000000000000000 RBX: 1ffff1003b5c0fd4 RCX: 000000000000080b [ 1211.269622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8806fae0 [ 1211.269629] RBP: ffff8801dae07fe8 R08: 0000000000000000 R09: 0000000000000000 [ 1211.269636] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8900a320 [ 1211.269641] R13: ffff8801dae07fc0 R14: 0000000000000000 R15: 0000000000000000 [ 1211.269648] FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 1211.269654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1211.269660] CR2: ffffffffff600400 CR3: 00000001bdd0e000 CR4: 00000000001406f0 [ 1211.269664] Call Trace: [ 1211.269668] [ 1211.269673] ? smp_thermal_interrupt+0x850/0x850 [ 1211.269677] ? interrupt_entry+0xb5/0xf0 [ 1211.269682] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1211.269688] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1211.269693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1211.269698] ? trace_hardirqs_on_caller+0x310/0x310 [ 1211.269703] ? trace_hardirqs_on_caller+0x310/0x310 [ 1211.269708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.269721] ? check_preemption_disabled+0x48/0x200 [ 1211.269727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.269732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1211.269737] reschedule_interrupt+0xf/0x20 [ 1211.269740] [ 1211.269745] RIP: 0010:native_safe_halt+0x6/0x10 [ 1211.269759] Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 13 28 12 fa 48 8b 45 d8 e9 ca fe ff ff 48 89 df e8 02 28 12 fa eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 1211.269764] RSP: 0018:ffffffff89207bb8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02 [ 1211.269775] RAX: dffffc0000000000 RBX: 1ffffffff1240f7b RCX: 0000000000000000 [ 1211.269781] RDX: 1ffffffff1263e44 RSI: 0000000000000001 RDI: ffffffff8931f220 [ 1211.269788] RBP: ffffffff89207bb8 R08: ffffffff89276e40 R09: 0000000000000000 [ 1211.269794] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89207c78 [ 1211.269801] R13: ffffffff89f3c160 R14: 0000000000000000 R15: 0000000000000000 [ 1211.269805] default_idle+0xbf/0x490 [ 1211.269810] ? rcu_dynticks_eqs_enter+0x4c/0x70 [ 1211.269814] ? __sched_text_end+0x1/0x1 [ 1211.269819] ? rcu_idle_enter+0x329/0x4b0 [ 1211.269824] ? rcu_eqs_special_set+0x1b0/0x1b0 [ 1211.269829] ? tsc_verify_tsc_adjust+0x137/0x460 [ 1211.269834] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1211.269839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.269845] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.269850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.269854] arch_cpu_idle+0x10/0x20 [ 1211.269859] default_idle_call+0x6d/0x90 [ 1211.269863] do_idle+0x3db/0x5b0 [ 1211.269867] ? retint_kernel+0x2d/0x2d [ 1211.269872] ? arch_cpu_idle_exit+0x70/0x70 [ 1211.269877] cpu_startup_entry+0x10c/0x120 [ 1211.269881] ? cpu_in_idle+0x20/0x20 [ 1211.269885] rest_init+0xe2/0xe5 [ 1211.269889] start_kernel+0x8f4/0x92f [ 1211.269894] ? mem_encrypt_init+0xb/0xb [ 1211.269899] ? early_idt_handler_common+0x3b/0x60 [ 1211.269904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.269908] ? x86_family+0x3e/0x50 [ 1211.269914] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1211.269918] x86_64_start_reservations+0x29/0x2b [ 1211.269923] x86_64_start_kernel+0x76/0x79 [ 1211.269928] secondary_startup_64+0xa4/0xb0 [ 1211.269944] Kernel panic - not syncing: hung_task: blocked tasks [ 1211.635267] CPU: 1 PID: 982 Comm: khungtaskd Not tainted 4.19.0-rc6+ #265 [ 1211.642180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.651517] Call Trace: [ 1211.654093] dump_stack+0x1c4/0x2b4 [ 1211.657714] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1211.662890] ? printk_safe_log_store+0x2f0/0x2f0 [ 1211.668265] panic+0x238/0x4e7 [ 1211.671455] ? add_taint.cold.5+0x16/0x16 [ 1211.675879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.681413] ? nmi_trigger_cpumask_backtrace+0x173/0x1ed [ 1211.686858] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 1211.692564] watchdog+0xb4f/0x1050 [ 1211.696102] ? reset_hung_task_detector+0xd0/0xd0 [ 1211.700936] ? __kthread_parkme+0xce/0x1a0 [ 1211.705171] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1211.710268] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1211.715415] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1211.719997] ? trace_hardirqs_on+0xbd/0x310 [ 1211.724302] ? kasan_check_read+0x11/0x20 [ 1211.728438] ? __kthread_parkme+0xce/0x1a0 [ 1211.732667] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1211.738113] ? kasan_check_write+0x14/0x20 [ 1211.742389] ? do_raw_spin_lock+0xc1/0x200 [ 1211.746622] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1211.751720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1211.757255] ? __kthread_parkme+0xfb/0x1a0 [ 1211.761481] kthread+0x35a/0x420 [ 1211.764840] ? reset_hung_task_detector+0xd0/0xd0 [ 1211.769730] ? kthread_bind+0x40/0x40 [ 1211.773546] ret_from_fork+0x3a/0x50 [ 1211.778291] Kernel Offset: disabled [ 1211.781930] Rebooting in 86400 seconds..