[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.877924] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.720054] random: sshd: uninitialized urandom read (32 bytes read) [ 25.219323] random: sshd: uninitialized urandom read (32 bytes read) [ 25.870208] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. [ 31.349678] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/16 01:01:35 fuzzer started [ 32.427150] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/16 01:01:38 dialing manager at 10.128.0.26:36455 2018/08/16 01:01:41 syscalls: 1 2018/08/16 01:01:41 code coverage: enabled 2018/08/16 01:01:41 comparison tracing: enabled 2018/08/16 01:01:41 setuid sandbox: enabled 2018/08/16 01:01:41 namespace sandbox: enabled 2018/08/16 01:01:41 fault injection: enabled 2018/08/16 01:01:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/16 01:01:41 net packed injection: enabled 2018/08/16 01:01:41 net device setup: enabled [ 37.859541] random: crng init done 01:02:39 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 01:02:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080), &(0x7f00000000c0)="f6", 0x1, 0xfffffffffffffffd) keyctl$invalidate(0x15, r1) keyctl$invalidate(0x15, r1) 01:02:39 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@local}) 01:02:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xa6c, 0x0, 0xbcad}]}) 01:02:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f00000000c0)={"6c6f3a050800", {0x2, 0x0, @dev}}) 01:02:39 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x1000020, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 01:02:39 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4002, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") sendfile(r0, r0, &(0x7f0000000040), 0x400) 01:02:39 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x40}) read(r0, &(0x7f0000000080)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1e, 0x8031, 0xffffffffffffffff, 0x0) munlockall() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) [ 94.908590] IPVS: ftp: loaded support on port[0] = 21 [ 94.915638] IPVS: ftp: loaded support on port[0] = 21 [ 94.918191] IPVS: ftp: loaded support on port[0] = 21 [ 94.973780] IPVS: ftp: loaded support on port[0] = 21 [ 94.977033] IPVS: ftp: loaded support on port[0] = 21 [ 94.984049] IPVS: ftp: loaded support on port[0] = 21 [ 95.016656] IPVS: ftp: loaded support on port[0] = 21 [ 95.017451] IPVS: ftp: loaded support on port[0] = 21 [ 97.224320] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.230875] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.257224] device bridge_slave_0 entered promiscuous mode [ 97.286808] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.293328] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.310712] device bridge_slave_0 entered promiscuous mode [ 97.336229] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.342693] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.366421] device bridge_slave_0 entered promiscuous mode [ 97.376501] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.382953] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.390423] device bridge_slave_1 entered promiscuous mode [ 97.403042] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.409476] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.428400] device bridge_slave_0 entered promiscuous mode [ 97.440725] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.447197] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.461408] device bridge_slave_0 entered promiscuous mode [ 97.479745] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.486532] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.495672] device bridge_slave_0 entered promiscuous mode [ 97.504061] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.510595] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.519591] device bridge_slave_0 entered promiscuous mode [ 97.527364] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.533944] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.558328] device bridge_slave_1 entered promiscuous mode [ 97.568902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.579059] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.585501] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.600368] device bridge_slave_1 entered promiscuous mode [ 97.607156] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.613619] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.627990] device bridge_slave_0 entered promiscuous mode [ 97.640099] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.646649] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.654631] device bridge_slave_1 entered promiscuous mode [ 97.665150] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.671576] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.687363] device bridge_slave_1 entered promiscuous mode [ 97.696352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.704725] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.711130] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.732472] device bridge_slave_1 entered promiscuous mode [ 97.742371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.752196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.759700] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.766126] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.783241] device bridge_slave_1 entered promiscuous mode [ 97.805624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.820802] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.827209] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.852684] device bridge_slave_1 entered promiscuous mode [ 97.865850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.873557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.882368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.907702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.919498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.964946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 98.003270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 98.021386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 98.040756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 98.086535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 98.134922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 98.225420] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.302595] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.322874] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.344343] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.421515] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.439839] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.452129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.508004] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.530974] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.542120] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.597443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.614690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 98.621770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.640826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 98.666977] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.675094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.692846] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.707391] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.719417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 98.727815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.754106] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.776444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 98.783518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.797085] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.839517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 98.854813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 98.862822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.885225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.922946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 98.930650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.948380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 98.958541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 98.967852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.978970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.001961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 99.045591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 99.054833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 99.064862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.110728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.133618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.173953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 99.183196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.199233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 99.213521] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 99.248230] team0: Port device team_slave_0 added [ 99.277093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.312914] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 99.326591] team0: Port device team_slave_0 added [ 99.341209] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 99.350927] team0: Port device team_slave_0 added [ 99.399618] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 99.427783] team0: Port device team_slave_1 added [ 99.451507] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 99.472058] team0: Port device team_slave_0 added [ 99.501478] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 99.509179] team0: Port device team_slave_0 added [ 99.518343] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 99.538586] team0: Port device team_slave_1 added [ 99.551496] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 99.563602] team0: Port device team_slave_1 added [ 99.571944] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 99.586023] team0: Port device team_slave_0 added [ 99.607381] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 99.624090] team0: Port device team_slave_1 added [ 99.637125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 99.644481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.663669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.683102] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 99.692050] team0: Port device team_slave_0 added [ 99.700162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 99.709246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 99.720260] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 99.742903] team0: Port device team_slave_1 added [ 99.763181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.775002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.789851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.797925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.806078] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 99.813892] team0: Port device team_slave_1 added [ 99.821348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 99.830410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 99.837496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.845929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.862493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.879921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.895121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 99.904111] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 99.912269] team0: Port device team_slave_0 added [ 99.918101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 99.928653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 99.939611] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 99.949916] team0: Port device team_slave_1 added [ 99.963911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.982222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.999211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.007755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.015449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.023686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.033472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.041241] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.050971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.060032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.077339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.094121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.115978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.136251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.144154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.152147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.160621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.168620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.178627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 100.185939] team0: Port device team_slave_1 added [ 100.192464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.199412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.209583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.228361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.238098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.247768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.254946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.263440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.277871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.303189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.319803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.333727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.342252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.422725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.431014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.439199] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.446615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.454963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.464858] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.472836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.480005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.488230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.496194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.504122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.526002] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.538756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.546013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.562025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.577987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.590000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.609197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 100.619587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.628954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.637856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.648020] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.658539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.696460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.724788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.739918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.748002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.758252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.766100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.774058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.781864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.789899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.802499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.813572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.837460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 100.846468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.873142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.904809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.928460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.943677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.951732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.989517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 100.997170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.013216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.150560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 101.157976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.170021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.029824] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.036441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.043686] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.050134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.100723] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 102.234800] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.241272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.248017] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.254486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.265616] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 102.287055] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.293551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.300320] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.306760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.358389] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 102.370769] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.377225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.383946] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.390632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.408742] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 102.424903] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.431371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.438091] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.444537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.470108] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 102.484921] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.491377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.498112] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.504624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.528992] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 102.545608] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.552086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.558825] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.565255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.627115] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 102.722728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.734108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.759893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.772376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.779845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.788059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.796003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.830838] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.837342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.844052] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.850524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.899518] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 103.746896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.813518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.999137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.039802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.263647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.307349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.334148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.372102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.390622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.409968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.600445] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.673692] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.816185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.866014] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.874882] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.950431] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 108.957628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.971362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.990978] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.027444] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.126019] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.132844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.151934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.307695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.315070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.331978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.517602] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.526897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.536082] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.543366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.552682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.592925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.608995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.617046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.624876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.643633] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.652940] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.695513] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.722945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.735084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.771914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.786961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.804046] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.925564] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.034397] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.136565] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.175141] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.214609] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.311083] 8021q: adding VLAN 0 to HW filter on device team0 01:02:58 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@local}) 01:02:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4002, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") sendfile(r0, r0, &(0x7f0000000040), 0x400) [ 113.612212] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 01:02:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000002) read(r0, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_SIOCGIFINDEX(r0, 0x2403, &(0x7f0000000140)={'veth1_to_bond\x00'}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x2401, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 01:02:58 executing program 1: setrlimit(0x7, &(0x7f0000000000)) timerfd_create(0x0, 0x0) 01:02:58 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@local}) 01:02:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4002, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") sendfile(r0, r0, &(0x7f0000000040), 0x400) 01:02:58 executing program 1: setrlimit(0x7, &(0x7f0000000000)) timerfd_create(0x0, 0x0) 01:02:58 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@local}) 01:02:58 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 01:02:58 executing program 1: setrlimit(0x7, &(0x7f0000000000)) timerfd_create(0x0, 0x0) 01:02:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xf00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2000000000000001}}, 0x14}}, 0x0) close(r0) 01:02:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f00000000c0)={"6c6f3a050800", {0x2, 0x0, @dev}}) 01:02:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4002, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") sendfile(r0, r0, &(0x7f0000000040), 0x400) 01:02:58 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80304d65, &(0x7f0000000100)) 01:02:58 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xffffffcd}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000440)}, 0x10) [ 114.293946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 01:02:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xf00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2000000000000001}}, 0x14}}, 0x0) close(r0) 01:02:59 executing program 1: setrlimit(0x7, &(0x7f0000000000)) timerfd_create(0x0, 0x0) 01:02:59 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80304d65, &(0x7f0000000100)) 01:02:59 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./control/file1\x00') stat(&(0x7f00000003c0)='./control/file1\x00', &(0x7f0000000400)) close(r0) 01:02:59 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xffffffcd}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000440)}, 0x10) 01:02:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f00000000c0)={"6c6f3a050800", {0x2, 0x0, @dev}}) 01:02:59 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 01:02:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xf00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2000000000000001}}, 0x14}}, 0x0) close(r0) [ 114.605237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 01:02:59 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80304d65, &(0x7f0000000100)) 01:02:59 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) 01:02:59 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xffffffcd}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000440)}, 0x10) [ 114.651377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 01:02:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f00000000c0)={"6c6f3a050800", {0x2, 0x0, @dev}}) 01:02:59 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 01:02:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xf00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2000000000000001}}, 0x14}}, 0x0) close(r0) 01:02:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xf00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2000000000000001}}, 0x14}}, 0x0) close(r0) 01:02:59 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80304d65, &(0x7f0000000100)) [ 114.848955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 01:02:59 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xffffffcd}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000440)}, 0x10) 01:02:59 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_mount_image$nfs4(&(0x7f0000000180)='nf%4\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x84000, &(0x7f0000000700)='*&[\'\x00') 01:02:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f00000002c0)="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", 0x801, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001500)={r1, r1, r1}, &(0x7f0000001540)=""/255, 0xff, &(0x7f00000016c0)={&(0x7f0000001640)={'md5-generic\x00'}, &(0x7f0000001680)}) [ 114.928013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 01:02:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x60, 0x0, 0x0) 01:02:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xf00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2000000000000001}}, 0x14}}, 0x0) close(r0) [ 115.042365] MPI: mpi too large (16392 bits) 01:02:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xf00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2000000000000001}}, 0x14}}, 0x0) close(r0) 01:02:59 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_mount_image$nfs4(&(0x7f0000000180)='nf%4\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x84000, &(0x7f0000000700)='*&[\'\x00') [ 115.122630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 01:02:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f00000002c0)="132539c340b6a572d058b96ef11676bb1f592f201b8b019e019268e2313ae7de2b5ad7b9cce10f92f75494d9c04eed92bed87ba55473035cd33cf2739926ba038c4cfa82187ee01e0b9b8ee21160673a4ac01cf327abdf90d26752464254e71409812381569b6307b5a0e23cab89e41175dfe406cf2557b651bf364394f637c747184df057dd81159c7693328d382189dd2575a147b6c649f2b05945962d5fa0a39866c1aea57fd702ef1d6e5c5098cbe3ea880762fb1fd7ddfe77bfb869a6983697df0d9fa40e055b556198d24f706304dafc0b56bb8543c716cb9e87bb1ce27a245a4fd2d52273def8b4d8554eea5758111017bee9b52192e100073c72343235dc0df455afc87ef8ebd7a68865b936d24055449c446285143796814c2e6a11ea3dd76a3155cab8beeafddedd528b5200723ff68dfd7684a068d77e72ccf76352f2ba0802f4889391c0e91d2e77f75d98235bbefcfdbff18f94b9c25dd7285ab1466ab03714aa487526575c0e33191c72257dceefe4d1e777ad34f586827cbc5da023aae89dd8d191a0de99c1653839ae1d032cf938d5c2c1f475fb3db080764d92528d1ae6036a20d79da54a3ea82df0009b7933f28f0acd74560d75dde4542724736227f43d6ea4a1d8f1ab8916cf70c4a893ce7519466b16f3ed38adf13c32190a42b1c53b4d28c0b1a4bc4518691e82dc38e6dd76cffaa123d3ec74f65ee294b3f585b3ab8f62439c7698b32cdce15385552494fd71b082a7ae395ec57872108de0f620a4ab1958a1025119946b6d6da1484b38db5f4731e49d441927d79e8aeeb25ec04db81d4e121121750baaf309daa69949147478885c01e534ea0b82d2e69c74a2708f4a4802aad9d39348b4e167863b38b3acdade098996f61245764ade4ab0ff76c83b0c86f54473143b94d845781eecfaab0d831378bf7c69c586a99f1cabda57e15d50d7875ca4ebca3769867938fa77d6d1731edffa3252b1ae1482f11596f944abafb1029659ee5a340b2a43887eab8f2edae46ce8e3505ee7beb5ff70508ab6bdfe4981265937ce62a7ba52f8770f2dfd820647d21be6bc0284438bdd65b578bf170f7f23853fd9496a9b16f0a48b898eda0354df3e4b6373c16024f9339a58c7111a7afdaac1ca536f1be49c7b646cc2e4f628bd6efb0e90c7bc741e6dacb957fb0a3aec2f7080e8afa2ac9b14e1e09a1e564e8355a8408701fd305561c80c60502fe4679f6abc4bd81783e1d72785c7e0c94ed944e47d868b4b99db06f07296d7bde6db224912b7b6406c4826831631138af9c13bd7662e4ee0486ca67f8b6cf7a142f0b6d902e9e1679c196acce7751712345e84ff9c11a21abd8ee342edfc28cf2c13134ec4d62ce371d5e67e70f2e0a5388413154cfa58b613e0614f3c300c73a6d2211dfe7bebebae3846124caa32fa8631a6d08460b434d539fce130059a2750867a49d6bd9dfe777d6d7082ed1624845c07da67febdcdc20b2e13302b66ccaeddf50ebc271b542f9a1379056fbbfe5228eee6f3e35eb1cdaad7c98d2c7389b36dd5d719916d00a352953da65b7acef7afe28d52149ca4276047a344233694ee02b03289940c5622c452d3788f08fe69422d18ddcdd9b80ea4858340dd68e21b676daf51eb27d496d2b76538a47b75010003f9e79da6699e2d96dfa0654324ab6ecde6ca7009f47a92801af714c8f98777dac25cd5cf7edc3e8afa162f77c2ec08f2cdb47e782856f6428f1ccc06b166232558c50fb57793704baeba7c78d6e9ab994fa92540d0d4ffda0d5dc0448432233ce6a3a71a0797889028709c82ba572b1c7107eee62e6dcfb0d2b2a3237a2182d82cf8eb3f8e130e77b21c329f18bade4b620f7228005641b6bd410a10d3b5922e53f57bdc1bc58025c93604b93c25ab5fbd489b9eb0aa44b905c60f33bb5bcf5492da9dd5f8de09070efcbd6bf9f27defbcd7bdb0b294cbecd1311f268b742d4e13a54bf53150555eab9a8aa982fc1304f76b4ce9be558a08f14524d4919f89637c4019a89cf2047e71bc34aeb561307084e1973f5205b20e7679bebb91a701160d6dcc6e394adc5b8d7b4744ac6027e2970e34ec5360b3650fc2f6f9c69b30ec70533fc912045ce7b426f489ed8d886c38107c4f22bfbaf462dfcd0771982483ff7df806893d7b7e667954628774e9fd3ecf850fb6210255779e87afb619dc2bb983a909a4bc50119ecfdb73508d35d19d0224cfb164f98ce7a4fdd7d79dcef3985c67293be1b791f3ee4d7eb7a5d6af2ccfe0668b530b92717369ff406ecc7ce41dfdd073eaa626e90b60368341d5182b4f779b4c764b798afb12e1f056fa5756bb948a72bec3df1cfd98ecd5686a3b0a3bc19f25cb63ce641b5589fcabebfaf7dacafeb6682d53961eb9ae87ff75617c0dad194bee884124cd3702a66444bec3997e3b66b34c565399af53aa935833a0a27a2290fd9dafd41c8346adef8d3fc064e8edfaf7e536a6ed2ad9152e08df3e5b7a145fe4bbc11f59a1698bed908154d5b6e5ee4f559994c823f2b2df650b4d6f86ed801bbe96767b424deafe4fac59139f03ebf4abfc6ba715499bbf0ba9df37fbd25f9affe02e6ad58dd973b28e97acb89c6222b0a847641dd3c182361d9dbe9c38fe3abbc4eeb332d2b1dae1bc53d4e9e7fd14e334020ef623566b8b3d83d3042b3d439a79d98d2eda58061a0210168f06af5bedfd96bc9b2b9ccea25c66c9e395e0b4748120270d6ba16897be318517dc65a5f02c0569d491aea80ba84393787ba8fb213219a55175095753073b1ae2a6f754f5963ee13831f523530196814931d032a01e8873c03bc8d7e16bd9eb97ac73e55c49495ec60542c1f384ab0c4ea6428500d77ccbc1bc799e91851f5803", 0x801, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001500)={r1, r1, r1}, &(0x7f0000001540)=""/255, 0xff, &(0x7f00000016c0)={&(0x7f0000001640)={'md5-generic\x00'}, &(0x7f0000001680)}) 01:02:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 115.262671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.300484] MPI: mpi too large (16392 bits) 01:03:00 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) 01:03:00 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f00009b1ffc)) 01:03:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x60, 0x0, 0x0) 01:03:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x89fb, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names="00907000"}) 01:03:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 01:03:00 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_mount_image$nfs4(&(0x7f0000000180)='nf%4\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x84000, &(0x7f0000000700)='*&[\'\x00') 01:03:00 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) 01:03:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f00000002c0)="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", 0x801, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001500)={r1, r1, r1}, &(0x7f0000001540)=""/255, 0xff, &(0x7f00000016c0)={&(0x7f0000001640)={'md5-generic\x00'}, &(0x7f0000001680)}) [ 115.576018] sched: DL replenish lagged too much [ 115.644125] MPI: mpi too large (16392 bits) 01:03:00 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f00009b1ffc)) 01:03:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x60, 0x0, 0x0) 01:03:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f00000002c0)="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", 0x801, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001500)={r1, r1, r1}, &(0x7f0000001540)=""/255, 0xff, &(0x7f00000016c0)={&(0x7f0000001640)={'md5-generic\x00'}, &(0x7f0000001680)}) 01:03:00 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_mount_image$nfs4(&(0x7f0000000180)='nf%4\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x84000, &(0x7f0000000700)='*&[\'\x00') 01:03:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x89fb, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names="00907000"}) 01:03:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 115.848543] MPI: mpi too large (16392 bits) 01:03:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x60, 0x0, 0x0) 01:03:00 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f00009b1ffc)) 01:03:00 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) 01:03:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x4, &(0x7f0000000180)=""/244, &(0x7f0000000140)=0xf4) 01:03:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 01:03:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 01:03:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000002c0), 0x1000) 01:03:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x89fb, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names="00907000"}) 01:03:00 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f00009b1ffc)) 01:03:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000380)="fc0000004a000702ab092500090007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4fa9a2bdafa22995cf41f0d48f6f2000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 01:03:01 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) read(r0, &(0x7f0000000140)=""/169, 0xa9) shmget(0xffffffffffffffff, 0x2000, 0x400000, &(0x7f0000ffe000/0x2000)=nil) 01:03:01 executing program 3: capset(&(0x7f0000000080)={0x19980330}, &(0x7f00009b3000)) socket(0x1a, 0x0, 0x0) 01:03:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000002c0), 0x1000) 01:03:01 executing program 7: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a00000100000000007835dbce0188ffff5f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000240)) 01:03:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x4, &(0x7f0000000180)=""/244, &(0x7f0000000140)=0xf4) 01:03:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x89fb, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names="00907000"}) 01:03:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) [ 116.696020] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.703070] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.709888] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.716687] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.723537] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.730414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.737381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.744185] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.751114] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.756885] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) [ 116.757938] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.773880] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.790789] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop7 01:03:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x4, &(0x7f0000000180)=""/244, &(0x7f0000000140)=0xf4) [ 117.000940] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 117.028109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.035428] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.042623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.049437] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.056255] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.064088] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.072151] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.079062] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.085929] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.093308] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.100113] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.109061] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 01:03:01 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) 01:03:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000002c0), 0x1000) 01:03:01 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0xd9f0, &(0x7f0000ffb000/0x2000)=nil, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) 01:03:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYPTR], 0x8) recvmsg(r1, &(0x7f00000024c0)={&(0x7f00000000c0)=@in6, 0x80, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) 01:03:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 01:03:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x4, &(0x7f0000000180)=""/244, &(0x7f0000000140)=0xf4) 01:03:01 executing program 7: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a00000100000000007835dbce0188ffff5f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000240)) 01:03:01 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) read(r0, &(0x7f0000000140)=""/169, 0xa9) shmget(0xffffffffffffffff, 0x2000, 0x400000, &(0x7f0000ffe000/0x2000)=nil) [ 117.416254] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.423221] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.430086] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.436906] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.443761] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.450574] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.457401] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 01:03:01 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0xd9f0, &(0x7f0000ffb000/0x2000)=nil, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) [ 117.464254] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.471401] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.478228] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.485196] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 01:03:02 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0xd9f0, &(0x7f0000ffb000/0x2000)=nil, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) 01:03:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYPTR], 0x8) recvmsg(r1, &(0x7f00000024c0)={&(0x7f00000000c0)=@in6, 0x80, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) 01:03:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000002c0), 0x1000) 01:03:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 01:03:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYPTR], 0x8) recvmsg(r1, &(0x7f00000024c0)={&(0x7f00000000c0)=@in6, 0x80, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 117.673805] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 01:03:02 executing program 6: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) read(r0, &(0x7f0000000140)=""/169, 0xa9) shmget(0xffffffffffffffff, 0x2000, 0x400000, &(0x7f0000ffe000/0x2000)=nil) 01:03:02 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) read(r0, &(0x7f0000000140)=""/169, 0xa9) shmget(0xffffffffffffffff, 0x2000, 0x400000, &(0x7f0000ffe000/0x2000)=nil) [ 117.882575] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.889458] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.896329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.903338] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.910148] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.917020] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.924480] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.931390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.938199] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.945013] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.951810] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.957242] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 117.961394] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 117.965387] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 117.981046] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 117.987931] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 117.995014] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.001860] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.009770] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.016639] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.023628] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.030494] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.037808] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.069024] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 01:03:02 executing program 7: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a00000100000000007835dbce0188ffff5f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000240)) 01:03:02 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000400)}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) close(r1) 01:03:02 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0xd9f0, &(0x7f0000ffb000/0x2000)=nil, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) 01:03:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYPTR], 0x8) recvmsg(r1, &(0x7f00000024c0)={&(0x7f00000000c0)=@in6, 0x80, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) 01:03:02 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0xd9f0, &(0x7f0000ffb000/0x2000)=nil, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) 01:03:02 executing program 6: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) read(r0, &(0x7f0000000140)=""/169, 0xa9) shmget(0xffffffffffffffff, 0x2000, 0x400000, &(0x7f0000ffe000/0x2000)=nil) 01:03:02 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) read(r0, &(0x7f0000000140)=""/169, 0xa9) shmget(0xffffffffffffffff, 0x2000, 0x400000, &(0x7f0000ffe000/0x2000)=nil) 01:03:02 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0xe) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='a'], &(0x7f0000000280)='/dev/sequencer2\x00', 0x10, 0x0) dup2(r1, r2) [ 118.342468] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.342726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 118.349368] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.356218] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 118.364410] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.371456] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 118.378844] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.378864] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.378882] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.378901] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.378919] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.378937] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.378955] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.378973] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.400475] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 118.449328] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 118.456155] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 118.462980] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 118.469907] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 118.476779] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 118.483637] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 01:03:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000), &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) [ 118.490491] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 01:03:03 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000400)}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) close(r1) [ 118.547548] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 [ 118.568223] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.585809] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz1 01:03:03 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0xd9f0, &(0x7f0000ffb000/0x2000)=nil, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) 01:03:03 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0xd9f0, &(0x7f0000ffb000/0x2000)=nil, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) 01:03:03 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000400)}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) close(r1) 01:03:03 executing program 7: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a00000100000000007835dbce0188ffff5f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000240)) 01:03:03 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0xe) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='a'], &(0x7f0000000280)='/dev/sequencer2\x00', 0x10, 0x0) dup2(r1, r2) 01:03:03 executing program 6: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) read(r0, &(0x7f0000000140)=""/169, 0xa9) shmget(0xffffffffffffffff, 0x2000, 0x400000, &(0x7f0000ffe000/0x2000)=nil) 01:03:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000), &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 01:03:03 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000400)}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) close(r1) 01:03:03 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000400)}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) close(r1) 01:03:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000), &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 01:03:03 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0xe) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='a'], &(0x7f0000000280)='/dev/sequencer2\x00', 0x10, 0x0) dup2(r1, r2) 01:03:03 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000400)}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) close(r1) 01:03:03 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000), &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 01:03:03 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x67, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x58, [], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 01:03:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x8}}, 0x32a}}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/215, 0xd7}], 0x1) 01:03:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000), &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) [ 119.225367] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:03:03 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x67, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x58, [], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 01:03:03 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000400)}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) close(r1) 01:03:03 executing program 0: unshare(0x2000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x34, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x1, [@typed={0xc, 0x0, @fd}]}]}]}, 0x34}}, 0x0) 01:03:03 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000), &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 01:03:03 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0xe) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='a'], &(0x7f0000000280)='/dev/sequencer2\x00', 0x10, 0x0) dup2(r1, r2) [ 119.423558] netlink: 'syz-executor0': attribute type 1 has an invalid length. 01:03:04 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000), &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 01:03:04 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x67, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x58, [], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 01:03:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x109000, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x21f}, 0x10) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendfile(r2, r2, &(0x7f0000000380), 0x1000000020000) recvfrom(r1, &(0x7f00000003c0)=""/94, 0x5e, 0x20, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) write$FUSE_POLL(r2, &(0x7f0000000180)={0x18}, 0x18) 01:03:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000140)="4098c80700315f85715070") syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000029000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="0f323ef2f6ef0fae58b7baf80c66b83ed7318466efbafc0ced0f20d86635080000000f22d80f35a5e367baf80c66b8e098c78d66efbafc0c66ed3e3e660f380015", 0x41}], 0x1, 0x0, &(0x7f00000002c0), 0x374) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) r1 = dup2(r0, r0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_SNDBIT(r1, 0x4004556e, 0x0) 01:03:04 executing program 0: unshare(0x2000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x34, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x1, [@typed={0xc, 0x0, @fd}]}]}]}, 0x34}}, 0x0) 01:03:04 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 01:03:04 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x41, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 119.759926] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 119.783832] input:  as /devices/virtual/input/input5 01:03:04 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x67, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x58, [], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 01:03:04 executing program 0: unshare(0x2000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x34, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x1, [@typed={0xc, 0x0, @fd}]}]}]}, 0x34}}, 0x0) 01:03:04 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x100000001) 01:03:04 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 01:03:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) r1 = dup2(r0, r0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_SNDBIT(r1, 0x4004556e, 0x0) 01:03:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") getrlimit(0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0x800ffffffff, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 01:03:04 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x41, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 01:03:04 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000002c0)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x0, 0x2000000000010001}) [ 120.117165] netlink: 'syz-executor0': attribute type 1 has an invalid length. 01:03:04 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x100000001) 01:03:04 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 120.273591] input:  as /devices/virtual/input/input7 01:03:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) r1 = dup2(r0, r0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_SNDBIT(r1, 0x4004556e, 0x0) 01:03:05 executing program 0: unshare(0x2000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x34, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x1, [@typed={0xc, 0x0, @fd}]}]}]}, 0x34}}, 0x0) 01:03:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") getrlimit(0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0x800ffffffff, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 01:03:05 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x100000001) 01:03:05 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 01:03:05 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x41, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 01:03:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x109000, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x21f}, 0x10) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendfile(r2, r2, &(0x7f0000000380), 0x1000000020000) recvfrom(r1, &(0x7f00000003c0)=""/94, 0x5e, 0x20, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) write$FUSE_POLL(r2, &(0x7f0000000180)={0x18}, 0x18) [ 120.690141] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 120.703169] input:  as /devices/virtual/input/input8 01:03:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") getrlimit(0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0x800ffffffff, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 01:03:05 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x100000001) 01:03:05 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x100000001) 01:03:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000800000002c00000000000088", 0x65, 0x400}], 0x8000, &(0x7f0000000000)) 01:03:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) r1 = dup2(r0, r0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_SNDBIT(r1, 0x4004556e, 0x0) 01:03:05 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x41, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 120.963029] input:  as /devices/virtual/input/input9 [ 120.974657] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 120.984152] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 121.125135] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 121.136205] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 01:03:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000002c0)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x0, 0x2000000000010001}) 01:03:05 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@rand_addr, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0/file0/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other='allow_other'}]}}) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) lsetxattr(&(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000001c0)=@random={'user.', '\x00'}, &(0x7f0000000240)='user_id', 0x7, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f0000000040)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045c694ff760000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 01:03:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x13, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x48) 01:03:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") getrlimit(0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0x800ffffffff, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 01:03:05 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x100000001) 01:03:05 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') ioctl$VT_RELDISP(r0, 0xb701) 01:03:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000800000002c00000000000088", 0x65, 0x400}], 0x8000, &(0x7f0000000000)) 01:03:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x5}]}, 0x28}}, 0x0) 01:03:05 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x100000001) [ 121.482065] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 121.492164] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 01:03:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x5}]}, 0x28}}, 0x0) 01:03:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x13, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x48) 01:03:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x109000, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x21f}, 0x10) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendfile(r2, r2, &(0x7f0000000380), 0x1000000020000) recvfrom(r1, &(0x7f00000003c0)=""/94, 0x5e, 0x20, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) write$FUSE_POLL(r2, &(0x7f0000000180)={0x18}, 0x18) 01:03:06 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') ioctl$VT_RELDISP(r0, 0xb701) 01:03:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000800000002c00000000000088", 0x65, 0x400}], 0x8000, &(0x7f0000000000)) 01:03:06 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) close(r1) 01:03:06 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@rand_addr, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0/file0/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other='allow_other'}]}}) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) lsetxattr(&(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000001c0)=@random={'user.', '\x00'}, &(0x7f0000000240)='user_id', 0x7, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f0000000040)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045c694ff760000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 01:03:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x13, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x48) [ 121.788719] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 121.797840] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 122.127994] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000086) [ 122.136005] FAT-fs (loop4): Filesystem has been set read-only [ 122.143027] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000086) 01:03:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000002c0)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x0, 0x2000000000010001}) 01:03:06 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) close(r1) 01:03:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x5}]}, 0x28}}, 0x0) 01:03:06 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') ioctl$VT_RELDISP(r0, 0xb701) 01:03:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000800000002c00000000000088", 0x65, 0x400}], 0x8000, &(0x7f0000000000)) 01:03:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x13, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x48) 01:03:06 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@rand_addr, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0/file0/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other='allow_other'}]}}) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) lsetxattr(&(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000001c0)=@random={'user.', '\x00'}, &(0x7f0000000240)='user_id', 0x7, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f0000000040)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045c694ff760000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) [ 122.256832] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 122.266005] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 01:03:06 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) close(r1) 01:03:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0) fallocate(r1, 0x0, 0x0, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8001}) lseek(r1, 0x0, 0x4) [ 122.309414] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 122.331484] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) 01:03:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x109000, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x21f}, 0x10) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendfile(r2, r2, &(0x7f0000000380), 0x1000000020000) recvfrom(r1, &(0x7f00000003c0)=""/94, 0x5e, 0x20, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) write$FUSE_POLL(r2, &(0x7f0000000180)={0x18}, 0x18) 01:03:07 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x5}]}, 0x28}}, 0x0) 01:03:07 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') ioctl$VT_RELDISP(r0, 0xb701) 01:03:07 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@rand_addr, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0/file0/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other='allow_other'}]}}) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) lsetxattr(&(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000001c0)=@random={'user.', '\x00'}, &(0x7f0000000240)='user_id', 0x7, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f0000000040)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045c694ff760000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 01:03:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0) fallocate(r1, 0x0, 0x0, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8001}) lseek(r1, 0x0, 0x4) 01:03:07 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) close(r1) 01:03:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0) fallocate(r1, 0x0, 0x0, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8001}) lseek(r1, 0x0, 0x4) [ 122.950864] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000086) [ 122.958340] FAT-fs (loop4): Filesystem has been set read-only [ 122.964525] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000086) [ 122.972660] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000086) [ 122.980947] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000086) 01:03:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000002c0)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x0, 0x2000000000010001}) 01:03:07 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) getsockname$inet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000080)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x142, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000680)={[{0x0, 0x0, 0x0, 0x7ff}, {0x2224000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x100, 0x0, 0x0, 0x3, 0x1e, 0x0, 0x0, 0x0, 0xac2, 0xf15, 0x6, 0x80000001}]}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000700)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1e6}], 0x1) close(r0) 01:03:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0) fallocate(r1, 0x0, 0x0, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8001}) lseek(r1, 0x0, 0x4) 01:03:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0) fallocate(r1, 0x0, 0x0, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8001}) lseek(r1, 0x0, 0x4) 01:03:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x600}) 01:03:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x26a, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 01:03:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xfffffefffffffff1, &(0x7f0000000040)) [ 123.033169] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 123.041279] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000202) 01:03:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f104"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0) fallocate(r1, 0x0, 0x0, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8001}) lseek(r1, 0x0, 0x4) 01:03:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xfffffefffffffff1, &(0x7f0000000040)) 01:03:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x26a, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 01:03:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0) fallocate(r1, 0x0, 0x0, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8001}) lseek(r1, 0x0, 0x4) 01:03:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x600}) 01:03:07 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) getsockname$inet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000080)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x142, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000680)={[{0x0, 0x0, 0x0, 0x7ff}, {0x2224000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x100, 0x0, 0x0, 0x3, 0x1e, 0x0, 0x0, 0x0, 0xac2, 0xf15, 0x6, 0x80000001}]}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000700)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1e6}], 0x1) close(r0) 01:03:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x26a, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 01:03:07 executing program 5: r0 = socket(0xa, 0x20000000001, 0x0) listen(r0, 0x0) sendmsg$rds(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001b00)}, 0x20000004) 01:03:08 executing program 5: r0 = socket(0xa, 0x20000000001, 0x0) listen(r0, 0x0) sendmsg$rds(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001b00)}, 0x20000004) 01:03:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xfffffefffffffff1, &(0x7f0000000040)) 01:03:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4) 01:03:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f104"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:08 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x600}) 01:03:08 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) getsockname$inet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000080)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x142, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000680)={[{0x0, 0x0, 0x0, 0x7ff}, {0x2224000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x100, 0x0, 0x0, 0x3, 0x1e, 0x0, 0x0, 0x0, 0xac2, 0xf15, 0x6, 0x80000001}]}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000700)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1e6}], 0x1) close(r0) 01:03:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x26a, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 01:03:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x9}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f0000000100)={0x77359400}, 0x8) clone(0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000180)) 01:03:08 executing program 5: r0 = socket(0xa, 0x20000000001, 0x0) listen(r0, 0x0) sendmsg$rds(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001b00)}, 0x20000004) 01:03:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xfffffefffffffff1, &(0x7f0000000040)) 01:03:08 executing program 3: r0 = socket(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 01:03:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4) 01:03:08 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x600}) 01:03:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f104"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:08 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) getsockname$inet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000080)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x142, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000680)={[{0x0, 0x0, 0x0, 0x7ff}, {0x2224000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x100, 0x0, 0x0, 0x3, 0x1e, 0x0, 0x0, 0x0, 0xac2, 0xf15, 0x6, 0x80000001}]}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000700)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1e6}], 0x1) close(r0) 01:03:08 executing program 5: r0 = socket(0xa, 0x20000000001, 0x0) listen(r0, 0x0) sendmsg$rds(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001b00)}, 0x20000004) 01:03:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4) 01:03:08 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 01:03:08 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)="2e2f66696c6530000000000000000005b400", 0x0, 0x0, &(0x7f0000001280), 0x0, &(0x7f0000001300)={[{@grpquota='grpquota'}, {@jdev={'jdev', 0x3d, "2e2f66696c6530000000000000000005b4"}}]}) 01:03:08 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = accept4(r0, 0x0, &(0x7f0000001580), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) 01:03:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x857}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x68}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 01:03:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000630114000000000035000000000000009500000000000000"], &(0x7f00000002c0)="4750510064b83ac17203ce473b85bcc4fd8b53c5cb09ebf900aaa966a6acd9a580c175599e1953aca6e6911b8a2d68da9280125247592cf30b26047800e27f8729be99437a2b871ae7696cd9178d5e5e411475b7dd9221ef86dafa022fae1c4cb4216db9b33211c0eee2f66c3c329cc7b927469af4da7a69757594053a064b39610593de6de0f711d288", 0x1, 0xfb, &(0x7f0000000140)=""/251}, 0x48) 01:03:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f104"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 124.528235] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 124.611084] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 01:03:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x9}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f0000000100)={0x77359400}, 0x8) clone(0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000180)) 01:03:09 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 01:03:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x857}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x68}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 01:03:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4) 01:03:09 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = accept4(r0, 0x0, &(0x7f0000001580), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) 01:03:09 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)="2e2f66696c6530000000000000000005b400", 0x0, 0x0, &(0x7f0000001280), 0x0, &(0x7f0000001300)={[{@grpquota='grpquota'}, {@jdev={'jdev', 0x3d, "2e2f66696c6530000000000000000005b4"}}]}) 01:03:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000630114000000000035000000000000009500000000000000"], &(0x7f00000002c0)="4750510064b83ac17203ce473b85bcc4fd8b53c5cb09ebf900aaa966a6acd9a580c175599e1953aca6e6911b8a2d68da9280125247592cf30b26047800e27f8729be99437a2b871ae7696cd9178d5e5e411475b7dd9221ef86dafa022fae1c4cb4216db9b33211c0eee2f66c3c329cc7b927469af4da7a69757594053a064b39610593de6de0f711d288", 0x1, 0xfb, &(0x7f0000000140)=""/251}, 0x48) 01:03:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = accept4(r0, 0x0, &(0x7f0000001580), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) 01:03:09 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) [ 124.986533] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 01:03:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 01:03:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x857}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x68}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 01:03:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = accept4(r0, 0x0, &(0x7f0000001580), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) 01:03:09 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = accept4(r0, 0x0, &(0x7f0000001580), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) 01:03:09 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)="2e2f66696c6530000000000000000005b400", 0x0, 0x0, &(0x7f0000001280), 0x0, &(0x7f0000001300)={[{@grpquota='grpquota'}, {@jdev={'jdev', 0x3d, "2e2f66696c6530000000000000000005b4"}}]}) 01:03:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000630114000000000035000000000000009500000000000000"], &(0x7f00000002c0)="4750510064b83ac17203ce473b85bcc4fd8b53c5cb09ebf900aaa966a6acd9a580c175599e1953aca6e6911b8a2d68da9280125247592cf30b26047800e27f8729be99437a2b871ae7696cd9178d5e5e411475b7dd9221ef86dafa022fae1c4cb4216db9b33211c0eee2f66c3c329cc7b927469af4da7a69757594053a064b39610593de6de0f711d288", 0x1, 0xfb, &(0x7f0000000140)=""/251}, 0x48) 01:03:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x857}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x68}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 125.305126] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 01:03:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x9}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f0000000100)={0x77359400}, 0x8) clone(0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000180)) 01:03:10 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 01:03:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 01:03:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000630114000000000035000000000000009500000000000000"], &(0x7f00000002c0)="4750510064b83ac17203ce473b85bcc4fd8b53c5cb09ebf900aaa966a6acd9a580c175599e1953aca6e6911b8a2d68da9280125247592cf30b26047800e27f8729be99437a2b871ae7696cd9178d5e5e411475b7dd9221ef86dafa022fae1c4cb4216db9b33211c0eee2f66c3c329cc7b927469af4da7a69757594053a064b39610593de6de0f711d288", 0x1, 0xfb, &(0x7f0000000140)=""/251}, 0x48) 01:03:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = accept4(r0, 0x0, &(0x7f0000001580), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) 01:03:10 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)="2e2f66696c6530000000000000000005b400", 0x0, 0x0, &(0x7f0000001280), 0x0, &(0x7f0000001300)={[{@grpquota='grpquota'}, {@jdev={'jdev', 0x3d, "2e2f66696c6530000000000000000005b4"}}]}) 01:03:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = accept4(r0, 0x0, &(0x7f0000001580), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) 01:03:10 executing program 1: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="b5000000070100ac0065746830e87ddc08962917937426f980b73b7573656df0e81475151e81b825e976ff48f6ea6e2ff178a259fdbc2912411deb78a48a542a591d594e7025f0e5504ffa591de6a5b0f2a28df294edae6c8d8b89e2541a31ac12c41261e9d22c0b2392d998f53e5ace19b58094f78c72298fd7712cd917fd2c7afab2a3538088b07ade479da234c1999ee8794bf8f0318a22e3f5b91d"], 0x9d) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) [ 125.881068] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 01:03:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000ffc), &(0x7f0000013000)=0xfffffffffffffd7a) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0xffffffffffffffff, 0x80000000000032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) close(r0) 01:03:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000000000700"], 0xe}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/zero\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 01:03:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 01:03:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) [ 125.996513] 9pnet: p9_errstr2errno: server reported unknown error eth0è}Ü–)“t&ù€·;usemðèu¸%évÿHöên/ñx¢Yý¼)Aëx¤ŠT*YYNp%ðåPOúY楰ò¢ò”í®l‹‰âT1¬ÄaéÒ, #’Ù˜õ>Zε€”÷Œr)×q,Ùý,zú²£S€ˆ°zÞG¢4Á™žèyKøð1Š"ãõ¹ 01:03:10 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) 01:03:10 executing program 1: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="b5000000070100ac0065746830e87ddc08962917937426f980b73b7573656df0e81475151e81b825e976ff48f6ea6e2ff178a259fdbc2912411deb78a48a542a591d594e7025f0e5504ffa591de6a5b0f2a28df294edae6c8d8b89e2541a31ac12c41261e9d22c0b2392d998f53e5ace19b58094f78c72298fd7712cd917fd2c7afab2a3538088b07ade479da234c1999ee8794bf8f0318a22e3f5b91d"], 0x9d) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) 01:03:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000ffc), &(0x7f0000013000)=0xfffffffffffffd7a) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0xffffffffffffffff, 0x80000000000032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) close(r0) 01:03:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) [ 126.349617] 9pnet: p9_errstr2errno: server reported unknown error eth0è}Ü–)“t&ù€·;usemðèu¸%évÿHöên/ñx¢Yý¼)Aëx¤ŠT*YYNp%ðåPOúY楰ò¢ò”í®l‹‰âT1¬ÄaéÒ, #’Ù˜õ>Zε€”÷Œr)×q,Ùý,zú²£S€ˆ°zÞG¢4Á™žèyKøð1Š"ãõ¹ 01:03:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000000000700"], 0xe}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/zero\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 01:03:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x9}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f0000000100)={0x77359400}, 0x8) clone(0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000180)) 01:03:11 executing program 0: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="b5000000070100ac0065746830e87ddc08962917937426f980b73b7573656df0e81475151e81b825e976ff48f6ea6e2ff178a259fdbc2912411deb78a48a542a591d594e7025f0e5504ffa591de6a5b0f2a28df294edae6c8d8b89e2541a31ac12c41261e9d22c0b2392d998f53e5ace19b58094f78c72298fd7712cd917fd2c7afab2a3538088b07ade479da234c1999ee8794bf8f0318a22e3f5b91d"], 0x9d) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) 01:03:11 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) 01:03:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000000000700"], 0xe}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/zero\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 01:03:11 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000ffc), &(0x7f0000013000)=0xfffffffffffffd7a) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0xffffffffffffffff, 0x80000000000032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) close(r0) 01:03:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) 01:03:11 executing program 1: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="b5000000070100ac0065746830e87ddc08962917937426f980b73b7573656df0e81475151e81b825e976ff48f6ea6e2ff178a259fdbc2912411deb78a48a542a591d594e7025f0e5504ffa591de6a5b0f2a28df294edae6c8d8b89e2541a31ac12c41261e9d22c0b2392d998f53e5ace19b58094f78c72298fd7712cd917fd2c7afab2a3538088b07ade479da234c1999ee8794bf8f0318a22e3f5b91d"], 0x9d) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) [ 126.784709] FS-Cache: Duplicate cookie detected [ 126.789725] FS-Cache: O-cookie c=0000000050dfb650 [p=0000000033cefff9 fl=222 nc=0 na=1] [ 126.798103] FS-Cache: O-cookie d=000000006b7daf62 n=000000007ba0673a [ 126.804756] FS-Cache: O-key=[10] '34323934373932343436' [ 126.809489] 9pnet: p9_errstr2errno: server reported unknown error eth0è}Ü–)“t&ù€·;usemðèu¸%évÿHöên/ñx¢Yý¼)Aëx¤ŠT*YYNp%ðåPOúY楰ò¢ò”í®l‹‰âT1¬ÄaéÒ, #’Ù˜õ>Zε€”÷Œr)×q,Ùý,zú²£S€ˆ°zÞG¢4Á™žèyKøð1Š"ãõ¹ 01:03:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) [ 126.810277] FS-Cache: N-cookie c=000000002ce04d5f [p=0000000033cefff9 fl=2 nc=0 na=1] [ 126.837766] FS-Cache: N-cookie d=000000006b7daf62 n=000000004830cc4b [ 126.844337] FS-Cache: N-key=[10] '34323934373932343436' 01:03:11 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) 01:03:11 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000ffc), &(0x7f0000013000)=0xfffffffffffffd7a) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0xffffffffffffffff, 0x80000000000032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) close(r0) 01:03:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000000000700"], 0xe}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/zero\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 01:03:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0xb, 0x6, 0x1}, 0x14}}, 0x0) 01:03:11 executing program 0: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="b5000000070100ac0065746830e87ddc08962917937426f980b73b7573656df0e81475151e81b825e976ff48f6ea6e2ff178a259fdbc2912411deb78a48a542a591d594e7025f0e5504ffa591de6a5b0f2a28df294edae6c8d8b89e2541a31ac12c41261e9d22c0b2392d998f53e5ace19b58094f78c72298fd7712cd917fd2c7afab2a3538088b07ade479da234c1999ee8794bf8f0318a22e3f5b91d"], 0x9d) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) 01:03:11 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2000000000207fff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000540)=""/220) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300)=0xc8, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) sched_yield() perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000640)={0x8d9a, {{0x2, 0x4e22, @loopback}}}, 0x88) r3 = dup(r1) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000200)={'gretap0\x00', @ifru_mtu}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getpid() fcntl$getownex(r1, 0x10, &(0x7f0000000400)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) sendto$inet6(r3, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$getown(r2, 0x9) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x80080) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1a72) 01:03:11 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) 01:03:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000000000700"], 0xe}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/zero\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) [ 127.198984] 9pnet: p9_errstr2errno: server reported unknown error eth0è}Ü–)“t&ù€·;usemðèu¸%évÿHöên/ñx¢Yý¼)Aëx¤ŠT*YYNp%ðåPOúY楰ò¢ò”í®l‹‰âT1¬ÄaéÒ, #’Ù˜õ>Zε€”÷Œr)×q,Ùý,zú²£S€ˆ°zÞG¢4Á™žèyKøð1Š"ãõ¹ [ 127.217732] 9pnet: p9_errstr2errno: server reported unknown error eth0è}Ü–)“t&ù€·;usemðèu¸%évÿHöên/ñx¢Yý¼)Aëx¤ŠT*YYNp%ðåPOúY楰ò¢ò”í®l‹‰âT1¬ÄaéÒ, #’Ù˜õ>Zε€”÷Œr)×q,Ùý,zú²£S€ˆ°zÞG¢4Á™žèyKøð1Š"ãõ¹ [ 127.350349] hrtimer: interrupt took 70985 ns [ 127.359356] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:03:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendto(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x80) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 01:03:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0xb, 0x6, 0x1}, 0x14}}, 0x0) 01:03:12 executing program 0: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="b5000000070100ac0065746830e87ddc08962917937426f980b73b7573656df0e81475151e81b825e976ff48f6ea6e2ff178a259fdbc2912411deb78a48a542a591d594e7025f0e5504ffa591de6a5b0f2a28df294edae6c8d8b89e2541a31ac12c41261e9d22c0b2392d998f53e5ace19b58094f78c72298fd7712cd917fd2c7afab2a3538088b07ade479da234c1999ee8794bf8f0318a22e3f5b91d"], 0x9d) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) 01:03:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000000000700"], 0xe}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/zero\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 01:03:12 executing program 1: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="b5000000070100ac0065746830e87ddc08962917937426f980b73b7573656df0e81475151e81b825e976ff48f6ea6e2ff178a259fdbc2912411deb78a48a542a591d594e7025f0e5504ffa591de6a5b0f2a28df294edae6c8d8b89e2541a31ac12c41261e9d22c0b2392d998f53e5ace19b58094f78c72298fd7712cd917fd2c7afab2a3538088b07ade479da234c1999ee8794bf8f0318a22e3f5b91d"], 0x9d) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) 01:03:12 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2000000000207fff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000540)=""/220) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300)=0xc8, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) sched_yield() perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000640)={0x8d9a, {{0x2, 0x4e22, @loopback}}}, 0x88) r3 = dup(r1) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000200)={'gretap0\x00', @ifru_mtu}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getpid() fcntl$getownex(r1, 0x10, &(0x7f0000000400)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) sendto$inet6(r3, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$getown(r2, 0x9) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x80080) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1a72) 01:03:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000000000700"], 0xe}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/zero\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 01:03:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0xfff7, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c) 01:03:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0xb, 0x6, 0x1}, 0x14}}, 0x0) 01:03:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendto(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x80) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) [ 127.776896] 9pnet: p9_errstr2errno: server reported unknown error eth0è}Ü–)“t&ù€·;usemðèu¸%évÿHöên/ñx¢Yý¼)Aëx¤ŠT*YYNp%ðåPOúY楰ò¢ò”í®l‹‰âT1¬ÄaéÒ, #’Ù˜õ>Zε€”÷Œr)×q,Ùý,zú²£S€ˆ°zÞG¢4Á™žèyKøð1Š"ãõ¹ [ 127.788609] 9pnet: p9_errstr2errno: server reported unknown error eth0è}Ü–)“t&ù€·;usemðèu¸%évÿHöên/ñx¢Yý¼)Aëx¤ŠT*YYNp%ðåPOúY楰ò¢ò”í®l‹‰âT1¬ÄaéÒ, #’Ù˜õ>Zε€”÷Œr)×q,Ùý,zú²£S€ˆ°zÞG¢4Á™žèyKøð1Š"ãõ¹ 01:03:12 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2000000000207fff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000540)=""/220) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300)=0xc8, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) sched_yield() perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000640)={0x8d9a, {{0x2, 0x4e22, @loopback}}}, 0x88) r3 = dup(r1) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000200)={'gretap0\x00', @ifru_mtu}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getpid() fcntl$getownex(r1, 0x10, &(0x7f0000000400)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) sendto$inet6(r3, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$getown(r2, 0x9) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x80080) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1a72) 01:03:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0xb, 0x6, 0x1}, 0x14}}, 0x0) 01:03:12 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x3f}) 01:03:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendto(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x80) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 01:03:12 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, &(0x7f00000005c0), &(0x7f0000000600)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 01:03:12 executing program 4: clock_gettime(0x0, &(0x7f0000000300)) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0), &(0x7f0000000380)) r0 = socket$inet6(0xa, 0x21000000000002, 0x0) r1 = gettid() r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0) getgroups(0x5, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r3, r4}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x1261, 0xffffffffffffffff) 01:03:12 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x3f}) 01:03:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendto(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x80) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 01:03:12 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x3f}) [ 128.247217] QAT: Invalid ioctl 01:03:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$IPC_SET(0x0, 0xf, &(0x7f0000000380)) 01:03:12 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2000000000207fff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000540)=""/220) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300)=0xc8, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) sched_yield() perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000640)={0x8d9a, {{0x2, 0x4e22, @loopback}}}, 0x88) r3 = dup(r1) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000200)={'gretap0\x00', @ifru_mtu}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getpid() fcntl$getownex(r1, 0x10, &(0x7f0000000400)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) sendto$inet6(r3, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$getown(r2, 0x9) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x80080) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1a72) 01:03:12 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x3f}) 01:03:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:03:12 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x3f}) 01:03:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f757024636700000000000000000000000000000000"], 0x90) 01:03:12 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000300), 0x0, 0x1000) 01:03:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 01:03:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0x3b]}) [ 128.528960] QAT: Invalid ioctl 01:03:13 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x3f}) 01:03:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:03:13 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x3f}) [ 128.638639] syz-executor4 (7674) used greatest stack depth: 16480 bytes left 01:03:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0x3b]}) 01:03:13 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000300), 0x0, 0x1000) 01:03:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000280)={&(0x7f00000000c0)=@ethernet, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/43, 0x2b}], 0x1, &(0x7f00000008c0)=""/143, 0x8f}, 0x0) 01:03:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000140)=0x4) 01:03:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f757024636700000000000000000000000000000000"], 0x90) 01:03:13 executing program 4: clock_gettime(0x0, &(0x7f0000000300)) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0), &(0x7f0000000380)) r0 = socket$inet6(0xa, 0x21000000000002, 0x0) r1 = gettid() r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0) getgroups(0x5, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r3, r4}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x1261, 0xffffffffffffffff) 01:03:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:03:13 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000300), 0x0, 0x1000) [ 128.893252] QAT: Invalid ioctl 01:03:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0x3b]}) 01:03:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000140)=0x4) 01:03:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000002340)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000140)=""/246) 01:03:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f757024636700000000000000000000000000000000"], 0x90) 01:03:13 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000300), 0x0, 0x1000) 01:03:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:03:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000140)=0x4) 01:03:13 executing program 4: clock_gettime(0x0, &(0x7f0000000300)) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0), &(0x7f0000000380)) r0 = socket$inet6(0xa, 0x21000000000002, 0x0) r1 = gettid() r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0) getgroups(0x5, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r3, r4}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x1261, 0xffffffffffffffff) 01:03:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0x3b]}) 01:03:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000002340)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000140)=""/246) 01:03:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='#'], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0), 0xc) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='i'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 129.491744] QAT: Invalid ioctl 01:03:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, r1/1000+10000}}, &(0x7f0000000200)) setitimer(0x1, &(0x7f000000bfe0)={{}, {0x77359400}}, &(0x7f000002c000)) 01:03:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000140)=0x4) 01:03:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x80000001, @uid}]}, 0x1c}}, 0x0) 01:03:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000002340)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000140)=""/246) 01:03:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) 01:03:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f757024636700000000000000000000000000000000"], 0x90) [ 129.698687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 01:03:14 executing program 4: clock_gettime(0x0, &(0x7f0000000300)) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0), &(0x7f0000000380)) r0 = socket$inet6(0xa, 0x21000000000002, 0x0) r1 = gettid() r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0) getgroups(0x5, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r3, r4}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x1261, 0xffffffffffffffff) 01:03:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000300)={0xfffffffffffffffd}, &(0x7f0000000380), &(0x7f00007adff0)={0x77359400}, 0x8) acct(&(0x7f0000000000)='./file0\x00') fcntl$setlease(r1, 0x400, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 01:03:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='#'], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0), 0xc) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='i'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 129.827472] QAT: Invalid ioctl 01:03:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x80000001, @uid}]}, 0x1c}}, 0x0) 01:03:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) 01:03:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000002340)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000140)=""/246) 01:03:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, r1/1000+10000}}, &(0x7f0000000200)) setitimer(0x1, &(0x7f000000bfe0)={{}, {0x77359400}}, &(0x7f000002c000)) [ 129.969040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 130.000179] Process accounting resumed 01:03:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 01:03:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x80000001, @uid}]}, 0x1c}}, 0x0) 01:03:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) [ 130.090729] syz-executor4 (7793) used greatest stack depth: 16304 bytes left [ 130.107203] Process accounting resumed 01:03:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000300)={0xfffffffffffffffd}, &(0x7f0000000380), &(0x7f00007adff0)={0x77359400}, 0x8) acct(&(0x7f0000000000)='./file0\x00') fcntl$setlease(r1, 0x400, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 01:03:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000300)={0xfffffffffffffffd}, &(0x7f0000000380), &(0x7f00007adff0)={0x77359400}, 0x8) acct(&(0x7f0000000000)='./file0\x00') fcntl$setlease(r1, 0x400, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 01:03:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:03:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) [ 130.210237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 01:03:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='#'], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0), 0xc) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='i'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 01:03:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x80000001, @uid}]}, 0x1c}}, 0x0) 01:03:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) 01:03:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, r1/1000+10000}}, &(0x7f0000000200)) setitimer(0x1, &(0x7f000000bfe0)={{}, {0x77359400}}, &(0x7f000002c000)) 01:03:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 01:03:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:03:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000300)={0xfffffffffffffffd}, &(0x7f0000000380), &(0x7f00007adff0)={0x77359400}, 0x8) acct(&(0x7f0000000000)='./file0\x00') fcntl$setlease(r1, 0x400, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") [ 130.402735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 130.435823] Process accounting resumed [ 130.476790] Process accounting resumed 01:03:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000300)={0xfffffffffffffffd}, &(0x7f0000000380), &(0x7f00007adff0)={0x77359400}, 0x8) acct(&(0x7f0000000000)='./file0\x00') fcntl$setlease(r1, 0x400, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 01:03:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x4a, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000020000000000000000000000", 0x10}]) 01:03:15 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x800000010f, 0x20080000000084, &(0x7f00004ad000), &(0x7f0000a3c000)=0xe4) 01:03:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 01:03:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:03:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='#'], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0), 0xc) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='i'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 01:03:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, r1/1000+10000}}, &(0x7f0000000200)) setitimer(0x1, &(0x7f000000bfe0)={{}, {0x77359400}}, &(0x7f000002c000)) 01:03:15 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x800000010f, 0x20080000000084, &(0x7f00004ad000), &(0x7f0000a3c000)=0xe4) 01:03:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000300)={0xfffffffffffffffd}, &(0x7f0000000380), &(0x7f00007adff0)={0x77359400}, 0x8) acct(&(0x7f0000000000)='./file0\x00') fcntl$setlease(r1, 0x400, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 01:03:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x4a, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000020000000000000000000000", 0x10}]) [ 130.808334] Process accounting resumed [ 130.825527] Process accounting resumed 01:03:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000300)={0xfffffffffffffffd}, &(0x7f0000000380), &(0x7f00007adff0)={0x77359400}, 0x8) acct(&(0x7f0000000000)='./file0\x00') fcntl$setlease(r1, 0x400, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 01:03:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:03:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x4a, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000020000000000000000000000", 0x10}]) 01:03:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x4a, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000020000000000000000000000", 0x10}]) 01:03:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000001000000e6", 0x20) 01:03:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x4a, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000020000000000000000000000", 0x10}]) 01:03:15 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x800000010f, 0x20080000000084, &(0x7f00004ad000), &(0x7f0000a3c000)=0xe4) 01:03:15 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 01:03:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x4a, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000020000000000000000000000", 0x10}]) [ 131.178887] Process accounting resumed [ 131.186880] Process accounting resumed 01:03:15 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffff00000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x5) 01:03:15 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005680)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0, 0xfffffffffffffffd}], 0x1, 0x7be2) getpgid(0x0) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)) dup(0xffffffffffffffff) getgid() epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xffffffff, &(0x7f0000e1d000)={0xfffffffffffffffc}, 0x8) accept$alg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x80000005}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x8) 01:03:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0xffffffffffffff72, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0xc, 0x18, 0x0, 0x0, 0x51, "1be5117c74053ce50b35ce770161b89be14c9b65e41e52bacf7756dc2374555edf054ef5b7df5a78a3e9ad0bcd768b928f053485fd2681a96f5920f4d3ea80ceefee63cacafc7e13ee2249988eaca6a58d"}]}, 0x70}}, 0xc050) sendto(r2, &(0x7f0000001c80)="e64f7a8cb62a32563415f4670baf7e64", 0x10, 0x0, &(0x7f0000002c80)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80) recvmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x7ffff000}, {&(0x7f0000000540)=""/15, 0xf}], 0x2}, 0x0) 01:03:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x4a, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000020000000000000000000000", 0x10}]) 01:03:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000001000000e6", 0x20) 01:03:15 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x800000010f, 0x20080000000084, &(0x7f00004ad000), &(0x7f0000a3c000)=0xe4) 01:03:15 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 01:03:15 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffff00000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x5) 01:03:15 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x6, &(0x7f0000000140)={0x0, @local, 0x0, 0x0, 'sed\x00'}, 0x2c) 01:03:15 executing program 2: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x40bc5311, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 01:03:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x54, "2b6f1cd454d852446cb2d6d1dffd6c398a871c014f7e24cf8dc173d8de7fa90cf6290e6c5fd17422fc187e50510e91806ec21cd55503f6ac4aa76d780bebf60db2d32d19af0c59e81f995bbee4013e16ea19a0ea"}, &(0x7f0000000380)=0x5c) 01:03:16 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 01:03:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@session={'session'}}, {@uid={'uid'}}]}) 01:03:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000001000000e6", 0x20) 01:03:16 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x6, &(0x7f0000000140)={0x0, @local, 0x0, 0x0, 'sed\x00'}, 0x2c) 01:03:16 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffff00000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x5) 01:03:16 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) [ 131.688971] ISOFS: Invalid session number or type of track [ 131.738174] ISOFS: Invalid session number [ 131.835031] ISOFS: Unable to identify CD-ROM format. [ 131.915875] ISOFS: Invalid session number or type of track [ 131.933663] ISOFS: Invalid session number [ 131.956425] ISOFS: Unable to identify CD-ROM format. 01:03:16 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005680)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0, 0xfffffffffffffffd}], 0x1, 0x7be2) getpgid(0x0) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)) dup(0xffffffffffffffff) getgid() epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xffffffff, &(0x7f0000e1d000)={0xfffffffffffffffc}, 0x8) accept$alg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x80000005}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x8) 01:03:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000001000000e6", 0x20) 01:03:16 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x6, &(0x7f0000000140)={0x0, @local, 0x0, 0x0, 'sed\x00'}, 0x2c) 01:03:16 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffff00000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x5) 01:03:16 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="c10800000000000047880000ac14140de0000001435b6e760065637e16753db96b057e43901a8b196a433a62897a154ce7e5b0fddc0000000000000000f4674e81f16b6b8083668369", 0x49}], 0x1}, 0x0) 01:03:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x54, "2b6f1cd454d852446cb2d6d1dffd6c398a871c014f7e24cf8dc173d8de7fa90cf6290e6c5fd17422fc187e50510e91806ec21cd55503f6ac4aa76d780bebf60db2d32d19af0c59e81f995bbee4013e16ea19a0ea"}, &(0x7f0000000380)=0x5c) 01:03:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@session={'session'}}, {@uid={'uid'}}]}) [ 132.166755] ISOFS: Invalid session number or type of track 01:03:16 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x6, &(0x7f0000000140)={0x0, @local, 0x0, 0x0, 'sed\x00'}, 0x2c) [ 132.213733] ISOFS: Invalid session number [ 132.318457] ISOFS: Unable to identify CD-ROM format. 01:03:16 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="c10800000000000047880000ac14140de0000001435b6e760065637e16753db96b057e43901a8b196a433a62897a154ce7e5b0fddc0000000000000000f4674e81f16b6b8083668369", 0x49}], 0x1}, 0x0) 01:03:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x1}, 0x685) 01:03:16 executing program 2: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x40bc5311, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 01:03:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1, 0x100000000000000, &(0x7f0000000500)="05"}) 01:03:16 executing program 6: msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0xfffffffffffffffd, 0x1000) 01:03:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x54, "2b6f1cd454d852446cb2d6d1dffd6c398a871c014f7e24cf8dc173d8de7fa90cf6290e6c5fd17422fc187e50510e91806ec21cd55503f6ac4aa76d780bebf60db2d32d19af0c59e81f995bbee4013e16ea19a0ea"}, &(0x7f0000000380)=0x5c) 01:03:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@session={'session'}}, {@uid={'uid'}}]}) [ 132.524671] ISOFS: Invalid session number or type of track [ 132.556427] ISOFS: Invalid session number [ 132.561607] binder: 8065:8068 Acquire 1 refcount change on invalid ref 0 ret -22 01:03:17 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x811, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 132.598649] binder: 8065:8068 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 132.651788] binder: 8065:8068 ioctl c0306201 20000000 returned -11 [ 132.656503] ISOFS: Unable to identify CD-ROM format. [ 132.684446] binder: 8065:8077 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 132.718236] binder: 8065:8077 Acquire 1 refcount change on invalid ref 0 ret -22 [ 132.751379] binder: 8065:8077 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 132.773571] binder: 8065:8068 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 132.782575] binder: 8065:8068 ioctl c0306201 20008fd0 returned -11 01:03:17 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005680)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0, 0xfffffffffffffffd}], 0x1, 0x7be2) getpgid(0x0) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)) dup(0xffffffffffffffff) getgid() epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xffffffff, &(0x7f0000e1d000)={0xfffffffffffffffc}, 0x8) accept$alg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x80000005}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x8) 01:03:17 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="c10800000000000047880000ac14140de0000001435b6e760065637e16753db96b057e43901a8b196a433a62897a154ce7e5b0fddc0000000000000000f4674e81f16b6b8083668369", 0x49}], 0x1}, 0x0) 01:03:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x1}, 0x685) 01:03:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x54, "2b6f1cd454d852446cb2d6d1dffd6c398a871c014f7e24cf8dc173d8de7fa90cf6290e6c5fd17422fc187e50510e91806ec21cd55503f6ac4aa76d780bebf60db2d32d19af0c59e81f995bbee4013e16ea19a0ea"}, &(0x7f0000000380)=0x5c) 01:03:17 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x811, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 01:03:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@session={'session'}}, {@uid={'uid'}}]}) 01:03:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1, 0x100000000000000, &(0x7f0000000500)="05"}) [ 133.047629] binder: 8094:8095 Acquire 1 refcount change on invalid ref 0 ret -22 [ 133.063852] ISOFS: Invalid session number or type of track [ 133.087225] binder: 8094:8095 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 133.094207] ISOFS: Invalid session number 01:03:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x1}, 0x685) 01:03:17 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x811, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 133.122723] binder: 8094:8095 ioctl c0306201 20000000 returned -11 [ 133.157896] binder: 8094:8108 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 133.172217] ISOFS: Unable to identify CD-ROM format. 01:03:17 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="c10800000000000047880000ac14140de0000001435b6e760065637e16753db96b057e43901a8b196a433a62897a154ce7e5b0fddc0000000000000000f4674e81f16b6b8083668369", 0x49}], 0x1}, 0x0) 01:03:17 executing program 2: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x40bc5311, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 01:03:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1, 0x100000000000000, &(0x7f0000000500)="05"}) 01:03:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x1}, 0x685) 01:03:17 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005680)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0, 0xfffffffffffffffd}], 0x1, 0x7be2) getpgid(0x0) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)) dup(0xffffffffffffffff) getgid() epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xffffffff, &(0x7f0000e1d000)={0xfffffffffffffffc}, 0x8) accept$alg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x80000005}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x8) 01:03:17 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x811, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 01:03:17 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x811, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 01:03:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000000c0)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) tkill(r3, 0x1000000000016) 01:03:18 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x811, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 133.476385] binder: 8129:8130 Acquire 1 refcount change on invalid ref 0 ret -22 [ 133.515605] binder: 8129:8130 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:03:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open$dir(&(0x7f0000000040)='./file0\x00', 0x490002, 0x0) 01:03:18 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128l)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000001c0), 0x10) [ 133.562880] binder: 8129:8130 ioctl c0306201 20000000 returned -11 [ 133.562936] binder: 8129:8144 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:03:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x23, &(0x7f0000000100), 0x10) 01:03:18 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x811, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 01:03:18 executing program 7: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00'}, 0x18) renameat2(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0) ioperm(0x0, 0x2, 0x401) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000600)={0xfcca}, 0xfffffffffffffebd) ioperm(0x0, 0x0, 0x0) 01:03:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1, 0x100000000000000, &(0x7f0000000500)="05"}) 01:03:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x23, &(0x7f0000000100), 0x10) 01:03:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open$dir(&(0x7f0000000040)='./file0\x00', 0x490002, 0x0) [ 133.936577] binder: 8190:8192 Acquire 1 refcount change on invalid ref 0 ret -22 [ 133.962764] binder: 8190:8192 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 133.987713] binder: 8190:8192 ioctl c0306201 20000000 returned -11 [ 133.987726] binder: 8190:8197 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:03:18 executing program 2: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x40bc5311, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 01:03:18 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0xff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x800, 0x0, 0xff}, 0x20) 01:03:18 executing program 7: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00'}, 0x18) renameat2(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0) ioperm(0x0, 0x2, 0x401) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000600)={0xfcca}, 0xfffffffffffffebd) ioperm(0x0, 0x0, 0x0) 01:03:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open$dir(&(0x7f0000000040)='./file0\x00', 0x490002, 0x0) 01:03:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x23, &(0x7f0000000100), 0x10) 01:03:18 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 01:03:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000000c0)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) tkill(r3, 0x1000000000016) 01:03:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2d2) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 01:03:19 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0xff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x800, 0x0, 0xff}, 0x20) 01:03:19 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open$dir(&(0x7f0000000040)='./file0\x00', 0x490002, 0x0) 01:03:19 executing program 7: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00'}, 0x18) renameat2(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0) ioperm(0x0, 0x2, 0x401) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000600)={0xfcca}, 0xfffffffffffffebd) ioperm(0x0, 0x0, 0x0) 01:03:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x23, &(0x7f0000000100), 0x10) 01:03:19 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 01:03:19 executing program 7: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00'}, 0x18) renameat2(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0) ioperm(0x0, 0x2, 0x401) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000600)={0xfcca}, 0xfffffffffffffebd) ioperm(0x0, 0x0, 0x0) 01:03:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x7, &(0x7f0000000140)=""/175, &(0x7f0000000100)=0x268) 01:03:19 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0xff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x800, 0x0, 0xff}, 0x20) 01:03:19 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0xff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x800, 0x0, 0xff}, 0x20) 01:03:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000740)="5155a3c0bc5cfed3838ecd77c28f8bf10e1a9e28a764bb8ff342666df8091b457647a6cfc23a2948ac35f1f28de40f1983b554fe2657f4f019ce96aa6bd5a43432d9063d6f44054b1bed1682abf557fbb3d82950f00cc502ced7457646dda3f105e79f3c5d438da4b61b9dbc5d39673b0447e9f161ac628801a801811f1f8e12b4f031768a88145362a1abb8ba408cf54e27cfc72709a99a65a5ae69855d2e52c2bbcc13f76993aad5d2a14b8a02834ca22d3e0e5b6e7a58dc58a387cca58ea166945cbfdaed69e1dfacf01583ffcfd3fc19e5392b57c2920bd9339c3917b8b483a3b0b1cd9c6039e9f26641a6", 0xed, 0x3ff}], 0x100010, &(0x7f00000006c0)={[{@bh='bh'}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock='dioread_nolock'}, {@usrquota='usrquota'}, {@noquota='noquota'}, {@data_writeback='data=writeback'}, {@journal_checksum='journal_checksum'}]}) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 01:03:19 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 01:03:19 executing program 5: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000019c0)="078cffffff000000900cda40ff1ad5c97f13", 0x12, 0x400}], 0xcc00, 0x0) 01:03:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2d2) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 01:03:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2d2) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 01:03:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000000c0)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) tkill(r3, 0x1000000000016) 01:03:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x7, &(0x7f0000000140)=""/175, &(0x7f0000000100)=0x268) 01:03:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2d2) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 01:03:19 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) sendto$inet6(r0, &(0x7f0000000000), 0xfedf, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1a) 01:03:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2d2) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 01:03:19 executing program 5: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000019c0)="078cffffff000000900cda40ff1ad5c97f13", 0x12, 0x400}], 0xcc00, 0x0) 01:03:19 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 01:03:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x5) sendto$inet(r0, &(0x7f0000000b40)="94f0e86d4aef701ca8117bbae9aafca1d224f7ab5093df5fd04008b443ccff3cf45a46e1dfa12980bb68565dc76203515500a449b2533c89fb9f600c986c43bfb9122605aa60f3565cec73825b6b2e45301173a019da52250e0bc84f2c4101cc1e75573a42bc5b0a6ea5bc2e1a0e55b0bf7e4871be9b73f03d65ad0a7a49dbc13696143e9927b353986f49bf1fd9cb5afe06fa581af2688b6feda1917a205989ccb71a2e7d96d8d2dcd95232e9b859bde902846171829ae23034064be129aa269ac1884e14c89eff915e058bdae2f9f5d008780e65d9fd2ff51429c587eb013180b59564369fa907b9144f56c8dddc0fb57dbfdeb9416aa4c782490dd25843528eb227be578128a303d5134e7da62ab2a3c0f76a8b219ac133b9ec8686e50f9fa047a65e483b044cbdd84728958d76c91c9d9cdc85070cc8fd902b06b5da4895b0cc628031fa45f7c4afad9071178d0a5051fcd7482bec952bfc83682aa0ee74568cd4b22e914e1c155dc26354b74f0248e99b5d2603cf07eceff9733703fa9d99ddd31d628238d19a4be09b78ff056c4a6961076187d037fc73c86705854c16407be66b0ba67f52b02e9ff02e8a05f16cb1d1b1cca004be9433863f0b43c8b77432f92c9b0ef914725e62cfbf2c62178895e5c26725dc1ee896a1151b4893d0ae73a824293056954f2fd8ed00af4687305bca868c0e9f66eece35b90b062ba61390e6de29da3d1bb6bb7e95c3d8a890c9fdc6c144f9b0265cccdddaebe5aacd1cdf4eeec929cdd6810416ce1b098446f31cf36e0f2f2c7ca0496cf9ba1297e0d3a32cc5c1ae3b9c307ad5992b1720abce9d8dc16c2e1d23ecb7a9c6c7db4122fb38be47c6b94895a6a7b66d122742c0984e3825460ef11e5d1e11053054f4445d8ecb7bff50848b70424dc0d53a54509e3d2685719e0b3471fa577808bcbebe7f716f0b6855de2d2370f523d233cb7c27b31cff455dcc8e5d787dcb312f572366c4ec146e28aa73635061a14d60f48735bda3b7c70efe367a1f69dc199bed98ad9dd47eea1a78758d3255c0eee7a292d7a8cbc31792bbc582f0c0520e5a39123f4b89471c65e07c3f41001e7164c314a898f15760c3bd6e4fbc0760be6eff4352514cdb89e3f941846258b7bce5da7bd595eeb4c7c759c2ebabca9db91d3b04fc8981290db936e691efa035d796224c5e9381e5062b52021e7a88a8f16e69ae5ef65be54295d221f9ff05276df28de4e3f2a34a68607a7b4e932e3c5221c6e2083fac80614a5aaef7a546a793a61d10e2f96b50830b19811c9c49029a1ed0041c01bd577fb695d0e31e8ac99096c70f0f7b48b73654ea0a29a7d820c3c1a72208fc664b90937ae2eb1fdcd18381329f0d022113173d2f96625cc498a448fe8d6409db0539ffe099825abbe2dc1e0737020ea53506bb5174e856995b453afde30ebd14d76a96e46cf322e1efdd144ba5c411fd56e8202374afc5800c61391b3846a1c48c655ad72fccb28cc78c218587d93713b3006602e2d82577730050b589ee7eba17e51d5da9f1c499cb4cffa56b5fc60f0e37ad1f25b4c6a8ab3b023c36dd4471abc0444708be9d0f4b819afe33ac25b8a0def3bb2feed6daf10c17bfaac431e16d743537fc8064614a46d768bafffbadbcaf8dc7faf8639f01b92a87f1b40ebf2dffbea84afcf1357519baca9ea2a9c22a869dda82878ce552a5d1b8c248cec20f707fea91b1e014ea47068140704122ac5982b2d700fd250c2577c58f2ed97e21649bc99fd9af1d99d3f8989ccb8b8e4ca445345193dad3c39e9bdc86a9721a0d8be5e875e4de796b8e11b625962abc5935362541e570ee131f3537b26ab1256b7f939386c51066ce6c56c051f6ea598b9b6491524f368fa56279ba3325adb6fdce78db8f142ee5655aa3e38c32ba41d1aaa1e3e099b216a7258512e4b7e90e2c7418295f66b5e4190fff16e5cece9bd26e7eb397c5c5fdceb980dd5184f8004284d8343f91468e97d6e7929540b2e6a934", 0x595, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000010, &(0x7f00004daff0)={0x2, 0x0, @loopback}, 0x10) [ 135.494795] dccp_invalid_packet: invalid packet type 01:03:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2d2) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 01:03:20 executing program 5: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000019c0)="078cffffff000000900cda40ff1ad5c97f13", 0x12, 0x400}], 0xcc00, 0x0) 01:03:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x7, &(0x7f0000000140)=""/175, &(0x7f0000000100)=0x268) 01:03:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2d2) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 01:03:20 executing program 6: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r1, &(0x7f0000012ff6)='./control\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) futimesat(r1, &(0x7f0000000040)='./control\x00', &(0x7f0000000140)={{0x0, 0x7530}, {0x77359400}}) [ 135.553310] dccp_invalid_packet: invalid packet type [ 135.570438] syz-executor2 (8290) used greatest stack depth: 16152 bytes left 01:03:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x5) sendto$inet(r0, &(0x7f0000000b40)="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", 0x595, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000010, &(0x7f00004daff0)={0x2, 0x0, @loopback}, 0x10) 01:03:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x1f, 0x3) 01:03:20 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) sendto$inet6(r0, &(0x7f0000000000), 0xfedf, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1a) [ 135.848867] dccp_invalid_packet: invalid packet type 01:03:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000000c0)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) tkill(r3, 0x1000000000016) 01:03:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x7, &(0x7f0000000140)=""/175, &(0x7f0000000100)=0x268) 01:03:20 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x6c}}, &(0x7f00000002c0)="73000000000000040100", 0x9, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 01:03:20 executing program 6: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r1, &(0x7f0000012ff6)='./control\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) futimesat(r1, &(0x7f0000000040)='./control\x00', &(0x7f0000000140)={{0x0, 0x7530}, {0x77359400}}) 01:03:20 executing program 5: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000019c0)="078cffffff000000900cda40ff1ad5c97f13", 0x12, 0x400}], 0xcc00, 0x0) 01:03:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x1f, 0x3) 01:03:20 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) sendto$inet6(r0, &(0x7f0000000000), 0xfedf, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1a) 01:03:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x5) sendto$inet(r0, &(0x7f0000000b40)="94f0e86d4aef701ca8117bbae9aafca1d224f7ab5093df5fd04008b443ccff3cf45a46e1dfa12980bb68565dc76203515500a449b2533c89fb9f600c986c43bfb9122605aa60f3565cec73825b6b2e45301173a019da52250e0bc84f2c4101cc1e75573a42bc5b0a6ea5bc2e1a0e55b0bf7e4871be9b73f03d65ad0a7a49dbc13696143e9927b353986f49bf1fd9cb5afe06fa581af2688b6feda1917a205989ccb71a2e7d96d8d2dcd95232e9b859bde902846171829ae23034064be129aa269ac1884e14c89eff915e058bdae2f9f5d008780e65d9fd2ff51429c587eb013180b59564369fa907b9144f56c8dddc0fb57dbfdeb9416aa4c782490dd25843528eb227be578128a303d5134e7da62ab2a3c0f76a8b219ac133b9ec8686e50f9fa047a65e483b044cbdd84728958d76c91c9d9cdc85070cc8fd902b06b5da4895b0cc628031fa45f7c4afad9071178d0a5051fcd7482bec952bfc83682aa0ee74568cd4b22e914e1c155dc26354b74f0248e99b5d2603cf07eceff9733703fa9d99ddd31d628238d19a4be09b78ff056c4a6961076187d037fc73c86705854c16407be66b0ba67f52b02e9ff02e8a05f16cb1d1b1cca004be9433863f0b43c8b77432f92c9b0ef914725e62cfbf2c62178895e5c26725dc1ee896a1151b4893d0ae73a824293056954f2fd8ed00af4687305bca868c0e9f66eece35b90b062ba61390e6de29da3d1bb6bb7e95c3d8a890c9fdc6c144f9b0265cccdddaebe5aacd1cdf4eeec929cdd6810416ce1b098446f31cf36e0f2f2c7ca0496cf9ba1297e0d3a32cc5c1ae3b9c307ad5992b1720abce9d8dc16c2e1d23ecb7a9c6c7db4122fb38be47c6b94895a6a7b66d122742c0984e3825460ef11e5d1e11053054f4445d8ecb7bff50848b70424dc0d53a54509e3d2685719e0b3471fa577808bcbebe7f716f0b6855de2d2370f523d233cb7c27b31cff455dcc8e5d787dcb312f572366c4ec146e28aa73635061a14d60f48735bda3b7c70efe367a1f69dc199bed98ad9dd47eea1a78758d3255c0eee7a292d7a8cbc31792bbc582f0c0520e5a39123f4b89471c65e07c3f41001e7164c314a898f15760c3bd6e4fbc0760be6eff4352514cdb89e3f941846258b7bce5da7bd595eeb4c7c759c2ebabca9db91d3b04fc8981290db936e691efa035d796224c5e9381e5062b52021e7a88a8f16e69ae5ef65be54295d221f9ff05276df28de4e3f2a34a68607a7b4e932e3c5221c6e2083fac80614a5aaef7a546a793a61d10e2f96b50830b19811c9c49029a1ed0041c01bd577fb695d0e31e8ac99096c70f0f7b48b73654ea0a29a7d820c3c1a72208fc664b90937ae2eb1fdcd18381329f0d022113173d2f96625cc498a448fe8d6409db0539ffe099825abbe2dc1e0737020ea53506bb5174e856995b453afde30ebd14d76a96e46cf322e1efdd144ba5c411fd56e8202374afc5800c61391b3846a1c48c655ad72fccb28cc78c218587d93713b3006602e2d82577730050b589ee7eba17e51d5da9f1c499cb4cffa56b5fc60f0e37ad1f25b4c6a8ab3b023c36dd4471abc0444708be9d0f4b819afe33ac25b8a0def3bb2feed6daf10c17bfaac431e16d743537fc8064614a46d768bafffbadbcaf8dc7faf8639f01b92a87f1b40ebf2dffbea84afcf1357519baca9ea2a9c22a869dda82878ce552a5d1b8c248cec20f707fea91b1e014ea47068140704122ac5982b2d700fd250c2577c58f2ed97e21649bc99fd9af1d99d3f8989ccb8b8e4ca445345193dad3c39e9bdc86a9721a0d8be5e875e4de796b8e11b625962abc5935362541e570ee131f3537b26ab1256b7f939386c51066ce6c56c051f6ea598b9b6491524f368fa56279ba3325adb6fdce78db8f142ee5655aa3e38c32ba41d1aaa1e3e099b216a7258512e4b7e90e2c7418295f66b5e4190fff16e5cece9bd26e7eb397c5c5fdceb980dd5184f8004284d8343f91468e97d6e7929540b2e6a934", 0x595, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000010, &(0x7f00004daff0)={0x2, 0x0, @loopback}, 0x10) [ 136.352080] dccp_invalid_packet: invalid packet type 01:03:20 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) sendto$inet6(r0, &(0x7f0000000000), 0xfedf, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1a) 01:03:20 executing program 6: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r1, &(0x7f0000012ff6)='./control\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) futimesat(r1, &(0x7f0000000040)='./control\x00', &(0x7f0000000140)={{0x0, 0x7530}, {0x77359400}}) 01:03:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x1f, 0x3) 01:03:20 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x6c}}, &(0x7f00000002c0)="73000000000000040100", 0x9, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 01:03:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x5) sendto$inet(r0, &(0x7f0000000b40)="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", 0x595, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000010, &(0x7f00004daff0)={0x2, 0x0, @loopback}, 0x10) [ 136.564520] dccp_invalid_packet: invalid packet type 01:03:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) connect(r1, &(0x7f0000000100)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r1, r2, &(0x7f0000000000), 0x102) 01:03:21 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000240), &(0x7f0000000380)=""/4096, 0x1000, &(0x7f00000002c0)={&(0x7f0000000280)={'vmac(xtea)\x00'}, &(0x7f0000001380)}) 01:03:21 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x6c}}, &(0x7f00000002c0)="73000000000000040100", 0x9, 0xcf, &(0x7f0000000340)=""/207}, 0x48) [ 136.667203] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:03:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x66) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) 01:03:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x1f, 0x3) 01:03:21 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000240), &(0x7f0000000380)=""/4096, 0x1000, &(0x7f00000002c0)={&(0x7f0000000280)={'vmac(xtea)\x00'}, &(0x7f0000001380)}) 01:03:21 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x6c}}, &(0x7f00000002c0)="73000000000000040100", 0x9, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 01:03:21 executing program 6: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r1, &(0x7f0000012ff6)='./control\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) futimesat(r1, &(0x7f0000000040)='./control\x00', &(0x7f0000000140)={{0x0, 0x7530}, {0x77359400}}) 01:03:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) connect(r1, &(0x7f0000000100)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r1, r2, &(0x7f0000000000), 0x102) 01:03:21 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffffa) readv(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x1}) 01:03:21 executing program 3: r0 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000580)="04", 0x1}], 0x1) tkill(r1, 0x1000000000015) 01:03:21 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000180)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000340)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 01:03:21 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000240), &(0x7f0000000380)=""/4096, 0x1000, &(0x7f00000002c0)={&(0x7f0000000280)={'vmac(xtea)\x00'}, &(0x7f0000001380)}) 01:03:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) connect(r1, &(0x7f0000000100)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r1, r2, &(0x7f0000000000), 0x102) 01:03:21 executing program 4: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000000)='./file2\x00', 0x6100, 0x1) creat(&(0x7f0000000180)='./file2\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc028660f, &(0x7f0000000040)) 01:03:21 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffffa) readv(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x1}) 01:03:21 executing program 6: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffffa) readv(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x1}) 01:03:22 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 01:03:22 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000240), &(0x7f0000000380)=""/4096, 0x1000, &(0x7f00000002c0)={&(0x7f0000000280)={'vmac(xtea)\x00'}, &(0x7f0000001380)}) 01:03:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) connect(r1, &(0x7f0000000100)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r1, r2, &(0x7f0000000000), 0x102) 01:03:22 executing program 4: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000000)='./file2\x00', 0x6100, 0x1) creat(&(0x7f0000000180)='./file2\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc028660f, &(0x7f0000000040)) 01:03:22 executing program 6: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffffa) readv(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x1}) 01:03:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 01:03:22 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffffa) readv(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x1}) 01:03:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') futex(&(0x7f0000001ac0), 0x3, 0x0, &(0x7f0000000080), &(0x7f0000001c40), 0x0) 01:03:22 executing program 4: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000000)='./file2\x00', 0x6100, 0x1) creat(&(0x7f0000000180)='./file2\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc028660f, &(0x7f0000000040)) 01:03:22 executing program 1: r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343fc6b26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) 01:03:22 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x20000000000001a0, &(0x7f0000000080)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x4}}}}}, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 01:03:22 executing program 6: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffffa) readv(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x1}) 01:03:22 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) [ 137.966221] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 137.973832] netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. 01:03:22 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffffa) readv(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x1}) 01:03:22 executing program 4: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000000)='./file2\x00', 0x6100, 0x1) creat(&(0x7f0000000180)='./file2\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc028660f, &(0x7f0000000040)) 01:03:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') futex(&(0x7f0000001ac0), 0x3, 0x0, &(0x7f0000000080), &(0x7f0000001c40), 0x0) 01:03:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) [ 138.138523] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 138.146221] netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. 01:03:22 executing program 1: r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343fc6b26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) 01:03:22 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 01:03:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') futex(&(0x7f0000001ac0), 0x3, 0x0, &(0x7f0000000080), &(0x7f0000001c40), 0x0) 01:03:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') futex(&(0x7f0000001ac0), 0x3, 0x0, &(0x7f0000000080), &(0x7f0000001c40), 0x0) 01:03:22 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x20000000000001a0, &(0x7f0000000080)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x4}}}}}, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 01:03:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x20000000000001a0, &(0x7f0000000080)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x4}}}}}, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 01:03:22 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) [ 138.373808] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 138.381358] netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. 01:03:22 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 01:03:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') futex(&(0x7f0000001ac0), 0x3, 0x0, &(0x7f0000000080), &(0x7f0000001c40), 0x0) 01:03:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 01:03:23 executing program 1: r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343fc6b26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) 01:03:23 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 01:03:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') futex(&(0x7f0000001ac0), 0x3, 0x0, &(0x7f0000000080), &(0x7f0000001c40), 0x0) 01:03:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x20000000000001a0, &(0x7f0000000080)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x4}}}}}, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 01:03:23 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x20000000000001a0, &(0x7f0000000080)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x4}}}}}, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) [ 138.609067] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 138.616556] netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. 01:03:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') futex(&(0x7f0000001ac0), 0x3, 0x0, &(0x7f0000000080), &(0x7f0000001c40), 0x0) 01:03:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x20) 01:03:23 executing program 1: r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343fc6b26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) 01:03:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002498)) 01:03:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) [ 138.833669] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 138.873534] netlink: 'syz-executor1': attribute type 4 has an invalid length. 01:03:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x20000000000001a0, &(0x7f0000000080)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x4}}}}}, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 01:03:23 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 01:03:23 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x20000000000001a0, &(0x7f0000000080)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x4}}}}}, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) [ 138.881003] netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. 01:03:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x1f, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 01:03:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002498)) 01:03:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000691ff2)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='nfs4\x00', 0x0, &(0x7f0000dedf2f)='v4') 01:03:23 executing program 4: mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x121e000, 0x800}, 0x18) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) 01:03:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 01:03:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000140)=""/246) close(r1) 01:03:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x1f, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 01:03:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002498)) [ 139.201208] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 01:03:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000691ff2)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='nfs4\x00', 0x0, &(0x7f0000dedf2f)='v4') 01:03:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x20) 01:03:23 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000080), 0x0) 01:03:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 01:03:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002498)) 01:03:23 executing program 4: mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x121e000, 0x800}, 0x18) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) 01:03:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x1f, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 01:03:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000140)=""/246) close(r1) 01:03:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000691ff2)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='nfs4\x00', 0x0, &(0x7f0000dedf2f)='v4') 01:03:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000140)=""/246) close(r1) 01:03:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 139.520287] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 01:03:24 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000080), 0x0) 01:03:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x1f, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 01:03:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) mount(&(0x7f0000691ff2)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='nfs4\x00', 0x0, &(0x7f0000dedf2f)='v4') 01:03:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 01:03:24 executing program 4: mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x121e000, 0x800}, 0x18) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) 01:03:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000140)=""/246) close(r1) 01:03:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x20) 01:03:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000140)=""/246) close(r1) 01:03:24 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000080), 0x0) 01:03:24 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000002c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c034a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000000c0)={[{@dax='dax'}]}) 01:03:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x8, 0x2) 01:03:24 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="92fb"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="d940490f01cf0f20df67660f3880900030c7442400fa3c0000c744240288990000c7442406000000000f01142464f40f01c866b852000f00d80f01df66baf80cb8ff0ec788ef66bafc0cb0c5ee"}], 0x300, 0x1a, &(0x7f00000003c0), 0x70ac483d0fc32e4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:24 executing program 4: mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x121e000, 0x800}, 0x18) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) 01:03:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000140)=""/246) close(r1) 01:03:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x8, 0x2) 01:03:24 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000080), 0x0) [ 140.198245] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 140.228800] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 140.236901] XFS (loop1): DAX unsupported by block device. Turning off DAX. 01:03:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000140)=""/246) close(r1) 01:03:24 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bd120000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r2, r1, 0xa}, 0x10) 01:03:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x8, 0x2) [ 140.291840] attempt to access beyond end of device [ 140.297043] loop1: rw=4096, want=32768, limit=2 01:03:24 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="92fb"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="d940490f01cf0f20df67660f3880900030c7442400fa3c0000c744240288990000c7442406000000000f01142464f40f01c866b852000f00d80f01df66baf80cb8ff0ec788ef66bafc0cb0c5ee"}], 0x300, 0x1a, &(0x7f00000003c0), 0x70ac483d0fc32e4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 140.345755] XFS (loop1): last sector read failed 01:03:24 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") listen(r0, 0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}, 0xb) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) sendto$inet6(r2, &(0x7f0000000180)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) [ 140.444510] [ 140.446744] ********************************************************** [ 140.453753] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 140.460707] ** ** [ 140.467584] ** trace_printk() being used. Allocating extra memory. ** [ 140.474355] ** ** [ 140.481145] ** This means that this is a DEBUG kernel and it is ** [ 140.487945] ** unsafe for production use. ** 01:03:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x8, 0x2) [ 140.494863] ** ** [ 140.501662] ** If you see this message and you are not debugging ** [ 140.508447] ** the kernel, report this immediately to your vendor! ** [ 140.515231] ** ** [ 140.522018] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 140.528883] ********************************************************** 01:03:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x20) 01:03:25 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000002c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c034a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000000c0)={[{@dax='dax'}]}) 01:03:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0x8400ae8e, &(0x7f0000000080)) 01:03:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x4, 0x0, {0x0, 0x0, 0x0, 0x9, 0x0, 0x80000}}) close(r1) 01:03:25 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305710, &(0x7f0000000500)) 01:03:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="92fb"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="d940490f01cf0f20df67660f3880900030c7442400fa3c0000c744240288990000c7442406000000000f01142464f40f01c866b852000f00d80f01df66baf80cb8ff0ec788ef66bafc0cb0c5ee"}], 0x300, 0x1a, &(0x7f00000003c0), 0x70ac483d0fc32e4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 140.768278] rtc_cmos 00:00: Alarms can be up to one day in the future [ 140.804513] rtc_cmos 00:00: Alarms can be up to one day in the future 01:03:25 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305710, &(0x7f0000000500)) [ 140.837251] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 140.859935] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 140.869773] XFS (loop1): DAX unsupported by block device. Turning off DAX. 01:03:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x4, 0x0, {0x0, 0x0, 0x0, 0x9, 0x0, 0x80000}}) close(r1) [ 140.914825] attempt to access beyond end of device [ 140.919999] loop1: rw=4096, want=32768, limit=2 01:03:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="92fb"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="d940490f01cf0f20df67660f3880900030c7442400fa3c0000c744240288990000c7442406000000000f01142464f40f01c866b852000f00d80f01df66baf80cb8ff0ec788ef66bafc0cb0c5ee"}], 0x300, 0x1a, &(0x7f00000003c0), 0x70ac483d0fc32e4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 140.972801] XFS (loop1): last sector read failed 01:03:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0x8400ae8e, &(0x7f0000000080)) 01:03:25 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) pwrite64(r0, &(0x7f0000001200)='?', 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001240)={0x8}, &(0x7f0000002280), 0x1000) [ 141.041640] rtc_cmos 00:00: Alarms can be up to one day in the future 01:03:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x4, 0x0, {0x0, 0x0, 0x0, 0x9, 0x0, 0x80000}}) close(r1) 01:03:25 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305710, &(0x7f0000000500)) 01:03:25 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000002c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c034a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000000c0)={[{@dax='dax'}]}) 01:03:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) close(r1) [ 141.219013] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.232361] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.239540] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.246516] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.253422] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.260106] rtc rtc0: __rtc_set_alarm: err=-22 01:03:25 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "d050ac2a1a6a367f0ce1a1af3963a712"}) [ 141.363216] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 141.371171] XFS (loop1): DAX unsupported by block device. Turning off DAX. 01:03:25 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305710, &(0x7f0000000500)) 01:03:25 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) pwrite64(r0, &(0x7f0000001200)='?', 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001240)={0x8}, &(0x7f0000002280), 0x1000) 01:03:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x4, 0x0, {0x0, 0x0, 0x0, 0x9, 0x0, 0x80000}}) close(r1) 01:03:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0x8400ae8e, &(0x7f0000000080)) 01:03:25 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "d050ac2a1a6a367f0ce1a1af3963a712"}) [ 141.455914] attempt to access beyond end of device [ 141.461181] loop1: rw=4096, want=32768, limit=2 [ 141.468761] XFS (loop1): last sector read failed 01:03:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0xffffffffffffff87, &(0x7f0000000080), 0x0, &(0x7f0000002380)=""/2, 0x2}}], 0x400006c, 0x1a000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}}, 0x0) [ 141.545457] rtc_cmos 00:00: Alarms can be up to one day in the future 01:03:26 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "d050ac2a1a6a367f0ce1a1af3963a712"}) 01:03:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x30, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 01:03:26 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) pwrite64(r0, &(0x7f0000001200)='?', 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001240)={0x8}, &(0x7f0000002280), 0x1000) 01:03:26 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000002c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c034a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000000c0)={[{@dax='dax'}]}) 01:03:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000040)=0x8) 01:03:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0x8400ae8e, &(0x7f0000000080)) 01:03:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0xffffffffffffff87, &(0x7f0000000080), 0x0, &(0x7f0000002380)=""/2, 0x2}}], 0x400006c, 0x1a000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}}, 0x0) 01:03:26 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "d050ac2a1a6a367f0ce1a1af3963a712"}) [ 141.816455] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 141.824635] XFS (loop1): DAX unsupported by block device. Turning off DAX. 01:03:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x30, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 01:03:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) close(r1) 01:03:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000040)=0x8) 01:03:26 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) pwrite64(r0, &(0x7f0000001200)='?', 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001240)={0x8}, &(0x7f0000002280), 0x1000) [ 141.927048] attempt to access beyond end of device [ 141.932220] loop1: rw=4096, want=32768, limit=2 01:03:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) dup2(r3, r4) [ 141.989669] XFS (loop1): last sector read failed 01:03:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x30, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 01:03:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0xffffffffffffff87, &(0x7f0000000080), 0x0, &(0x7f0000002380)=""/2, 0x2}}], 0x400006c, 0x1a000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}}, 0x0) 01:03:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1) 01:03:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x1c4}, 0xfffffea1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000000040)) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14}, 0x14) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) tkill(r1, 0x15) 01:03:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000040)=0x8) [ 142.231607] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.238587] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.245544] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.252442] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.259161] rtc rtc0: __rtc_set_alarm: err=-22 01:03:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x30, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 01:03:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1) 01:03:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000002, 0x0) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$int_in(r1, 0xc00008c004500a, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x12, r1, 0x0) 01:03:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0xffffffffffffff87, &(0x7f0000000080), 0x0, &(0x7f0000002380)=""/2, 0x2}}], 0x400006c, 0x1a000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}}, 0x0) 01:03:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) close(r1) 01:03:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000040)=0x8) 01:03:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 01:03:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1) 01:03:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000002, 0x0) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$int_in(r1, 0xc00008c004500a, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x12, r1, 0x0) 01:03:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) dup2(r3, r4) 01:03:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) dup2(r3, r4) 01:03:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@routing, 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000), 0x0) 01:03:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x1c4}, 0xfffffea1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000000040)) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14}, 0x14) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) tkill(r1, 0x15) 01:03:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1) 01:03:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000002, 0x0) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$int_in(r1, 0xc00008c004500a, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x12, r1, 0x0) 01:03:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@routing, 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000), 0x0) 01:03:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 01:03:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) close(r1) 01:03:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000002, 0x0) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$int_in(r1, 0xc00008c004500a, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x12, r1, 0x0) 01:03:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 01:03:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@routing, 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000), 0x0) 01:03:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) dup2(r3, r4) 01:03:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 01:03:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x1c4}, 0xfffffea1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000000040)) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14}, 0x14) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) tkill(r1, 0x15) 01:03:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) dup2(r3, r4) 01:03:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@routing, 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000), 0x0) 01:03:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x1c4}, 0xfffffea1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000000040)) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14}, 0x14) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) tkill(r1, 0x15) 01:03:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 01:03:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 01:03:27 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) clone(0xf01f00, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0), &(0x7f00000001c0)) 01:03:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) add_key(&(0x7f0000008740)='trusted\x00', &(0x7f0000008780), &(0x7f00000087c0), 0x0, 0xfffffffffffffffd) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000140)={0x0, r2+10000000}, &(0x7f0000000180), 0x8) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:03:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 01:03:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x1c4}, 0xfffffea1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000000040)) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14}, 0x14) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) tkill(r1, 0x15) 01:03:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x1c4}, 0xfffffea1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000000040)) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14}, 0x14) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) tkill(r1, 0x15) 01:03:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) dup2(r3, r4) 01:03:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000040)=""/124, 0x7c) 01:03:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) dup2(r3, r4) 01:03:28 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xffffd034}, {0x6}]}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x425}, 0x14}}, 0x0) 01:03:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000040)=""/124, 0x7c) 01:03:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x1c4}, 0xfffffea1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000000040)) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14}, 0x14) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) tkill(r1, 0x15) 01:03:28 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xffffd034}, {0x6}]}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x425}, 0x14}}, 0x0) 01:03:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000001b40)=[{&(0x7f0000000280), 0x0, 0x8001}], 0x0, &(0x7f0000001c00)={[{@localflocks='localflocks'}]}) 01:03:28 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xffffd034}, {0x6}]}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x425}, 0x14}}, 0x0) [ 143.788117] attempt to access beyond end of device [ 143.793506] loop4: rw=4096, want=136, limit=128 [ 143.798428] gfs2: error 10 reading superblock 01:03:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000040)=""/124, 0x7c) 01:03:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) [ 143.866099] attempt to access beyond end of device [ 143.871187] loop4: rw=4096, want=136, limit=128 [ 143.876012] gfs2: error 10 reading superblock 01:03:28 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) clone(0xf01f00, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0), &(0x7f00000001c0)) 01:03:28 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ppoll(&(0x7f00000002c0)=[{r1}, {r2}, {r1}], 0x3, &(0x7f0000000340), &(0x7f00000003c0), 0x8) 01:03:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x1a, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='security.s'], &(0x7f0000000240)='security.capabimity\x00', 0x14, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 01:03:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) 01:03:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000040)=""/124, 0x7c) 01:03:28 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0xc811, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 01:03:28 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xffffd034}, {0x6}]}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x425}, 0x14}}, 0x0) 01:03:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x400000019) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000140)) 01:03:28 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 01:03:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x400000019) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000140)) 01:03:28 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ppoll(&(0x7f00000002c0)=[{r1}, {r2}, {r1}], 0x3, &(0x7f0000000340), &(0x7f00000003c0), 0x8) 01:03:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) 01:03:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) 01:03:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80044501, &(0x7f0000000140)=""/208) 01:03:28 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0xc811, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 01:03:29 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 01:03:29 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) clone(0xf01f00, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0), &(0x7f00000001c0)) 01:03:29 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ppoll(&(0x7f00000002c0)=[{r1}, {r2}, {r1}], 0x3, &(0x7f0000000340), &(0x7f00000003c0), 0x8) 01:03:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x400000019) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000140)) 01:03:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80044501, &(0x7f0000000140)=""/208) 01:03:29 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) 01:03:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) 01:03:29 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0xc811, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 01:03:29 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 01:03:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80044501, &(0x7f0000000140)=""/208) 01:03:29 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 01:03:29 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0xc811, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 01:03:29 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 01:03:29 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ppoll(&(0x7f00000002c0)=[{r1}, {r2}, {r1}], 0x3, &(0x7f0000000340), &(0x7f00000003c0), 0x8) 01:03:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x400000019) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000140)) 01:03:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) 01:03:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80044501, &(0x7f0000000140)=""/208) 01:03:30 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) clone(0xf01f00, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0), &(0x7f00000001c0)) 01:03:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x2a3) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000340), 0x10) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x9) 01:03:30 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 01:03:30 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x20000000008, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x10) 01:03:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1e82f) close(r2) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/251, 0xfb}], 0x1, &(0x7f0000000380)=""/229, 0xe5}}, {{&(0x7f00000027c0)=@hci, 0x80, &(0x7f0000002940)}}], 0x2, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)={'syz0'}, 0x34000) 01:03:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18}, 0x20) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r1, 0x0) close(r1) 01:03:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x11) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="79b960db8d62828982cedee8928c6822b324fef404130e68ff4e87d94ea0b7774a4119532dddf7905dbc3fe91a1ff362682c87ba0031924a8d406fac195116afbdb941d3ee75300e035c571541af7d73c9e4b2c0290d0ba4913299190e60ed79f86c", 0x62}], 0x1) 01:03:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) 01:03:30 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x20000000008, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x10) 01:03:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x11) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="79b960db8d62828982cedee8928c6822b324fef404130e68ff4e87d94ea0b7774a4119532dddf7905dbc3fe91a1ff362682c87ba0031924a8d406fac195116afbdb941d3ee75300e035c571541af7d73c9e4b2c0290d0ba4913299190e60ed79f86c", 0x62}], 0x1) 01:03:30 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 01:03:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x2a3) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000340), 0x10) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x9) 01:03:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r2}, 0xc) 01:03:30 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x20000000008, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x10) 01:03:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1e82f) close(r2) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/251, 0xfb}], 0x1, &(0x7f0000000380)=""/229, 0xe5}}, {{&(0x7f00000027c0)=@hci, 0x80, &(0x7f0000002940)}}], 0x2, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)={'syz0'}, 0x34000) 01:03:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1e82f) close(r2) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/251, 0xfb}], 0x1, &(0x7f0000000380)=""/229, 0xe5}}, {{&(0x7f00000027c0)=@hci, 0x80, &(0x7f0000002940)}}], 0x2, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)={'syz0'}, 0x34000) 01:03:31 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x20000000008, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x10) 01:03:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x11) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="79b960db8d62828982cedee8928c6822b324fef404130e68ff4e87d94ea0b7774a4119532dddf7905dbc3fe91a1ff362682c87ba0031924a8d406fac195116afbdb941d3ee75300e035c571541af7d73c9e4b2c0290d0ba4913299190e60ed79f86c", 0x62}], 0x1) 01:03:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x2a3) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000340), 0x10) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x9) 01:03:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1e82f) close(r2) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/251, 0xfb}], 0x1, &(0x7f0000000380)=""/229, 0xe5}}, {{&(0x7f00000027c0)=@hci, 0x80, &(0x7f0000002940)}}], 0x2, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)={'syz0'}, 0x34000) 01:03:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1e82f) close(r2) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/251, 0xfb}], 0x1, &(0x7f0000000380)=""/229, 0xe5}}, {{&(0x7f00000027c0)=@hci, 0x80, &(0x7f0000002940)}}], 0x2, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)={'syz0'}, 0x34000) 01:03:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18}, 0x20) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r1, 0x0) close(r1) 01:03:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b10b9386", 0x4}], 0x1, &(0x7f0000000200)}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xe2b, 0x4) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) 01:03:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b10b9386", 0x4}], 0x1, &(0x7f0000000200)}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xe2b, 0x4) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) 01:03:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x2a3) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000340), 0x10) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x9) 01:03:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x11) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="79b960db8d62828982cedee8928c6822b324fef404130e68ff4e87d94ea0b7774a4119532dddf7905dbc3fe91a1ff362682c87ba0031924a8d406fac195116afbdb941d3ee75300e035c571541af7d73c9e4b2c0290d0ba4913299190e60ed79f86c", 0x62}], 0x1) 01:03:31 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="64d0"], 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:03:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000300)={0x2, 0x0, [0x48b]}) 01:03:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b10b9386", 0x4}], 0x1, &(0x7f0000000200)}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xe2b, 0x4) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) 01:03:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1e82f) close(r2) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/251, 0xfb}], 0x1, &(0x7f0000000380)=""/229, 0xe5}}, {{&(0x7f00000027c0)=@hci, 0x80, &(0x7f0000002940)}}], 0x2, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)={'syz0'}, 0x34000) 01:03:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r1, 0x5, &(0x7f0000000940), &(0x7f0000000000)) 01:03:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x1e82f) close(r2) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0xfdce, 0x0) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/251, 0xfb}], 0x1, &(0x7f0000000380)=""/229, 0xe5}}, {{&(0x7f00000027c0)=@hci, 0x80, &(0x7f0000002940)}}], 0x2, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)={'syz0'}, 0x34000) 01:03:31 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000012000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3000}) 01:03:31 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="64d0"], 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:03:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b10b9386", 0x4}], 0x1, &(0x7f0000000200)}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xe2b, 0x4) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) 01:03:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r1, 0x5, &(0x7f0000000940), &(0x7f0000000000)) 01:03:31 executing program 3: personality(0x1bb2baf3005ac137) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) 01:03:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18}, 0x20) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r1, 0x0) close(r1) 01:03:32 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/105, 0xffffff62) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) 01:03:32 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="64d0"], 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:03:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, &(0x7f0000000280)) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x280a8, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x7ffffffffffffe}}]}) 01:03:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r1, 0x5, &(0x7f0000000940), &(0x7f0000000000)) 01:03:32 executing program 3: personality(0x1bb2baf3005ac137) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) 01:03:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) 01:03:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") prctl$setmm(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil) prctl$setmm(0x23, 0x4000000000000001, &(0x7f0000ff1000/0x2000)=nil) 01:03:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, &(0x7f0000000280)) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x280a8, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x7ffffffffffffe}}]}) 01:03:32 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="64d0"], 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:03:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r1, 0x5, &(0x7f0000000940), &(0x7f0000000000)) 01:03:32 executing program 3: personality(0x1bb2baf3005ac137) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) 01:03:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, &(0x7f0000000280)) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x280a8, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x7ffffffffffffe}}]}) 01:03:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") prctl$setmm(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil) prctl$setmm(0x23, 0x4000000000000001, &(0x7f0000ff1000/0x2000)=nil) 01:03:32 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="b5") socket(0xa, 0x1, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000240)=0x6e) sched_setaffinity(0x0, 0xfffffffffffffd8b, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000016c0)) pivot_root(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0)='./file0\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)="2f70726f632f737900080000742f697076342f76732f73ec6f7070795f74637008", 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)={[{}]}) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)='./file0/file1\x00', &(0x7f0000000500)='v7\x00', 0x228000, &(0x7f0000000540)) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000240)='./file0/file1\x00', 0x7, 0x1, &(0x7f00000028c0)=[{&(0x7f0000000680)="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", 0xb3b}], 0x80440, &(0x7f0000002980)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 01:03:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) [ 148.024098] FAT-fs (loop1): bogus number of reserved sectors [ 148.030499] FAT-fs (loop1): Can't find a valid FAT filesystem [ 148.095792] FAT-fs (loop1): bogus number of reserved sectors [ 148.101972] FAT-fs (loop1): Can't find a valid FAT filesystem [ 148.116831] print_req_error: I/O error, dev loop1, sector 0 [ 148.124507] print_req_error: I/O error, dev loop1, sector 0 [ 148.130811] Buffer I/O error on dev loop1, logical block 0, async page read 01:03:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18}, 0x20) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r1, 0x0) close(r1) 01:03:32 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/105, 0xffffff62) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) 01:03:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, &(0x7f0000000280)) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x280a8, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x7ffffffffffffe}}]}) 01:03:32 executing program 7: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$FS_IOC_FSSETXATTR(r1, 0x40087602, &(0x7f0000000200)) unlink(&(0x7f00000000c0)='./control/file0\x00') close(r0) 01:03:32 executing program 3: personality(0x1bb2baf3005ac137) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) 01:03:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") prctl$setmm(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil) prctl$setmm(0x23, 0x4000000000000001, &(0x7f0000ff1000/0x2000)=nil) 01:03:32 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="b5") socket(0xa, 0x1, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000240)=0x6e) sched_setaffinity(0x0, 0xfffffffffffffd8b, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000016c0)) pivot_root(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0)='./file0\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)="2f70726f632f737900080000742f697076342f76732f73ec6f7070795f74637008", 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)={[{}]}) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)='./file0/file1\x00', &(0x7f0000000500)='v7\x00', 0x228000, &(0x7f0000000540)) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000240)='./file0/file1\x00', 0x7, 0x1, &(0x7f00000028c0)=[{&(0x7f0000000680)="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", 0xb3b}], 0x80440, &(0x7f0000002980)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 01:03:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) 01:03:32 executing program 2: bpf$BPF_PROG_TEST_RUN(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x6b, &(0x7f0000000380), &(0x7f0000000480)=""/107}, 0x28) 01:03:32 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f00000001c0), 0x0, 0x10000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) pread64(r1, &(0x7f0000002180)=""/4096, 0xfffffeec, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 01:03:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") prctl$setmm(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil) prctl$setmm(0x23, 0x4000000000000001, &(0x7f0000ff1000/0x2000)=nil) 01:03:33 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="0b964c0f080319", 0x7}], 0x1) 01:03:33 executing program 2: bpf$BPF_PROG_TEST_RUN(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x6b, &(0x7f0000000380), &(0x7f0000000480)=""/107}, 0x28) 01:03:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) 01:03:33 executing program 7: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$FS_IOC_FSSETXATTR(r1, 0x40087602, &(0x7f0000000200)) unlink(&(0x7f00000000c0)='./control/file0\x00') close(r0) [ 148.641361] FAT-fs (loop1): bogus number of reserved sectors [ 148.647629] FAT-fs (loop1): Can't find a valid FAT filesystem 01:03:33 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="0b964c0f080319", 0x7}], 0x1) 01:03:33 executing program 2: bpf$BPF_PROG_TEST_RUN(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x6b, &(0x7f0000000380), &(0x7f0000000480)=""/107}, 0x28) 01:03:33 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/105, 0xffffff62) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) 01:03:33 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="0b964c0f080319", 0x7}], 0x1) 01:03:33 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="b5") socket(0xa, 0x1, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000240)=0x6e) sched_setaffinity(0x0, 0xfffffffffffffd8b, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000016c0)) pivot_root(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0)='./file0\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)="2f70726f632f737900080000742f697076342f76732f73ec6f7070795f74637008", 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)={[{}]}) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)='./file0/file1\x00', &(0x7f0000000500)='v7\x00', 0x228000, &(0x7f0000000540)) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000240)='./file0/file1\x00', 0x7, 0x1, &(0x7f00000028c0)=[{&(0x7f0000000680)="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", 0xb3b}], 0x80440, &(0x7f0000002980)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 01:03:33 executing program 2: bpf$BPF_PROG_TEST_RUN(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x6b, &(0x7f0000000380), &(0x7f0000000480)=""/107}, 0x28) 01:03:33 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 01:03:33 executing program 7: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$FS_IOC_FSSETXATTR(r1, 0x40087602, &(0x7f0000000200)) unlink(&(0x7f00000000c0)='./control/file0\x00') close(r0) 01:03:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"07000300000000000000000000001e5c", 0x2000d}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 01:03:33 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="0b964c0f080319", 0x7}], 0x1) [ 149.339754] FAT-fs (loop1): bogus number of reserved sectors [ 149.343792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.345974] FAT-fs (loop1): Can't find a valid FAT filesystem [ 149.379124] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:03:33 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f00000001c0), 0x0, 0x10000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) pread64(r1, &(0x7f0000002180)=""/4096, 0xfffffeec, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 01:03:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff7d440000bfa100000000000007010000f8ffffffb702000003000000bf130000000000008500000006000000b700000000009b999500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 01:03:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000080)=0x11e) 01:03:33 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="b5") socket(0xa, 0x1, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000240)=0x6e) sched_setaffinity(0x0, 0xfffffffffffffd8b, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000016c0)) pivot_root(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0)='./file0\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)="2f70726f632f737900080000742f697076342f76732f73ec6f7070795f74637008", 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)={[{}]}) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)='./file0/file1\x00', &(0x7f0000000500)='v7\x00', 0x228000, &(0x7f0000000540)) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000240)='./file0/file1\x00', 0x7, 0x1, &(0x7f00000028c0)=[{&(0x7f0000000680)="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", 0xb3b}], 0x80440, &(0x7f0000002980)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 01:03:34 executing program 7: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$FS_IOC_FSSETXATTR(r1, 0x40087602, &(0x7f0000000200)) unlink(&(0x7f00000000c0)='./control/file0\x00') close(r0) 01:03:34 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000000)=r0, 0x4) 01:03:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000080)=0x11e) 01:03:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000080)=0x11e) [ 149.759957] FAT-fs (loop1): bogus number of reserved sectors [ 149.768397] FAT-fs (loop1): Can't find a valid FAT filesystem [ 149.992620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:03:34 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/105, 0xffffff62) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) 01:03:34 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000000)=r0, 0x4) 01:03:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000080)=0x11e) 01:03:34 executing program 7: r0 = socket(0x1b, 0xffffffffffffffff, 0x7fff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x1103, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2}}, 0xfe38) 01:03:34 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000000)) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0xfffffffffffffffe}) 01:03:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff7d440000bfa100000000000007010000f8ffffffb702000003000000bf130000000000008500000006000000b700000000009b999500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 01:03:34 executing program 0: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) sendto$inet6(r0, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x800000000000d, @mcast2}, 0x1c) 01:03:34 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000000)=r0, 0x4) 01:03:34 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f00000001c0), 0x0, 0x10000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) pread64(r1, &(0x7f0000002180)=""/4096, 0xfffffeec, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 01:03:34 executing program 7: r0 = socket(0x1b, 0xffffffffffffffff, 0x7fff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x1103, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2}}, 0xfe38) 01:03:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"07000300000000000000000000001e5c", 0x2000d}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 01:03:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff7d440000bfa100000000000007010000f8ffffffb702000003000000bf130000000000008500000006000000b700000000009b999500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 01:03:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003680)={&(0x7f0000000000), 0xc, &(0x7f0000001880)={&(0x7f0000003140)=@newsa={0x138, 0x10, 0x23, 0x0, 0x0, {{@in6, @in6=@dev}, {@in6=@mcast1, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'crc32-generic\x00'}}}]}, 0x138}}, 0x0) 01:03:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff7d440000bfa100000000000007010000f8ffffffb702000003000000bf130000000000008500000006000000b700000000009b999500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 01:03:34 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000000)=r0, 0x4) 01:03:34 executing program 7: r0 = socket(0x1b, 0xffffffffffffffff, 0x7fff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x1103, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2}}, 0xfe38) [ 150.505095] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:03:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003680)={&(0x7f0000000000), 0xc, &(0x7f0000001880)={&(0x7f0000003140)=@newsa={0x138, 0x10, 0x23, 0x0, 0x0, {{@in6, @in6=@dev}, {@in6=@mcast1, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'crc32-generic\x00'}}}]}, 0x138}}, 0x0) 01:03:35 executing program 1: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) r1 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, r0, 0x0) fcntl$addseals(r0, 0x409, 0x4) fallocate(r0, 0x0, 0x0, 0xeb96) 01:03:35 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000000)) 01:03:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x4040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg(r2, &(0x7f0000001640)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:03:35 executing program 7: r0 = socket(0x1b, 0xffffffffffffffff, 0x7fff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x1103, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2}}, 0xfe38) 01:03:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"07000300000000000000000000001e5c", 0x2000d}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 01:03:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b7020000ff000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000086a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0xa0008000, 0xe, 0xf1, &(0x7f0000000380)="073f51d17dd7c73974c8874b48e0", &(0x7f0000000600)=""/241, 0x80200}, 0x28) 01:03:35 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000000)) [ 151.126072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:03:35 executing program 1: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) r1 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, r0, 0x0) fcntl$addseals(r0, 0x409, 0x4) fallocate(r0, 0x0, 0x0, 0xeb96) 01:03:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x4040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg(r2, &(0x7f0000001640)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:03:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003680)={&(0x7f0000000000), 0xc, &(0x7f0000001880)={&(0x7f0000003140)=@newsa={0x138, 0x10, 0x23, 0x0, 0x0, {{@in6, @in6=@dev}, {@in6=@mcast1, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'crc32-generic\x00'}}}]}, 0x138}}, 0x0) 01:03:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x4040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg(r2, &(0x7f0000001640)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:03:35 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f00000001c0), 0x0, 0x10000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) pread64(r1, &(0x7f0000002180)=""/4096, 0xfffffeec, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 01:03:35 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000000)) 01:03:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003680)={&(0x7f0000000000), 0xc, &(0x7f0000001880)={&(0x7f0000003140)=@newsa={0x138, 0x10, 0x23, 0x0, 0x0, {{@in6, @in6=@dev}, {@in6=@mcast1, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'crc32-generic\x00'}}}]}, 0x138}}, 0x0) 01:03:35 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000000)) 01:03:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)) 01:03:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 01:03:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x8e9) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) dup3(r2, r1, 0x0) 01:03:36 executing program 1: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) r1 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, r0, 0x0) fcntl$addseals(r0, 0x409, 0x4) fallocate(r0, 0x0, 0x0, 0xeb96) 01:03:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x4040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg(r2, &(0x7f0000001640)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:03:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"07000300000000000000000000001e5c", 0x2000d}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 01:03:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x4040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg(r2, &(0x7f0000001640)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:03:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = socket(0xa, 0x3, 0x6) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 01:03:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b7020000ff000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000086a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0xa0008000, 0xe, 0xf1, &(0x7f0000000380)="073f51d17dd7c73974c8874b48e0", &(0x7f0000000600)=""/241, 0x80200}, 0x28) 01:03:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x4040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg(r2, &(0x7f0000001640)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:03:36 executing program 1: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) r1 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, r0, 0x0) fcntl$addseals(r0, 0x409, 0x4) fallocate(r0, 0x0, 0x0, 0xeb96) 01:03:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000480), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x1c, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, @fd}]}, 0x1c}}, 0x0) 01:03:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x4040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg(r2, &(0x7f0000001640)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:03:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) [ 152.232122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:03:36 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000001880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:03:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x8e9) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) dup3(r2, r1, 0x0) 01:03:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000480), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x1c, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, @fd}]}, 0x1c}}, 0x0) 01:03:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) 01:03:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000480), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x1c, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, @fd}]}, 0x1c}}, 0x0) 01:03:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x8e9) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) dup3(r2, r1, 0x0) 01:03:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x8e9) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) dup3(r2, r1, 0x0) 01:03:37 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xffffca88}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000080)) 01:03:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) [ 153.069485] *** Guest State *** [ 153.073472] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 153.082445] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 153.091529] CR3 = 0x0000000000000000 [ 153.095512] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 153.101590] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 153.107722] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 153.114694] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 153.122832] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 153.131124] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 153.139235] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 153.147331] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 153.155415] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 153.163486] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 153.171585] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 153.179670] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 153.187768] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 153.195863] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 153.202379] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 153.210025] Interruptibility = 00000001 ActivityState = 00000000 [ 153.216344] *** Host State *** [ 153.219664] RIP = 0xffffffff812079a4 RSP = 0xffff88019a3cf350 [ 153.225716] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 153.232225] FSBase=00007f3180dbd700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 153.240224] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 153.246237] CR0=0000000080050033 CR3=00000001c1f3a000 CR4=00000000001426e0 [ 153.253413] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 153.260217] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 153.266369] *** Control State *** [ 153.269913] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 153.276676] EntryControls=0000d1ff ExitControls=0023efff [ 153.282250] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 153.289335] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 153.296123] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 153.302801] reason=80000021 qualification=0000000000000000 [ 153.309250] IDTVectoring: info=00000000 errcode=00000000 [ 153.314810] TSC Offset = 0xffffffabcc21257c 01:03:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b7020000ff000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000086a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0xa0008000, 0xe, 0xf1, &(0x7f0000000380)="073f51d17dd7c73974c8874b48e0", &(0x7f0000000600)=""/241, 0x80200}, 0x28) 01:03:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) 01:03:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='b:5'], 0x3) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:03:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000480), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x1c, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, @fd}]}, 0x1c}}, 0x0) 01:03:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x8e9) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) dup3(r2, r1, 0x0) 01:03:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) [ 153.319239] EPT pointer = 0x00000001ace7601e 01:03:37 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1c) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) recvfrom$inet(r0, &(0x7f00000002c0)=""/248, 0x7b, 0x0, 0x0, 0x0) 01:03:37 executing program 5: r0 = socket(0x40000000002, 0x3, 0x67) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007740)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)=""/236, 0xec}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x5, &(0x7f00000006c0)=""/153, 0x99}}], 0x1, 0x0, &(0x7f00000079c0)={0x77359400}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680), 0x7c, &(0x7f0000000800)}, 0x8804) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs, 0x63) 01:03:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) [ 153.474554] *** Guest State *** [ 153.478017] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 153.487011] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 153.495944] CR3 = 0x0000000000000000 [ 153.499737] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 153.505793] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 153.511855] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 153.518656] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 153.526726] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 153.534844] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 153.542906] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 153.550974] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 153.559258] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 01:03:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) [ 153.567439] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 153.575505] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 153.584433] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 153.592627] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 153.600716] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 153.607258] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 153.614835] Interruptibility = 00000001 ActivityState = 00000000 [ 153.621232] *** Host State *** 01:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x8e9) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) dup3(r2, r1, 0x0) [ 153.624538] RIP = 0xffffffff812079a4 RSP = 0xffff88019b64f350 [ 153.630652] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 153.637164] FSBase=00007f3180d7b700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 153.645089] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 153.651083] CR0=0000000080050033 CR3=00000001c1f3a000 CR4=00000000001426f0 [ 153.658259] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 153.665064] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 153.671326] *** Control State *** [ 153.674868] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 153.681634] EntryControls=0000d1ff ExitControls=0023efff [ 153.687340] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 153.694377] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 153.701159] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 153.707849] reason=80000021 qualification=0000000000000000 [ 153.714267] IDTVectoring: info=00000000 errcode=00000000 [ 153.719838] TSC Offset = 0xffffffabcc21257c [ 153.724317] EPT pointer = 0x00000001ace7601e 01:03:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) [ 153.748140] raw_sendmsg: syz-executor5 forgot to set AF_INET. Fix it! 01:03:38 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:03:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1c) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) recvfrom$inet(r0, &(0x7f00000002c0)=""/248, 0x7b, 0x0, 0x0, 0x0) 01:03:38 executing program 5: r0 = socket(0x40000000002, 0x3, 0x67) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007740)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)=""/236, 0xec}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x5, &(0x7f00000006c0)=""/153, 0x99}}], 0x1, 0x0, &(0x7f00000079c0)={0x77359400}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680), 0x7c, &(0x7f0000000800)}, 0x8804) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs, 0x63) 01:03:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 01:03:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b7020000ff000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000086a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0xa0008000, 0xe, 0xf1, &(0x7f0000000380)="073f51d17dd7c73974c8874b48e0", &(0x7f0000000600)=""/241, 0x80200}, 0x28) 01:03:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) 01:03:38 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:03:38 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x8e9) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) dup3(r2, r1, 0x0) 01:03:38 executing program 5: r0 = socket(0x40000000002, 0x3, 0x67) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007740)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)=""/236, 0xec}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x5, &(0x7f00000006c0)=""/153, 0x99}}], 0x1, 0x0, &(0x7f00000079c0)={0x77359400}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680), 0x7c, &(0x7f0000000800)}, 0x8804) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs, 0x63) 01:03:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 01:03:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1c) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) recvfrom$inet(r0, &(0x7f00000002c0)=""/248, 0x7b, 0x0, 0x0, 0x0) 01:03:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 01:03:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:38 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:03:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1c) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) recvfrom$inet(r0, &(0x7f00000002c0)=""/248, 0x7b, 0x0, 0x0, 0x0) 01:03:38 executing program 5: r0 = socket(0x40000000002, 0x3, 0x67) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007740)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)=""/236, 0xec}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x5, &(0x7f00000006c0)=""/153, 0x99}}], 0x1, 0x0, &(0x7f00000079c0)={0x77359400}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680), 0x7c, &(0x7f0000000800)}, 0x8804) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs, 0x63) 01:03:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="96", 0x1}], 0x1, 0x0) lseek(r0, 0x0, 0x4) [ 154.501696] *** Guest State *** [ 154.505199] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 154.514183] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 154.523125] CR3 = 0x0000000000000000 [ 154.526941] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 154.533067] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 154.539169] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 154.545916] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 154.554093] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.562170] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.570242] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.578342] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.586430] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.594494] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 154.602669] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 154.610752] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 154.619100] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 154.627183] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 154.633751] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 154.641336] Interruptibility = 00000001 ActivityState = 00000000 [ 154.647676] *** Host State *** 01:03:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2283, &(0x7f0000000080)) 01:03:39 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 154.650989] RIP = 0xffffffff812079a4 RSP = 0xffff8801a858f350 [ 154.657108] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 154.663624] FSBase=00007f2dd09a0700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 154.671597] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 154.677592] CR0=0000000080050033 CR3=00000001ac799000 CR4=00000000001426e0 [ 154.684837] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 154.691624] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 154.697798] *** Control State *** [ 154.701350] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 154.708144] EntryControls=0000d1ff ExitControls=0023efff [ 154.713699] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 154.720824] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 154.727594] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 154.734275] reason=80000021 qualification=0000000000000000 [ 154.740699] IDTVectoring: info=00000000 errcode=00000000 [ 154.746254] TSC Offset = 0xffffffab0a6d4821 [ 154.750667] EPT pointer = 0x00000001b249d01e [ 154.805814] *** Guest State *** [ 154.809269] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 154.818348] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 154.827258] CR3 = 0x0000000000000000 [ 154.831064] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 154.837095] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 154.843343] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 154.850085] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 154.858141] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.866206] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.874259] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.882337] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.890393] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 154.898435] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 154.906478] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 154.914517] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 154.922574] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 154.930623] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 154.937113] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 154.944637] Interruptibility = 00000001 ActivityState = 00000000 [ 154.950928] *** Host State *** [ 154.954238] RIP = 0xffffffff812079a4 RSP = 0xffff880192a6f350 [ 154.960338] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 154.966866] FSBase=00007f3180dbd700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 154.974919] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 154.980876] CR0=0000000080050033 CR3=00000001d99ce000 CR4=00000000001426f0 [ 154.987956] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 154.994686] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 155.000789] *** Control State *** [ 155.004322] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 155.011053] EntryControls=0000d1ff ExitControls=0023efff [ 155.016588] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 155.023592] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 155.030323] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 155.036954] reason=80000021 qualification=0000000000000000 [ 155.043329] IDTVectoring: info=00000000 errcode=00000000 [ 155.048830] TSC Offset = 0xffffffaade215f35 [ 155.053207] EPT pointer = 0x00000001c86ad01e 01:03:39 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) sendmmsg$alg(r0, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="65aa0ee2ba94f53781dc324bcd084cb3624fdbc491fd078f42e14223746d0958a7378736d83edee94054d11d97d273ed22df984d1b147c61b82dedb2a99f", 0x3e}], 0x1}], 0x1, 0x0) 01:03:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) 01:03:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x400096) 01:03:39 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:03:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000180), 0x0) 01:03:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="96", 0x1}], 0x1, 0x0) lseek(r0, 0x0, 0x4) 01:03:39 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 155.227066] *** Guest State *** [ 155.230636] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 155.239603] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 155.248515] CR3 = 0x0000000000000000 [ 155.252353] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 155.258420] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 155.264484] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 155.271270] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 155.279495] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 155.287596] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 155.295702] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 155.303893] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 155.312008] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 155.320147] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 155.328228] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 155.336329] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 155.344439] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 155.352660] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 155.359422] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 155.366990] Interruptibility = 00000001 ActivityState = 00000000 [ 155.373301] *** Host State *** [ 155.376613] RIP = 0xffffffff812079a4 RSP = 0xffff880199a97350 [ 155.382696] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 155.389216] FSBase=00007f3180dbd700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 155.397605] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 155.403599] CR0=0000000080050033 CR3=00000001b3882000 CR4=00000000001426f0 [ 155.410744] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 155.417524] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 155.423644] *** Control State *** 01:03:39 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000a7dfff)}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:03:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="96", 0x1}], 0x1, 0x0) lseek(r0, 0x0, 0x4) 01:03:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x400096) 01:03:39 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) sendmmsg$alg(r0, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="65aa0ee2ba94f53781dc324bcd084cb3624fdbc491fd078f42e14223746d0958a7378736d83edee94054d11d97d273ed22df984d1b147c61b82dedb2a99f", 0x3e}], 0x1}], 0x1, 0x0) [ 155.427193] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 155.434011] EntryControls=0000d1ff ExitControls=0023efff [ 155.439566] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 155.446597] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 155.453364] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 155.460012] reason=80000021 qualification=0000000000000000 [ 155.466414] IDTVectoring: info=00000000 errcode=00000000 [ 155.471935] TSC Offset = 0xffffffaaa482b7b3 01:03:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) recvmmsg(r1, &(0x7f00000069c0)=[{{&(0x7f0000006240)=@ethernet, 0x80, &(0x7f0000006480), 0x0, &(0x7f00000064c0)=""/188, 0xbc}}], 0x1, 0x0, &(0x7f0000006c40)) 01:03:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) [ 155.476338] EPT pointer = 0x00000001ae3df01e [ 155.512621] rpcbind: RPC call returned error 22 01:03:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x400096) 01:03:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="96", 0x1}], 0x1, 0x0) lseek(r0, 0x0, 0x4) [ 155.545655] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:03:40 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) sendmmsg$alg(r0, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="65aa0ee2ba94f53781dc324bcd084cb3624fdbc491fd078f42e14223746d0958a7378736d83edee94054d11d97d273ed22df984d1b147c61b82dedb2a99f", 0x3e}], 0x1}], 0x1, 0x0) [ 155.590739] rpcbind: RPC call returned error 22 [ 155.602670] *** Guest State *** [ 155.606057] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 155.615014] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 155.623916] CR3 = 0x0000000000000000 [ 155.627733] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 155.633806] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 155.639880] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 155.646634] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 155.654727] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 155.662776] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 155.670842] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 155.678903] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 01:03:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) recvmmsg(r1, &(0x7f00000069c0)=[{{&(0x7f0000006240)=@ethernet, 0x80, &(0x7f0000006480), 0x0, &(0x7f00000064c0)=""/188, 0xbc}}], 0x1, 0x0, &(0x7f0000006c40)) [ 155.686968] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 155.695107] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 155.703190] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 155.711257] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 155.719478] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 155.727524] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 155.733996] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 155.741541] Interruptibility = 00000001 ActivityState = 00000000 [ 155.747856] *** Host State *** [ 155.751163] RIP = 0xffffffff812079a4 RSP = 0xffff8801968ef350 [ 155.757218] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 155.763723] FSBase=00007f2dd09a0700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 155.771587] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 155.777582] CR0=0000000080050033 CR3=00000001a9c7d000 CR4=00000000001426f0 [ 155.784668] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 155.791420] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 155.797537] *** Control State *** [ 155.801071] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 155.807794] EntryControls=0000d1ff ExitControls=0023efff [ 155.813342] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 155.820355] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 155.827114] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 155.833746] reason=80000021 qualification=0000000000000000 01:03:40 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) 01:03:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) recvmmsg(r1, &(0x7f00000069c0)=[{{&(0x7f0000006240)=@ethernet, 0x80, &(0x7f0000006480), 0x0, &(0x7f00000064c0)=""/188, 0xbc}}], 0x1, 0x0, &(0x7f0000006c40)) 01:03:40 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000a7dfff)}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 155.840147] IDTVectoring: info=00000000 errcode=00000000 [ 155.845652] TSC Offset = 0xffffffaa7028b580 [ 155.850063] EPT pointer = 0x00000001c2a7d01e 01:03:40 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) sendmmsg$alg(r0, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="65aa0ee2ba94f53781dc324bcd084cb3624fdbc491fd078f42e14223746d0958a7378736d83edee94054d11d97d273ed22df984d1b147c61b82dedb2a99f", 0x3e}], 0x1}], 0x1, 0x0) 01:03:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 01:03:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) recvmmsg(r1, &(0x7f00000069c0)=[{{&(0x7f0000006240)=@ethernet, 0x80, &(0x7f0000006480), 0x0, &(0x7f00000064c0)=""/188, 0xbc}}], 0x1, 0x0, &(0x7f0000006c40)) [ 155.946770] rpcbind: RPC call returned error 22 01:03:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) recvmmsg(r1, &(0x7f00000069c0)=[{{&(0x7f0000006240)=@ethernet, 0x80, &(0x7f0000006480), 0x0, &(0x7f00000064c0)=""/188, 0xbc}}], 0x1, 0x0, &(0x7f0000006c40)) 01:03:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:40 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) 01:03:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x400096) 01:03:40 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000a7dfff)}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:03:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) pread64(r1, &(0x7f0000000800)=""/240, 0xf0, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18}, 0x18) 01:03:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 01:03:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) recvmmsg(r1, &(0x7f00000069c0)=[{{&(0x7f0000006240)=@ethernet, 0x80, &(0x7f0000006480), 0x0, &(0x7f00000064c0)=""/188, 0xbc}}], 0x1, 0x0, &(0x7f0000006c40)) 01:03:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) recvmmsg(r1, &(0x7f00000069c0)=[{{&(0x7f0000006240)=@ethernet, 0x80, &(0x7f0000006480), 0x0, &(0x7f00000064c0)=""/188, 0xbc}}], 0x1, 0x0, &(0x7f0000006c40)) [ 156.191102] rpcbind: RPC call returned error 22 01:03:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)) 01:03:40 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000a7dfff)}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 156.304809] *** Guest State *** [ 156.308226] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 156.317232] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 156.326305] CR3 = 0x0000000000000000 [ 156.330104] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 156.336159] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 156.342233] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 156.349010] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 156.357187] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 156.365261] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 156.373379] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 156.381482] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 156.389926] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 01:03:40 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x25, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 01:03:40 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x3, &(0x7f0000000040)='dctcp\x00', 0x6) 01:03:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x1000, 0x61, 0x4}) unlink(&(0x7f0000000200)='./file0\x00') 01:03:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) [ 156.398116] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 156.406189] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 156.414320] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 156.422419] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 156.430517] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 156.437046] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 156.444643] Interruptibility = 00000001 ActivityState = 00000000 [ 156.450979] *** Host State *** [ 156.454305] RIP = 0xffffffff812079a4 RSP = 0xffff8801c30e7350 [ 156.460403] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 156.466916] FSBase=00007f2dd09a0700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 156.474791] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 156.480785] CR0=0000000080050033 CR3=00000001adff1000 CR4=00000000001426e0 [ 156.487880] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 156.494660] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 156.500798] *** Control State *** 01:03:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)) [ 156.504354] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 156.511105] EntryControls=0000d1ff ExitControls=0023efff [ 156.516659] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 156.523669] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 156.530443] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 156.537135] reason=80000021 qualification=0000000000000000 [ 156.543558] IDTVectoring: info=00000000 errcode=00000000 [ 156.549107] TSC Offset = 0xffffffaa10d13b45 [ 156.551005] rpcbind: RPC call returned error 22 [ 156.553522] EPT pointer = 0x000000019c2db01e 01:03:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x1000, 0x61, 0x4}) unlink(&(0x7f0000000200)='./file0\x00') 01:03:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7}, 0xffffffcb) 01:03:41 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x25, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 01:03:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) pread64(r1, &(0x7f0000000800)=""/240, 0xf0, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18}, 0x18) 01:03:41 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x3, &(0x7f0000000040)='dctcp\x00', 0x6) 01:03:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 01:03:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)) 01:03:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getitimer(0x0, &(0x7f0000000680)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 01:03:41 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x3, &(0x7f0000000040)='dctcp\x00', 0x6) 01:03:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x1000, 0x61, 0x4}) unlink(&(0x7f0000000200)='./file0\x00') 01:03:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)) 01:03:41 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x25, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 01:03:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000000c0)=ANY=[]) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f00000020c0), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x3, {0x2000000000000002, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) close(r0) 01:03:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x5, 0x160, [0x0, 0x20000400, 0x20000910, 0x20000b28], 0x0, &(0x7f0000000080), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'veth0_to_team\x00', 'veth0_to_bridge\x00', 'bridge_slave_0\x00', 'veth0_to_bond\x00', @broadcast, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8, {{0x7, 0x1}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x1d8) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xb7891e60387e7f1f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x8}, {}, {}, {}], 0x2217) 01:03:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getitimer(0x0, &(0x7f0000000680)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 01:03:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) pread64(r1, &(0x7f0000000800)=""/240, 0xf0, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18}, 0x18) 01:03:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x1000, 0x61, 0x4}) unlink(&(0x7f0000000200)='./file0\x00') 01:03:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7}, 0xffffffcb) 01:03:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x5, 0x160, [0x0, 0x20000400, 0x20000910, 0x20000b28], 0x0, &(0x7f0000000080), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'veth0_to_team\x00', 'veth0_to_bridge\x00', 'bridge_slave_0\x00', 'veth0_to_bond\x00', @broadcast, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8, {{0x7, 0x1}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x1d8) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xb7891e60387e7f1f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x8}, {}, {}, {}], 0x2217) 01:03:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x4000000000000027, &(0x7f0000000000)={@multicast1, @loopback, @remote}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x100000001, {{0x2, 0x0, @multicast1}}, 0x0, 0x2, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}]}, 0x190) 01:03:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getitimer(0x0, &(0x7f0000000680)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 01:03:42 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x3, &(0x7f0000000040)='dctcp\x00', 0x6) 01:03:42 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x25, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 01:03:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) pread64(r1, &(0x7f0000000800)=""/240, 0xf0, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18}, 0x18) 01:03:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000000c0)=ANY=[]) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f00000020c0), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x3, {0x2000000000000002, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) close(r0) 01:03:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x5, 0x160, [0x0, 0x20000400, 0x20000910, 0x20000b28], 0x0, &(0x7f0000000080), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'veth0_to_team\x00', 'veth0_to_bridge\x00', 'bridge_slave_0\x00', 'veth0_to_bond\x00', @broadcast, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8, {{0x7, 0x1}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x1d8) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xb7891e60387e7f1f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x8}, {}, {}, {}], 0x2217) 01:03:42 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x11, 0x4, &(0x7f0000000040), 0xfffffffffffffecc) 01:03:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getitimer(0x0, &(0x7f0000000680)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 01:03:42 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 01:03:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x4000000000000027, &(0x7f0000000000)={@multicast1, @loopback, @remote}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x100000001, {{0x2, 0x0, @multicast1}}, 0x0, 0x2, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}]}, 0x190) 01:03:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000000c0)=ANY=[]) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f00000020c0), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x3, {0x2000000000000002, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) close(r0) 01:03:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f00ff03f4f9002304000a04f5fe07000100020100020800038001c9a800", 0x24) 01:03:42 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x11, 0x4, &(0x7f0000000040), 0xfffffffffffffecc) [ 158.149424] netlink: 'syz-executor1': attribute type 1 has an invalid length. 01:03:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7}, 0xffffffcb) 01:03:42 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 01:03:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x5, 0x160, [0x0, 0x20000400, 0x20000910, 0x20000b28], 0x0, &(0x7f0000000080), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'veth0_to_team\x00', 'veth0_to_bridge\x00', 'bridge_slave_0\x00', 'veth0_to_bond\x00', @broadcast, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8, {{0x7, 0x1}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x1d8) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xb7891e60387e7f1f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x8}, {}, {}, {}], 0x2217) 01:03:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x4000000000000027, &(0x7f0000000000)={@multicast1, @loopback, @remote}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x100000001, {{0x2, 0x0, @multicast1}}, 0x0, 0x2, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}]}, 0x190) 01:03:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f00ff03f4f9002304000a04f5fe07000100020100020800038001c9a800", 0x24) 01:03:42 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x11, 0x4, &(0x7f0000000040), 0xfffffffffffffecc) 01:03:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000001540)=@ax25, 0x80, &(0x7f0000001940), 0x0, &(0x7f00000019c0)=""/104, 0x68}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r1, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000), 0x10) 01:03:43 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x11, 0x4, &(0x7f0000000040), 0xfffffffffffffecc) [ 158.560483] netlink: 'syz-executor1': attribute type 1 has an invalid length. 01:03:43 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 01:03:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x4000000000000027, &(0x7f0000000000)={@multicast1, @loopback, @remote}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x100000001, {{0x2, 0x0, @multicast1}}, 0x0, 0x2, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}]}, 0x190) 01:03:43 executing program 3: creat(&(0x7f0000000080)='./bus\x00', 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 01:03:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f00ff03f4f9002304000a04f5fe07000100020100020800038001c9a800", 0x24) 01:03:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000001540)=@ax25, 0x80, &(0x7f0000001940), 0x0, &(0x7f00000019c0)=""/104, 0x68}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r1, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000), 0x10) [ 158.746397] netlink: 'syz-executor1': attribute type 1 has an invalid length. 01:03:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000000c0)=ANY=[]) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f00000020c0), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x3, {0x2000000000000002, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) close(r0) 01:03:43 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0x1000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) read$FUSE(r0, &(0x7f0000001000), 0x1000) 01:03:43 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 01:03:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7}, 0xffffffcb) 01:03:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) truncate(&(0x7f0000000000)='./bus\x00', 0x5) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x4, 0x11, r1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:43 executing program 3: creat(&(0x7f0000000080)='./bus\x00', 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 01:03:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f00ff03f4f9002304000a04f5fe07000100020100020800038001c9a800", 0x24) 01:03:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000001540)=@ax25, 0x80, &(0x7f0000001940), 0x0, &(0x7f00000019c0)=""/104, 0x68}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r1, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000), 0x10) 01:03:43 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0xb, &(0x7f00000000c0), 0xc) close(r3) dup3(r0, r2, 0x0) 01:03:43 executing program 3: creat(&(0x7f0000000080)='./bus\x00', 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) [ 159.172824] netlink: 'syz-executor1': attribute type 1 has an invalid length. 01:03:43 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x44e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 01:03:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x3, 0x9) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 01:03:43 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x44e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 01:03:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000001540)=@ax25, 0x80, &(0x7f0000001940), 0x0, &(0x7f00000019c0)=""/104, 0x68}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r1, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000), 0x10) 01:03:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) truncate(&(0x7f0000000000)='./bus\x00', 0x5) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x4, 0x11, r1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:43 executing program 3: creat(&(0x7f0000000080)='./bus\x00', 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 01:03:43 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0xb, &(0x7f00000000c0), 0xc) close(r3) dup3(r0, r2, 0x0) 01:03:44 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00fa04"], 0x3) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x541b, 0x707000) 01:03:44 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x44e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 01:03:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x0) 01:03:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) truncate(&(0x7f0000000000)='./bus\x00', 0x5) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x4, 0x11, r1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/142, 0x8e}, &(0x7f0000000040)}, 0x20) 01:03:44 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0xb, &(0x7f00000000c0), 0xc) close(r3) dup3(r0, r2, 0x0) 01:03:44 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0x1000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) read$FUSE(r0, &(0x7f0000001000), 0x1000) 01:03:44 executing program 5: r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 01:03:44 executing program 5: r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 01:03:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/142, 0x8e}, &(0x7f0000000040)}, 0x20) 01:03:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x0) 01:03:44 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x44e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 01:03:44 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0xb, &(0x7f00000000c0), 0xc) close(r3) dup3(r0, r2, 0x0) 01:03:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) truncate(&(0x7f0000000000)='./bus\x00', 0x5) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x4, 0x11, r1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e27, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4) 01:03:44 executing program 5: r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 01:03:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/142, 0x8e}, &(0x7f0000000040)}, 0x20) 01:03:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x0) 01:03:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x33, 0x119, 0x0, 0x0, {0x4002}}, 0x14}}, 0x0) 01:03:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e27, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4) 01:03:44 executing program 5: r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 01:03:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/142, 0x8e}, &(0x7f0000000040)}, 0x20) 01:03:45 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0x1000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) read$FUSE(r0, &(0x7f0000001000), 0x1000) 01:03:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x0) 01:03:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x33, 0x119, 0x0, 0x0, {0x4002}}, 0x14}}, 0x0) 01:03:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x0) 01:03:45 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semget$private(0x0, 0x0, 0x600) 01:03:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e27, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4) 01:03:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0x10) 01:03:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) prctl$setptracer(0x59616d61, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x10) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000240)={0x19d2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3}, &(0x7f00000001c0)=0x8) 01:03:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e27, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4) 01:03:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x33, 0x119, 0x0, 0x0, {0x4002}}, 0x14}}, 0x0) 01:03:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x0) 01:03:45 executing program 2: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./control\x00', &(0x7f0000000140)='9p\x00', 0x10, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user'}, {@loose='loose'}]}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) 01:03:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0x10) 01:03:45 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semget$private(0x0, 0x0, 0x600) 01:03:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) prctl$setptracer(0x59616d61, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x10) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000240)={0x19d2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3}, &(0x7f00000001c0)=0x8) 01:03:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 01:03:46 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0x1000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) read$FUSE(r0, &(0x7f0000001000), 0x1000) 01:03:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x0) 01:03:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0x10) 01:03:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x33, 0x119, 0x0, 0x0, {0x4002}}, 0x14}}, 0x0) 01:03:46 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semget$private(0x0, 0x0, 0x600) 01:03:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) prctl$setptracer(0x59616d61, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x10) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000240)={0x19d2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3}, &(0x7f00000001c0)=0x8) 01:03:46 executing program 2: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./control\x00', &(0x7f0000000140)='9p\x00', 0x10, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user'}, {@loose='loose'}]}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) 01:03:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 01:03:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x2, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0x10) 01:03:46 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semget$private(0x0, 0x0, 0x600) 01:03:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x0) 01:03:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) prctl$setptracer(0x59616d61, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x10) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000240)={0x19d2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3}, &(0x7f00000001c0)=0x8) 01:03:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)) mlock(&(0x7f000077c000/0x3000)=nil, 0x3000) 01:03:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 01:03:46 executing program 2: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./control\x00', &(0x7f0000000140)='9p\x00', 0x10, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user'}, {@loose='loose'}]}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) 01:03:46 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8906, &(0x7f0000000240)) 01:03:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)) mlock(&(0x7f000077c000/0x3000)=nil, 0x3000) 01:03:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000800)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f0000000580)}, &(0x7f0000000600)="087cdd706956", &(0x7f00000006c0)=""/211, 0x0, 0x10024, 0x0, &(0x7f00000007c0)}) 01:03:47 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x50, &(0x7f0000000000)=""/86, &(0x7f0000000080)=0x56) 01:03:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 01:03:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x1a, 0x201, 0x0, 0x0, {}, [@generic="0d7df90bec0b"]}, 0x1c}}, 0x0) 01:03:47 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8906, &(0x7f0000000240)) 01:03:47 executing program 2: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./control\x00', &(0x7f0000000140)='9p\x00', 0x10, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user'}, {@loose='loose'}]}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) 01:03:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b660800666174000204010a0200027400f8000000000283224ea4224b5494fab2", 0x25}], 0x0, &(0x7f0000000080)) 01:03:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)) mlock(&(0x7f000077c000/0x3000)=nil, 0x3000) 01:03:47 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x50, &(0x7f0000000000)=""/86, &(0x7f0000000080)=0x56) [ 162.677614] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:03:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x1a, 0x201, 0x0, 0x0, {}, [@generic="0d7df90bec0b"]}, 0x1c}}, 0x0) 01:03:47 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8906, &(0x7f0000000240)) 01:03:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000800)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f0000000580)}, &(0x7f0000000600)="087cdd706956", &(0x7f00000006c0)=""/211, 0x0, 0x10024, 0x0, &(0x7f00000007c0)}) 01:03:47 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000140)) 01:03:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)) mlock(&(0x7f000077c000/0x3000)=nil, 0x3000) 01:03:47 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000640)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b000a000000", 0x24) 01:03:47 executing program 6: syz_mount_image$nfs4(&(0x7f0000001d00)='nfs4\x00', &(0x7f0000001d40)='./file0\x00', 0x0, 0x0, &(0x7f0000003ec0), 0x0, &(0x7f0000003f40)='rdma') 01:03:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x1a, 0x201, 0x0, 0x0, {}, [@generic="0d7df90bec0b"]}, 0x1c}}, 0x0) 01:03:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000800)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f0000000580)}, &(0x7f0000000600)="087cdd706956", &(0x7f00000006c0)=""/211, 0x0, 0x10024, 0x0, &(0x7f00000007c0)}) [ 162.934372] netlink: 'syz-executor3': attribute type 27 has an invalid length. 01:03:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) 01:03:47 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000140)) 01:03:47 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8906, &(0x7f0000000240)) 01:03:47 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x50, &(0x7f0000000000)=""/86, &(0x7f0000000080)=0x56) 01:03:47 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000640)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b000a000000", 0x24) 01:03:47 executing program 6: syz_mount_image$nfs4(&(0x7f0000001d00)='nfs4\x00', &(0x7f0000001d40)='./file0\x00', 0x0, 0x0, &(0x7f0000003ec0), 0x0, &(0x7f0000003f40)='rdma') 01:03:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x1a, 0x201, 0x0, 0x0, {}, [@generic="0d7df90bec0b"]}, 0x1c}}, 0x0) 01:03:47 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000140)) [ 163.184434] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value [ 163.196062] netlink: 'syz-executor3': attribute type 27 has an invalid length. 01:03:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000800)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f0000000580)}, &(0x7f0000000600)="087cdd706956", &(0x7f00000006c0)=""/211, 0x0, 0x10024, 0x0, &(0x7f00000007c0)}) 01:03:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x8000000000001a, 0x201}, 0x14}}, 0x0) 01:03:47 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x50, &(0x7f0000000000)=""/86, &(0x7f0000000080)=0x56) [ 163.280824] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value 01:03:47 executing program 6: syz_mount_image$nfs4(&(0x7f0000001d00)='nfs4\x00', &(0x7f0000001d40)='./file0\x00', 0x0, 0x0, &(0x7f0000003ec0), 0x0, &(0x7f0000003f40)='rdma') 01:03:47 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000640)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b000a000000", 0x24) 01:03:47 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) r3 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0) read(r3, &(0x7f0000000000)=""/105, 0x69) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x9208, 0x18a39cc4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000180)) tkill(r2, 0x15) 01:03:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) 01:03:47 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000140)) 01:03:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) 01:03:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x20203) flock(r0, 0x0) [ 163.508955] netlink: 'syz-executor3': attribute type 27 has an invalid length. 01:03:48 executing program 6: syz_mount_image$nfs4(&(0x7f0000001d00)='nfs4\x00', &(0x7f0000001d40)='./file0\x00', 0x0, 0x0, &(0x7f0000003ec0), 0x0, &(0x7f0000003f40)='rdma') 01:03:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x8000000000001a, 0x201}, 0x14}}, 0x0) 01:03:48 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000640)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b000a000000", 0x24) [ 163.597856] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value 01:03:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) 01:03:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000080), 0x0) 01:03:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x20203) flock(r0, 0x0) 01:03:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000780)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8001}}], 0x20}], 0x1, 0x0) [ 163.761225] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value [ 163.773949] netlink: 'syz-executor3': attribute type 27 has an invalid length. 01:03:48 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 01:03:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) [ 163.877847] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value 01:03:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000080), 0x0) 01:03:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x20203) flock(r0, 0x0) 01:03:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000780)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8001}}], 0x20}], 0x1, 0x0) 01:03:48 executing program 3: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000140)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) 01:03:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x8000000000001a, 0x201}, 0x14}}, 0x0) 01:03:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) 01:03:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000018c0)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000001780), &(0x7f00000017c0)}}], 0x58}, 0x0) 01:03:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000080), 0x0) 01:03:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x20203) flock(r0, 0x0) [ 164.091873] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value 01:03:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000780)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8001}}], 0x20}], 0x1, 0x0) 01:03:48 executing program 3: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000140)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) 01:03:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) [ 164.204075] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value [ 164.225530] atomic_op 000000004459461c conn xmit_atomic (null) 01:03:48 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a702ca9c1a8d1dc1e4e29ed4d2927b5e8155ac02a25334d332f97653d9d90256b4da4ec6f2b44831a3b878ada2f3e5883f2f7c806fb61c1993cc4f19a22c61e4"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000000040)={0x1, 0xfffffffffffffff9, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x3e8, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0) [ 164.273061] atomic_op 0000000003130afd conn xmit_atomic (null) 01:03:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000780)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8001}}], 0x20}], 0x1, 0x0) 01:03:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000018c0)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000001780), &(0x7f00000017c0)}}], 0x58}, 0x0) 01:03:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x8000000000001a, 0x201}, 0x14}}, 0x0) 01:03:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$intptr(0xe, 0x0) [ 164.384529] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value 01:03:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000080), 0x0) 01:03:48 executing program 3: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000140)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) 01:03:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f08ba200066b80c00000066ef0f01d16536f20f5a330fa03e0f01c89a96003f0064e300260fe88e0d000f01df", 0x2d}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:03:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a702ca9c1a8d1dc1e4e29ed4d2927b5e8155ac02a25334d332f97653d9d90256b4da4ec6f2b44831a3b878ada2f3e5883f2f7c806fb61c1993cc4f19a22c61e4"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000000040)={0x1, 0xfffffffffffffff9, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x3e8, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0) [ 164.497758] atomic_op 000000006b1f6443 conn xmit_atomic (null) 01:03:49 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "770ea9", 0x10, 0x0, 0x0, @dev, @empty, {[], @dccp={{0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "22c66c", 0x0, "1eaa88"}}}}}}}, &(0x7f0000000100)) 01:03:49 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000445ffc)=0x2, 0x4) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 01:03:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000018c0)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000001780), &(0x7f00000017c0)}}], 0x58}, 0x0) 01:03:49 executing program 4: getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r0}}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) 01:03:49 executing program 3: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000140)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) 01:03:49 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "770ea9", 0x10, 0x0, 0x0, @dev, @empty, {[], @dccp={{0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "22c66c", 0x0, "1eaa88"}}}}}}}, &(0x7f0000000100)) [ 164.698639] atomic_op 00000000cd461500 conn xmit_atomic (null) 01:03:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a702ca9c1a8d1dc1e4e29ed4d2927b5e8155ac02a25334d332f97653d9d90256b4da4ec6f2b44831a3b878ada2f3e5883f2f7c806fb61c1993cc4f19a22c61e4"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000000040)={0x1, 0xfffffffffffffff9, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x3e8, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0) 01:03:49 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000445ffc)=0x2, 0x4) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 01:03:49 executing program 5: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001880)={[{@utf8='utf8'}, {@nls={'nls', 0x3d, 'none'}}]}) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 01:03:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000018c0)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000001780), &(0x7f00000017c0)}}], 0x58}, 0x0) [ 164.848473] ntfs: (device loop4): parse_options(): Invalid gid option argument: 0x00000000ffffffff [ 164.879129] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 01:03:49 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000445ffc)=0x2, 0x4) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 01:03:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) 01:03:49 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "770ea9", 0x10, 0x0, 0x0, @dev, @empty, {[], @dccp={{0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "22c66c", 0x0, "1eaa88"}}}}}}}, &(0x7f0000000100)) [ 164.939222] atomic_op 0000000088f58af1 conn xmit_atomic (null) 01:03:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f08ba200066b80c00000066ef0f01d16536f20f5a330fa03e0f01c89a96003f0064e300260fe88e0d000f01df", 0x2d}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:03:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) syncfs(r0) [ 165.029241] tmpfs: Bad value '0x00000000ffffffff' for mount option 'gid' 01:03:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a702ca9c1a8d1dc1e4e29ed4d2927b5e8155ac02a25334d332f97653d9d90256b4da4ec6f2b44831a3b878ada2f3e5883f2f7c806fb61c1993cc4f19a22c61e4"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000000040)={0x1, 0xfffffffffffffff9, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x3e8, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0) [ 165.131599] binder_alloc: binder_alloc_mmap_handler: 10778 20010000-20014000 already mapped failed -16 [ 165.157882] ntfs: (device loop5): parse_options(): NLS character set none not found. Using previous one utf8. [ 165.168302] ntfs: (device loop5): parse_options(): Unrecognized mount option . 01:03:49 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "770ea9", 0x10, 0x0, 0x0, @dev, @empty, {[], @dccp={{0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "22c66c", 0x0, "1eaa88"}}}}}}}, &(0x7f0000000100)) 01:03:49 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000445ffc)=0x2, 0x4) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) [ 165.178727] tmpfs: Bad value '0x00000000ffffffff' for mount option 'gid' 01:03:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) 01:03:49 executing program 4: getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r0}}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) [ 165.289975] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 01:03:49 executing program 0: getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r0}}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) [ 165.340598] ntfs: (device loop5): parse_options(): NLS character set none not found. Using previous one utf8. [ 165.350782] ntfs: (device loop5): parse_options(): Unrecognized mount option . 01:03:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x400) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f0000001580)) 01:03:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f08ba200066b80c00000066ef0f01d16536f20f5a330fa03e0f01c89a96003f0064e300260fe88e0d000f01df", 0x2d}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:03:49 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) readv(r1, &(0x7f0000001200)=[{&(0x7f0000001100)=""/233, 0xe9}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r3, &(0x7f00000bd000), 0x80, 0x0) close(r2) [ 165.460186] ntfs: (device loop4): parse_options(): Invalid gid option argument: 0x00000000ffffffff 01:03:50 executing program 5: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001880)={[{@utf8='utf8'}, {@nls={'nls', 0x3d, 'none'}}]}) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 01:03:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) 01:03:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) syncfs(r0) [ 165.521756] tmpfs: Bad value '0x00000000ffffffff' for mount option 'gid' [ 165.540134] ntfs: (device loop0): parse_options(): Invalid gid option argument: 0x00000000ffffffff [ 165.630835] tmpfs: Bad value '0x00000000ffffffff' for mount option 'gid' 01:03:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) 01:03:50 executing program 4: getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r0}}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) [ 165.684083] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 01:03:50 executing program 0: getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r0}}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) 01:03:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x400) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f0000001580)) 01:03:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) syncfs(r0) 01:03:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a4cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000200)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000140)={0x1, 0x0, [{}]}) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 01:03:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f08ba200066b80c00000066ef0f01d16536f20f5a330fa03e0f01c89a96003f0064e300260fe88e0d000f01df", 0x2d}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 165.899113] tmpfs: Bad value '0x00000000ffffffff' for mount option 'gid' [ 165.954213] tmpfs: Bad value '0x00000000ffffffff' for mount option 'gid' 01:03:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x400) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f0000001580)) 01:03:50 executing program 5: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001880)={[{@utf8='utf8'}, {@nls={'nls', 0x3d, 'none'}}]}) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 01:03:50 executing program 4: getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r0}}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) 01:03:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) syncfs(r0) 01:03:50 executing program 0: getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff]) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r0}}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) [ 166.192194] tmpfs: Bad value '0x00000000ffffffff' for mount option 'gid' [ 166.299091] tmpfs: Bad value '0x00000000ffffffff' for mount option 'gid' 01:03:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2000000001, 0x1, &(0x7f0000000080)}) 01:03:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a4cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000200)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000140)={0x1, 0x0, [{}]}) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 01:03:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x400) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f0000001580)) 01:03:50 executing program 4: waitid(0x2, 0x0, &(0x7f0000000700), 0x2, &(0x7f00000007c0)) 01:03:50 executing program 5: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001880)={[{@utf8='utf8'}, {@nls={'nls', 0x3d, 'none'}}]}) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 01:03:50 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r1) 01:03:50 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") unshare(0x400) listen(r0, 0x0) 01:03:51 executing program 4: waitid(0x2, 0x0, &(0x7f0000000700), 0x2, &(0x7f00000007c0)) 01:03:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="16", 0x1}]) 01:03:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a4cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000200)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000140)={0x1, 0x0, [{}]}) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 01:03:51 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") unshare(0x400) listen(r0, 0x0) 01:03:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') 01:03:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2000000001, 0x1, &(0x7f0000000080)}) 01:03:51 executing program 4: waitid(0x2, 0x0, &(0x7f0000000700), 0x2, &(0x7f00000007c0)) 01:03:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, &(0x7f00000000c0), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'vlan0\x00', 'vcan0\x00', 'yam0\x00', 'erspan0\x00', @link_local, [], @empty, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x3, 0x0, 0x0, 'bond_slave_1\x00', 'ip6gretap0\x00', 'bond_slave_1\x00', 'veth0\x00', @broadcast, [], @link_local, [], 0xb0, 0xb0, 0xe0, [@connbytes={'connbytes\x00', 0x18}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x288) 01:03:51 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r1) 01:03:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="16", 0x1}]) 01:03:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a4cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000200)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000140)={0x1, 0x0, [{}]}) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) [ 166.846662] xt_connbytes: cannot load conntrack support for proto=7 [ 166.853231] xt_connbytes: Forcing CT accounting to be enabled 01:03:51 executing program 4: waitid(0x2, 0x0, &(0x7f0000000700), 0x2, &(0x7f00000007c0)) 01:03:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2000000001, 0x1, &(0x7f0000000080)}) 01:03:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) 01:03:51 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") unshare(0x400) listen(r0, 0x0) 01:03:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='status\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0xaaaacd8, 0x0, &(0x7f0000000140), 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000001240)=""/76) 01:03:51 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r1) [ 167.062803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 167.071497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 01:03:51 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x88000000}, 0x10) 01:03:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="16", 0x1}]) 01:03:51 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") unshare(0x400) listen(r0, 0x0) 01:03:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2000000001, 0x1, &(0x7f0000000080)}) 01:03:51 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x88000000}, 0x10) 01:03:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000001240)=""/76) 01:03:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) 01:03:51 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 01:03:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="16", 0x1}]) 01:03:51 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r1) 01:03:51 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x88000000}, 0x10) [ 167.401626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 167.410384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 01:03:51 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) close(r0) 01:03:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000001240)=""/76) 01:03:52 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x88000000}, 0x10) 01:03:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='status\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0xaaaacd8, 0x0, &(0x7f0000000140), 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) 01:03:52 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 01:03:52 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) 01:03:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000001240)=""/76) 01:03:52 executing program 6: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0), &(0x7f0000000100)='B', 0x1, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 01:03:52 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) close(r0) [ 167.745675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 167.754374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 01:03:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x211, &(0x7f0000000140)={@random="2fd6b1be27a3", @random="91477e3969a2", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) 01:03:52 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) 01:03:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x15, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000240)={'bridge_slave_1\x00', 0xffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_1\x00', 0x9b}) 01:03:52 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 01:03:52 executing program 6: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0), &(0x7f0000000100)='B', 0x1, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 01:03:52 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) 01:03:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) 01:03:52 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) close(r0) 01:03:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000001c0)}, 0x10) [ 168.120871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 168.130077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 01:03:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='status\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0xaaaacd8, 0x0, &(0x7f0000000140), 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x15, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000240)={'bridge_slave_1\x00', 0xffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_1\x00', 0x9b}) 01:03:52 executing program 6: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0), &(0x7f0000000100)='B', 0x1, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 01:03:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000001c0)}, 0x10) 01:03:52 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) 01:03:52 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 01:03:52 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) close(r0) 01:03:52 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000000)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000029000000080000000915315a"], 0x14}}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x50, 0x0) 01:03:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080), 0x2) 01:03:53 executing program 6: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0), &(0x7f0000000100)='B', 0x1, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 01:03:53 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000000)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000029000000080000000915315a"], 0x14}}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x50, 0x0) 01:03:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000001c0)}, 0x10) 01:03:53 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x84) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x200, 0x3, 0x6, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x921, 0x0, 0xd6d7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x101, 0x81, 0x7, 0x7fff, 0x401, 0x0, 0xbda, 0x0, 0x5cb8, 0x8, 0x2, 0x9, 0x0, 0x3, 0x6c45, 0x8, 0x0, 0x100, 0x3, 0x4, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x2, 0x81, 0x7, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, r0, 0xe) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x689, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) 01:03:53 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) close(r0) 01:03:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080), 0x2) 01:03:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x15, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000240)={'bridge_slave_1\x00', 0xffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_1\x00', 0x9b}) 01:03:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='status\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0xaaaacd8, 0x0, &(0x7f0000000140), 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:53 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)) 01:03:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000001c0)}, 0x10) 01:03:53 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000000)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000029000000080000000915315a"], 0x14}}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x50, 0x0) 01:03:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080), 0x2) 01:03:53 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x84) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x200, 0x3, 0x6, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x921, 0x0, 0xd6d7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x101, 0x81, 0x7, 0x7fff, 0x401, 0x0, 0xbda, 0x0, 0x5cb8, 0x8, 0x2, 0x9, 0x0, 0x3, 0x6c45, 0x8, 0x0, 0x100, 0x3, 0x4, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x2, 0x81, 0x7, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, r0, 0xe) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x689, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) 01:03:53 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) close(r0) 01:03:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x15, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000240)={'bridge_slave_1\x00', 0xffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_1\x00', 0x9b}) 01:03:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080), 0x2) 01:03:53 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) 01:03:53 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) close(r0) 01:03:53 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)) 01:03:53 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000000)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000029000000080000000915315a"], 0x14}}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x50, 0x0) 01:03:53 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x84) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x200, 0x3, 0x6, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x921, 0x0, 0xd6d7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x101, 0x81, 0x7, 0x7fff, 0x401, 0x0, 0xbda, 0x0, 0x5cb8, 0x8, 0x2, 0x9, 0x0, 0x3, 0x6c45, 0x8, 0x0, 0x100, 0x3, 0x4, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x2, 0x81, 0x7, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, r0, 0xe) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x689, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) 01:03:53 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)) 01:03:53 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) close(r0) 01:03:54 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x84) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x200, 0x3, 0x6, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x921, 0x0, 0xd6d7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x101, 0x81, 0x7, 0x7fff, 0x401, 0x0, 0xbda, 0x0, 0x5cb8, 0x8, 0x2, 0x9, 0x0, 0x3, 0x6c45, 0x8, 0x0, 0x100, 0x3, 0x4, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x2, 0x81, 0x7, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, r0, 0xe) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x689, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) 01:03:54 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000080)=""/7, 0xfffffffffffffe91}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 01:03:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x82, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000640)={0x28}, 0x28) 01:03:54 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)) 01:03:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0000102}]}) 01:03:54 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) 01:03:54 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0xc, 0x0, 0x0, 0x80000}}) 01:03:54 executing program 5: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 01:03:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x82, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000640)={0x28}, 0x28) 01:03:54 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0xc, 0x0, 0x0, 0x80000}}) 01:03:54 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000080)=""/7, 0xfffffffffffffe91}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 01:03:54 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) 01:03:54 executing program 2: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x20000000001, 0x0, 0x0, 0x3e}, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={r2, 0x15, "b7aee78c73ba6f1720a64fb46faaef1224e90fd31f"}, &(0x7f0000000340)=0x1d) msgrcv(0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x101800, 0x0) msgsnd(0x0, &(0x7f00000001c0)={0x3}, 0x8, 0x0) 01:03:54 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 01:03:54 executing program 5: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 01:03:54 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0xfffffffffffffffc) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2de4, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000600)={0x3}, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000180)='./control\x00', &(0x7f00000004c0)='fuseblk\x00', 0x210000, &(0x7f0000000940)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1400000000000}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other='allow_other'}]}}) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0xfffffffffffffffd) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) pread64(r4, &(0x7f0000000000)=""/47, 0x2f, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000300)) getpid() msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/53) shmget(0x2, 0x3000, 0x1dfc, &(0x7f0000ffa000/0x3000)=nil) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000440)={0x0, 0x3, 0x80, 0x101}) geteuid() getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0xa, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x27, 0x3, 0x0, {0x1, 0x6, 0x0, 'teql0\x00'}}, 0x27) recvmmsg(r4, &(0x7f0000000240), 0x4000000000000c4, 0x44000027, &(0x7f0000000680)={0x77359400}) sendto$llc(r4, &(0x7f00000006c0)="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", 0x164, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @random="b22b8092a6c1"}, 0x10) 01:03:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x82, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000640)={0x28}, 0x28) 01:03:54 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000080)=""/7, 0xfffffffffffffe91}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 01:03:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0000102}]}) 01:03:54 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 01:03:54 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0xc, 0x0, 0x0, 0x80000}}) 01:03:54 executing program 5: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 01:03:54 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) 01:03:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x82, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000640)={0x28}, 0x28) 01:03:54 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000080)=""/7, 0xfffffffffffffe91}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 01:03:54 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0xc, 0x0, 0x0, 0x80000}}) 01:03:54 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 01:03:54 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x65, 0x1, &(0x7f0000000180)=""/244, &(0x7f0000000140)=0xfffffffffffffe2a) 01:03:54 executing program 5: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 01:03:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x21}, 0x98) 01:03:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0000102}]}) 01:03:55 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0xfffffffffffffffc) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2de4, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000600)={0x3}, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000180)='./control\x00', &(0x7f00000004c0)='fuseblk\x00', 0x210000, &(0x7f0000000940)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1400000000000}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other='allow_other'}]}}) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0xfffffffffffffffd) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) pread64(r4, &(0x7f0000000000)=""/47, 0x2f, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000300)) getpid() msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/53) shmget(0x2, 0x3000, 0x1dfc, &(0x7f0000ffa000/0x3000)=nil) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000440)={0x0, 0x3, 0x80, 0x101}) geteuid() getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0xa, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x27, 0x3, 0x0, {0x1, 0x6, 0x0, 'teql0\x00'}}, 0x27) recvmmsg(r4, &(0x7f0000000240), 0x4000000000000c4, 0x44000027, &(0x7f0000000680)={0x77359400}) sendto$llc(r4, &(0x7f00000006c0)="fd56b113ee5dc5b59c8f56f8b4182ad1d726c1bae545e63d665c2bfe32ed59a11b887ee3c6dc05a328a82c1813a4d4e91220a3dc6d1db1928da4e26c0518b0e6649ca952bb47e621dd7db13944ec786d37aba5087dce9168039ef92b265c293b9043163f5fad67aba28ea08c21691529ba62ea21dce97070d7e89bc3065b2caf6ae8f701c26664cb46a21946eaee2cd0ccd9083874be45da95b3c5e3128a4caeed5d00da738f5c937052109a650deac764dec5ded45a463eaf6231721f59c8dc342f820024f53f87fa54cac62182636b35c33b886a339c4d288f3db0a61fbc77900a88108cdd189863b887ef1a0b327dc85510276fefcb6a8b65e6b6d4db0afefee78798dd1955dd8b06880000000000000000000000000000000000000000000d0ec70e8b46142c5ce09ce22ce731dd4cb15ff8b4349d417ea69c68b02f36d4f52682b0d2da7259dbfb68d821ff9f100959820568a59eddcf9b350111d241a75d88960e", 0x164, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @random="b22b8092a6c1"}, 0x10) 01:03:55 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x65, 0x1, &(0x7f0000000180)=""/244, &(0x7f0000000140)=0xfffffffffffffe2a) 01:03:55 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2f}) 01:03:55 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 01:03:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 01:03:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x1001) 01:03:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x21}, 0x98) 01:03:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0000102}]}) 01:03:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 01:03:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x21}, 0x98) 01:03:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="a40f09"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:55 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x65, 0x1, &(0x7f0000000180)=""/244, &(0x7f0000000140)=0xfffffffffffffe2a) 01:03:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x1001) 01:03:55 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2f}) 01:03:55 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 01:03:55 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x65, 0x1, &(0x7f0000000180)=""/244, &(0x7f0000000140)=0xfffffffffffffe2a) 01:03:56 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0xfffffffffffffffc) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2de4, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000600)={0x3}, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000180)='./control\x00', &(0x7f00000004c0)='fuseblk\x00', 0x210000, &(0x7f0000000940)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1400000000000}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other='allow_other'}]}}) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0xfffffffffffffffd) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) pread64(r4, &(0x7f0000000000)=""/47, 0x2f, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000300)) getpid() msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/53) shmget(0x2, 0x3000, 0x1dfc, &(0x7f0000ffa000/0x3000)=nil) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000440)={0x0, 0x3, 0x80, 0x101}) geteuid() getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0xa, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x27, 0x3, 0x0, {0x1, 0x6, 0x0, 'teql0\x00'}}, 0x27) recvmmsg(r4, &(0x7f0000000240), 0x4000000000000c4, 0x44000027, &(0x7f0000000680)={0x77359400}) sendto$llc(r4, &(0x7f00000006c0)="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", 0x164, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @random="b22b8092a6c1"}, 0x10) 01:03:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 01:03:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x21}, 0x98) 01:03:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x1001) 01:03:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="a40f09"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:56 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460006006c00000000000000000020000000000000ffffffffffdfffff40000000000000000000000000000000000000000000380000000000000000000000000091000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000"], 0x78) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000640)=""/216) 01:03:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2f}) 01:03:56 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 01:03:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000240)={{0x0, 0x1}}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000014) 01:03:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 01:03:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x1001) 01:03:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2f}) 01:03:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="a40f09"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:56 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460006006c00000000000000000020000000000000ffffffffffdfffff40000000000000000000000000000000000000000000380000000000000000000000000091000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000"], 0x78) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000640)=""/216) 01:03:56 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 01:03:56 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460006006c00000000000000000020000000000000ffffffffffdfffff40000000000000000000000000000000000000000000380000000000000000000000000091000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000"], 0x78) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000640)=""/216) 01:03:57 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0xfffffffffffffffc) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2de4, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000600)={0x3}, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000180)='./control\x00', &(0x7f00000004c0)='fuseblk\x00', 0x210000, &(0x7f0000000940)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1400000000000}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other='allow_other'}]}}) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0xfffffffffffffffd) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) pread64(r4, &(0x7f0000000000)=""/47, 0x2f, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000300)) getpid() msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/53) shmget(0x2, 0x3000, 0x1dfc, &(0x7f0000ffa000/0x3000)=nil) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000440)={0x0, 0x3, 0x80, 0x101}) geteuid() getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0xa, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x27, 0x3, 0x0, {0x1, 0x6, 0x0, 'teql0\x00'}}, 0x27) recvmmsg(r4, &(0x7f0000000240), 0x4000000000000c4, 0x44000027, &(0x7f0000000680)={0x77359400}) sendto$llc(r4, &(0x7f00000006c0)="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", 0x164, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @random="b22b8092a6c1"}, 0x10) 01:03:57 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460006006c00000000000000000020000000000000ffffffffffdfffff40000000000000000000000000000000000000000000380000000000000000000000000091000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000"], 0x78) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000640)=""/216) 01:03:57 executing program 7: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0xb398cad150a02a3, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:03:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x2000000, &(0x7f0000001880)={[{@quota_account='quota=account'}, {@upgrade='upgrade'}, {@data_ordered='data=ordered'}, {@quota='quota'}]}) 01:03:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="a40f09"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:57 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460006006c00000000000000000020000000000000ffffffffffdfffff40000000000000000000000000000000000000000000380000000000000000000000000091000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000"], 0x78) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000640)=""/216) 01:03:57 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) [ 172.838151] gfs2: not a GFS2 filesystem [ 172.897503] gfs2: not a GFS2 filesystem 01:03:57 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460006006c00000000000000000020000000000000ffffffffffdfffff40000000000000000000000000000000000000000000380000000000000000000000000091000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000"], 0x78) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000640)=""/216) 01:03:57 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460006006c00000000000000000020000000000000ffffffffffdfffff40000000000000000000000000000000000000000000380000000000000000000000000091000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000"], 0x78) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000640)=""/216) 01:03:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x2000000, &(0x7f0000001880)={[{@quota_account='quota=account'}, {@upgrade='upgrade'}, {@data_ordered='data=ordered'}, {@quota='quota'}]}) 01:03:57 executing program 7: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0xb398cad150a02a3, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:03:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000240)={{0x0, 0x1}}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000014) 01:03:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x22000400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockname(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000004c0)=0x80) 01:03:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1', "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"}, 0x784) [ 173.098908] gfs2: not a GFS2 filesystem 01:03:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x100000000000000f, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 01:03:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x22000400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockname(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000004c0)=0x80) 01:03:58 executing program 7: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0xb398cad150a02a3, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:03:58 executing program 4: clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 01:03:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x2000000, &(0x7f0000001880)={[{@quota_account='quota=account'}, {@upgrade='upgrade'}, {@data_ordered='data=ordered'}, {@quota='quota'}]}) 01:03:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1', "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"}, 0x784) 01:03:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x100000000000000f, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 01:03:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x22000400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockname(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000004c0)=0x80) 01:03:58 executing program 2: syz_read_part_table(0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") [ 173.711851] gfs2: not a GFS2 filesystem 01:03:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x100000000000000f, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 01:03:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1', "a88dca03e0df93730006de73f42b0e74d443bdc28645bf2fda74ed24e6e8c68e8db8a84e46c37f178cb27c9565c3a83c69b78119d9b2702314ac3909fe9231cb8adb75f50bae8905453e6e9f063581bca5fa2a4b260cd869bb4e76bffaf1b8d086df0d73741e0eb1593694d4c4c15b8ab5bebc9be916c232b3e943939491539a1472563b37ff20a7fda49531554872c9ff70e67a0420e7884795e8c99aa42a6f0b84bb92a92644963c0f4d1d1977cb3e0e190a2e53aba41631d5acecde7efdc7c0df3b3b76bcb1140b3dd5e99a15b999ce6cfb774a54ca01270810d90c6ae0d70e63486f389e68e4ce99c217bcaaf7449f52599029b3512e420a7d029642f2f86b69bd75315f71081ed1f29b9544dbf84bf3ae9e0248563a89cd7f6da74d7be34e6823118dc8fc4da7c48a1f319a3e4d1e588da603282a19f8d4d0ac67ea6e386db7c75a7021043baa416b38c44bca1158a68f44e75e466c88237adb81adf42d0440a3ccdff0bf6ce64416ee4781dbbdc8f8fdcc87250b791646673618b2f2a9afe74141ab1f5215b2885241b5dc6ed4d897dbd36e2009df097d9ee332184bc71e986b59eda38f0ac207b73ced382743189e29a6c13953382221efdcfe3e5c052d2ba3c7212d9de396c7580b48e8df689818beecdd1ee9acb0664f35a38d848f6caa8148a0fc34e39122a814c167e2f6ff17c6f7f56f5a40616244163c37afa3af6c05230766654e7ce37cfea899826f8d023b27e642d158102d60db112abecce457b8f8bb6835d8a7fa5fa1f8f94f5457fa648273ccd60bb7e2b4ed319e4d528c8de12428da3be485c0679d0d72f2311e992008b65f2a158fb89e6e9812c0729f22a970247bd2467366976e069021c871c20229129f1f99e0d369fcd70d10687671464490063c982c93dcccf9c1ef5c6131001af41c4366c2ec9150d4e6a8f8b04d8de782f7264f1e781da519b4d5f1c148e49166c60d4a5839c7b12da608ad2326129dc4d0ebad6fb7f6b49d59c912c4e9c68ddee45f50cdd95aec9c9b83f3dbef53f5ecfdc5e7504697a47e165683ff5225856888857b787aec43b8ecd7ee7bbaa9701e3a05974faf805e8e0775bebdb99b58cfab7d972429cf5b7da560424fc93db1e49856dd96e617faf0cbc48c39e0cf034d85695ce0b8d46b0cd8d15db8a06a9c21dbb1a4a579f9719728e3eca4e51d0ad77a097def02c2fee0006a5d9bdc0f5167286849e6825334b3730b0c664dc1acb87ab65b14f2d43fbb81746f3094d490f20fecc75e6af39b97155b2ec00317496dba1f356dfd3f44b668f95c14288c703bf957eda82d24569c9ef7009f3f927545c864ae7298539f520de1da316515c3812532f38f6f280e330863d1a520f299c3d04a01f3d6ed0e668f0379f9052b72ad30fa12d91f1b0fc90b705b8ab7c3c116f6dccf64ee29cabdc9de741b6aab1229f792478330b7d97bdf30f08da4606baa717328b83e8b7e9deb0da3e96080bc856d8e135e7c3417435c0ef95b0db61acfcd450744e51cbb88745a3036bb286fff8268fb7f89cc96d2efced0747f985f0b7b1c1207e99036a947cc9259a90824713dc885606c006a976270f860d603f69439817976475d655f7140f0631f467c14ed535e557394cc380ad6cc6a9516485dc81aa4a91357243ae568e7bba2284024a89fa4f5d59b4db6a89918f6343042d0660ee6a5469cbc695c11972349afb6f0170fd7140906592f74d6529d348f2862a1bf12c7f96cff1c4371da42ec6483a0ff687694d0a2e7cf55ec64aafa201f8ef096bcfe6b6ff0f6710420a9189e46b93c45fb478293437e92baa0bd00fc12d93642eb804be1e480838d53169f42253c951fe2dfaef229d866fed18db0ed5ea0e5bd5cedb969d1b3c64fe9e9ae03a31895b5954ddb899ad1def85a835c4191f884fee1756bcc8483a9dd498b1eefb69911136bc287481f3e1e05894bf402d8cfefd5edaf30c77d10f7a5bfc29d88e78eea17175f8e424e3024fd79d0322294017e4933162adea1a50a688e6cd43137240e6dbf1ea385ef4c1dd10dccd8ad00ba2d258fa7b8d37b4d210635f40586986b38aff568f97a4f30756978e5e4f56831a77324cae848c2dba4e407e771c481384f681d7dba940314777132dd5935d23ec035d674d3145850c9b2008d366b5c18e5de3fe922c20b8fee71a3603b8de40f1deab8939b21e650606cec05d2c37e370b2ad15aa85914ede4543374093905f5869613b8cdbd59b9dcdff8d7b8229b8e9af7977b09c932dc2322daa1ac701a99f5641a8477a54664b05314c52f6f6a898bcc81112c454764b3996aeeec8a99280c39cbaa4d06e60a4bc1efe9ccb187455e033469e3480bd91ef000cc79b857b5d3f25bfc7b49cac38a553435f9a222166a7ac9bce3c0b19073dbdd0d05343cb3402174a9afda2e3618af2bb7d5fd1e3d83b286fba7236adebd19660bf8fb1bd2ecb1263cc65ed9c07065cc972b600a558405c9975fb581cdb2704e9cfdb9214a52f31231d5dfcee87d5f2dd4069a597add652bab0f20ca01eae2a835be793bc227cc848585df2b68a08595ec10f27efb1ff5ffc19af4515a26b30a2194fb261ff61ef2cac7a776575fbe961fd98cd9055dfd2ae35bb58dafa5418af2f7d8b18b2557f603ebfabfa3e044cbf33ff32a56def0ab9c18ba24d91f501014c14148a1cb764cccf211c6caf106b0"}, 0x784) 01:03:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x22000400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockname(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000004c0)=0x80) [ 173.787427] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 173.797331] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 173.803412] loop2: p1 p2 p3 p4 01:03:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x2000000, &(0x7f0000001880)={[{@quota_account='quota=account'}, {@upgrade='upgrade'}, {@data_ordered='data=ordered'}, {@quota='quota'}]}) 01:03:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000240)={{0x0, 0x1}}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000014) 01:03:58 executing program 7: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0xb398cad150a02a3, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 01:03:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x100000000000000f, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 01:03:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1', "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"}, 0x784) 01:03:58 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "96a7e82b133e5308c33d5453f6a5a29323b8c7504b85a11c94f70658d278f791962651fb435b5acd823e1ffb6dda7493b24d27a1636a4c587711fe87e36f449f"}, 0x7ffff000}}, 0x0) [ 173.943830] gfs2: not a GFS2 filesystem [ 173.951160] loop2: p2 size 100 extends beyond EOD, truncated [ 174.043557] loop2: p3 start 201 is beyond EOD, truncated [ 174.049347] loop2: p4 start 301 is beyond EOD, truncated 01:03:58 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @link_local, [], {@generic={0x88a2}}}, &(0x7f0000000080)) [ 174.249619] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 174.259206] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 174.265325] loop2: p1 p2 p3 p4 [ 174.291043] loop2: p2 size 100 extends beyond EOD, truncated [ 174.299234] loop2: p3 start 201 is beyond EOD, truncated [ 174.304862] loop2: p4 start 301 is beyond EOD, truncated 01:03:59 executing program 4: clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 01:03:59 executing program 7: perf_event_open(&(0x7f000000a000)={0x2, 0x1ef, 0x40cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX]) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0xc201}) close(r0) 01:03:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)}]) 01:03:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000000)="0f060f3802690066b825018ec0b9800000c00f3235010000000f300f01c8660f38813d000000000f21e2b9430900000f320fc76a5cc744240000100000c74424020c000000c7442406000000000f011c24", 0x51}], 0x1, 0x20, &(0x7f00000002c0), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000080)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000300)='gre0\x00') 01:03:59 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @link_local, [], {@generic={0x88a2}}}, &(0x7f0000000080)) 01:03:59 executing program 2: syz_read_part_table(0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") [ 174.624817] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 174.634504] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 174.640661] loop2: p1 p2 p3 p4 01:03:59 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @link_local, [], {@generic={0x88a2}}}, &(0x7f0000000080)) 01:03:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)}]) 01:03:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000080)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000300)='gre0\x00') [ 174.711742] loop2: p2 size 100 extends beyond EOD, truncated [ 174.795684] loop2: p3 start 201 is beyond EOD, truncated [ 174.801378] loop2: p4 start 301 is beyond EOD, truncated 01:03:59 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000240)={{0x0, 0x1}}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000014) 01:03:59 executing program 7: perf_event_open(&(0x7f000000a000)={0x2, 0x1ef, 0x40cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX]) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0xc201}) close(r0) 01:03:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000080)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000300)='gre0\x00') 01:03:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)}]) 01:03:59 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @link_local, [], {@generic={0x88a2}}}, &(0x7f0000000080)) 01:03:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000000)="0f060f3802690066b825018ec0b9800000c00f3235010000000f300f01c8660f38813d000000000f21e2b9430900000f320fc76a5cc744240000100000c74424020c000000c7442406000000000f011c24", 0x51}], 0x1, 0x20, &(0x7f00000002c0), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)}]) 01:03:59 executing program 4: clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 01:03:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000080)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000300)='gre0\x00') 01:03:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000040)={0x0, 0x6, 0xe828}) mq_unlink(&(0x7f0000000100)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000000340), 0x0, 0x1, &(0x7f00000003c0)={0x77359400}) close(r0) 01:03:59 executing program 2: syz_read_part_table(0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 01:03:59 executing program 7: perf_event_open(&(0x7f000000a000)={0x2, 0x1ef, 0x40cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX]) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0xc201}) close(r0) [ 175.517681] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 175.527324] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 175.533454] loop2: p1 p2 p3 p4 01:04:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) 01:04:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) dup3(r2, r0, 0x0) [ 175.564459] loop2: p2 size 100 extends beyond EOD, truncated 01:04:00 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000040)={[{@inode32='inode32'}, {@discard='discard'}]}) [ 175.614709] loop2: p3 start 201 is beyond EOD, truncated [ 175.620391] loop2: p4 start 301 is beyond EOD, truncated 01:04:00 executing program 7: perf_event_open(&(0x7f000000a000)={0x2, 0x1ef, 0x40cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX]) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0xc201}) close(r0) 01:04:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) 01:04:00 executing program 2: syz_read_part_table(0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 01:04:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) [ 175.852405] XFS (loop3): mounting with "discard" option, but the device does not support discard 01:04:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) dup3(r2, r0, 0x0) [ 175.924433] XFS (loop3): Mounting V4 Filesystem 01:04:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) [ 175.956512] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 175.966051] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 175.972130] loop2: p1 p2 p3 p4 [ 176.010101] XFS (loop3): totally zeroed log [ 176.023970] XFS (loop3): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 176.034139] XFS (loop3): Unmount and run xfs_repair [ 176.039269] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 176.046043] 0000000068769f2e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.054988] 00000000bd016f73: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.063954] 0000000033a3a313: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.072915] 0000000036b54a89: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.081887] 0000000039e8bb65: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.090823] 00000000b120abf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.099776] 000000004864e99c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:04:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000000)="0f060f3802690066b825018ec0b9800000c00f3235010000000f300f01c8660f38813d000000000f21e2b9430900000f320fc76a5cc744240000100000c74424020c000000c7442406000000000f011c24", 0x51}], 0x1, 0x20, &(0x7f00000002c0), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:04:00 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) dup3(r2, r0, 0x0) [ 176.108735] 00000000971761fc: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.120573] XFS (loop3): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 176.130181] XFS (loop3): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 176.139253] XFS (loop3): Failed to read root inode 0x80, error 117 [ 176.146099] loop2: p2 size 100 extends beyond EOD, truncated [ 176.161618] loop2: p3 start 201 is beyond EOD, truncated [ 176.167338] loop2: p4 start 301 is beyond EOD, truncated 01:04:00 executing program 4: clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 01:04:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 01:04:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) dup3(r2, r0, 0x0) 01:04:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) 01:04:00 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) dup3(r2, r0, 0x0) 01:04:00 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000040)={[{@inode32='inode32'}, {@discard='discard'}]}) 01:04:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000000805, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) close(r2) 01:04:01 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400) 01:04:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 01:04:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000000805, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) close(r2) [ 176.520000] XFS (loop3): mounting with "discard" option, but the device does not support discard [ 176.581447] XFS (loop3): Mounting V4 Filesystem 01:04:01 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) dup3(r2, r0, 0x0) [ 176.632665] XFS (loop3): totally zeroed log [ 176.658654] XFS (loop3): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 176.668448] XFS (loop3): Unmount and run xfs_repair [ 176.673563] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 176.680332] 00000000ac37825f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.689248] 00000000de7997f5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.698155] 0000000094b8dc94: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:04:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000000805, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) close(r2) 01:04:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) [ 176.707062] 0000000013daa237: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.715961] 000000004e72b02f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.725052] 000000000d01d981: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.733948] 000000000415d166: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.742879] 000000008aadc235: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:04:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) dup3(r2, r0, 0x0) [ 176.756971] XFS (loop3): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 176.766568] XFS (loop3): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 176.775207] XFS (loop3): Failed to read root inode 0x80, error 117 01:04:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000000)="0f060f3802690066b825018ec0b9800000c00f3235010000000f300f01c8660f38813d000000000f21e2b9430900000f320fc76a5cc744240000100000c74424020c000000c7442406000000000f011c24", 0x51}], 0x1, 0x20, &(0x7f00000002c0), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:04:01 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400) 01:04:01 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000040)={[{@inode32='inode32'}, {@discard='discard'}]}) 01:04:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000000805, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) close(r2) 01:04:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") r2 = memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @dev}}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) getpgrp(0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) 01:04:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 01:04:01 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4040534e, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000014) 01:04:01 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400) 01:04:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000002c0)={0x2b, 0x3, 0x0, {0x0, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b) mmap(&(0x7f0000b8e000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB]) 01:04:01 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400) [ 177.341125] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 177.371326] XFS (loop3): mounting with "discard" option, but the device does not support discard 01:04:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r0, &(0x7f0000000080)='Q', &(0x7f0000000100)}, 0x20) [ 177.418256] XFS (loop3): Mounting V4 Filesystem 01:04:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000100001000b0c0c00fcff0000040e05a5", 0x58}], 0x1) [ 177.468681] XFS (loop3): totally zeroed log [ 177.487497] XFS (loop3): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 177.497214] XFS (loop3): Unmount and run xfs_repair [ 177.502325] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 177.509102] 0000000044ace485: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.518020] 00000000758038b9: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.526927] 000000000ddf08c5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.535847] 00000000b448d636: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.544748] 00000000374c8de8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.553672] 000000005e2c182e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:04:02 executing program 6: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) sysfs$2(0x4, 0x0, &(0x7f000002d000)=""/105) getpid() r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080)) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xc1}) write$sndseq(r0, &(0x7f0000000240)=[{0xffff, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000140)=0x18) 01:04:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r0, &(0x7f0000000080)='Q', &(0x7f0000000100)}, 0x20) [ 177.563028] 00000000d593d527: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.571956] 00000000288f136e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.580924] XFS (loop3): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 177.590676] XFS (loop3): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 177.599314] XFS (loop3): Failed to read root inode 0x80, error 117 01:04:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x100000000002, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 01:04:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x80012, r1, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil) 01:04:02 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000040)={[{@inode32='inode32'}, {@discard='discard'}]}) 01:04:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r0, &(0x7f0000000080)='Q', &(0x7f0000000100)}, 0x20) 01:04:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000100001000b0c0c00fcff0000040e05a5", 0x58}], 0x1) 01:04:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x100000000002, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 01:04:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x80012, r1, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil) 01:04:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000000), 0x4) [ 178.041440] XFS (loop3): mounting with "discard" option, but the device does not support discard [ 178.055417] XFS (loop3): Mounting V4 Filesystem [ 178.098428] XFS (loop3): totally zeroed log [ 178.116164] XFS (loop3): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 178.125971] XFS (loop3): Unmount and run xfs_repair [ 178.131115] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 178.137847] 0000000007eee2bb: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 178.146788] 0000000085a222bf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 178.155715] 00000000c7a33f39: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 178.164684] 0000000064671786: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 178.173605] 000000000ecb0569: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 178.182548] 00000000825d2630: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:04:02 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4040534e, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000014) 01:04:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x100000000002, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 01:04:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x80012, r1, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil) 01:04:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r0, &(0x7f0000000080)='Q', &(0x7f0000000100)}, 0x20) 01:04:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000100001000b0c0c00fcff0000040e05a5", 0x58}], 0x1) 01:04:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000000), 0x4) [ 178.191457] 00000000b2d950b2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 178.200372] 0000000006f3fff6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 178.212637] XFS (loop3): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 178.222185] XFS (loop3): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 178.230847] XFS (loop3): Failed to read root inode 0x80, error 117 01:04:02 executing program 6: unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='.', &(0x7f0000000580)="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", 0x1004, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 01:04:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x100000000002, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 01:04:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x80012, r1, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil) 01:04:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000280)=""/151, 0x97) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) write(r1, &(0x7f0000000100)="03", 0x1) 01:04:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000000), 0x4) 01:04:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000100001000b0c0c00fcff0000040e05a5", 0x58}], 0x1) 01:04:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) 01:04:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4d, &(0x7f0000000200)={@remote}, 0x20) 01:04:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000000), 0x4) 01:04:03 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) 01:04:03 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4040534e, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000014) 01:04:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x3, &(0x7f0000000040)={0x0, @broadcast, 0x0, 0x0, 'sh\x00\x00\x00\x00\x00\x00\x00_\x00'}, 0x2c) 01:04:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000280)=""/151, 0x97) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) write(r1, &(0x7f0000000100)="03", 0x1) 01:04:03 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000400)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000100)=[{0x18, 0x0, 0x7, "890704"}], 0x18}, 0x0) 01:04:03 executing program 6: unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='.', &(0x7f0000000580)="b3b8155713fb18dea1325403c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d0fbe09021c1ea542fb6a75377b0f15fbce2a60b2ec742c1a3dbf41f534688909f5ae4fc6d4469a56d5c1717d2242e73be7c68877bb527aaff6f63a470b20358c4eb7f935d424a015aad95524f69bfd5eb27b000000000000000000000000000000", 0x1004, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 01:04:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4d, &(0x7f0000000200)={@remote}, 0x20) 01:04:03 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) 01:04:03 executing program 1: unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='.', &(0x7f0000000580)="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", 0x1004, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 01:04:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4d, &(0x7f0000000200)={@remote}, 0x20) 01:04:03 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) 01:04:03 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000400)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000100)=[{0x18, 0x0, 0x7, "890704"}], 0x18}, 0x0) 01:04:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x3, &(0x7f0000000040)={0x0, @broadcast, 0x0, 0x0, 'sh\x00\x00\x00\x00\x00\x00\x00_\x00'}, 0x2c) 01:04:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000280)=""/151, 0x97) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) write(r1, &(0x7f0000000100)="03", 0x1) 01:04:03 executing program 1: unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='.', &(0x7f0000000580)="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", 0x1004, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 01:04:03 executing program 6: unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='.', &(0x7f0000000580)="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", 0x1004, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 01:04:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4d, &(0x7f0000000200)={@remote}, 0x20) [ 179.415525] ================================================================== [ 179.423365] BUG: KASAN: use-after-free in work_is_static_object+0x39/0x40 [ 179.430322] Read of size 8 at addr ffff8801b6c9dbe0 by task kworker/0:0/5 [ 179.437268] [ 179.439052] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 4.18.0+ #191 [ 179.445562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.454959] Workqueue: events p9_poll_workfn [ 179.459390] Call Trace: [ 179.462002] dump_stack+0x1c9/0x2b4 [ 179.465667] ? dump_stack_print_info.cold.2+0x52/0x52 [ 179.470886] ? printk+0xa7/0xcf [ 179.474196] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 179.478988] ? work_is_static_object+0x39/0x40 [ 179.483606] print_address_description+0x6c/0x20b [ 179.488486] ? work_is_static_object+0x39/0x40 [ 179.493104] kasan_report.cold.7+0x242/0x2fe [ 179.497644] __asan_report_load8_noabort+0x14/0x20 [ 179.502587] work_is_static_object+0x39/0x40 [ 179.507027] debug_object_activate+0x2fc/0x690 [ 179.511638] ? __wake_up_common+0x740/0x740 [ 179.516007] ? debug_object_assert_init+0x4b0/0x4b0 [ 179.521053] ? mark_held_locks+0xc9/0x160 [ 179.525209] __queue_work+0x1ca/0x1410 [ 179.529093] ? __wake_up+0xe/0x10 [ 179.532555] ? p9_client_cb+0x62/0x80 [ 179.536396] ? flush_rcu_work+0x90/0x90 [ 179.540391] ? p9_fd_cancelled+0x2f0/0x2f0 [ 179.544626] ? lock_downgrade+0x8f0/0x8f0 [ 179.548762] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 179.554146] ? mounts_poll+0x1f9/0x290 [ 179.558398] ? mark_held_locks+0xc9/0x160 [ 179.562559] queue_work_on+0x19a/0x1e0 [ 179.566450] p9_poll_workfn+0x55e/0x6d0 [ 179.570423] ? p9_read_work+0x1060/0x1060 [ 179.574579] ? graph_lock+0x170/0x170 [ 179.578378] ? lock_acquire+0x1e4/0x540 [ 179.582342] ? process_one_work+0xb9b/0x1ba0 [ 179.586747] ? kasan_check_read+0x11/0x20 [ 179.590898] ? __lock_is_held+0xb5/0x140 [ 179.594970] process_one_work+0xc73/0x1ba0 [ 179.599209] ? trace_hardirqs_on+0x10/0x10 [ 179.603459] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 179.608137] ? __switch_to_asm+0x34/0x70 [ 179.612227] ? __switch_to_asm+0x40/0x70 [ 179.616298] ? __switch_to_asm+0x34/0x70 [ 179.620374] ? __switch_to_asm+0x34/0x70 [ 179.624435] ? __switch_to_asm+0x40/0x70 [ 179.628493] ? __switch_to_asm+0x34/0x70 [ 179.632558] ? __switch_to_asm+0x40/0x70 [ 179.636644] ? __switch_to_asm+0x34/0x70 [ 179.640710] ? __sched_text_start+0x8/0x8 [ 179.644882] ? graph_lock+0x170/0x170 [ 179.648704] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 179.653490] ? lock_acquire+0x1e4/0x540 [ 179.657511] ? worker_thread+0x3dc/0x13c0 [ 179.661668] ? lock_downgrade+0x8f0/0x8f0 [ 179.665845] ? lock_release+0xa30/0xa30 [ 179.669845] ? kasan_check_read+0x11/0x20 [ 179.674005] ? do_raw_spin_unlock+0xa7/0x2f0 [ 179.678411] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 179.682995] ? kasan_check_write+0x14/0x20 [ 179.687240] ? do_raw_spin_lock+0xc1/0x200 [ 179.691475] worker_thread+0x189/0x13c0 [ 179.695448] ? __switch_to_asm+0x34/0x70 [ 179.699519] ? process_one_work+0x1ba0/0x1ba0 [ 179.704023] ? graph_lock+0x170/0x170 [ 179.707833] ? graph_lock+0x170/0x170 [ 179.711628] ? find_held_lock+0x36/0x1c0 [ 179.715707] ? find_held_lock+0x36/0x1c0 [ 179.719776] ? kasan_check_read+0x11/0x20 [ 179.723931] ? do_raw_spin_unlock+0xa7/0x2f0 [ 179.728340] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 179.733445] ? __kthread_parkme+0x58/0x1b0 [ 179.737687] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 179.742703] ? trace_hardirqs_on+0xd/0x10 [ 179.746850] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.752385] ? __kthread_parkme+0x106/0x1b0 [ 179.756708] kthread+0x35a/0x420 [ 179.760075] ? process_one_work+0x1ba0/0x1ba0 [ 179.764601] ? kthread_bind+0x40/0x40 [ 179.768410] ret_from_fork+0x3a/0x50 [ 179.772165] [ 179.773808] Allocated by task 12036: [ 179.777544] save_stack+0x43/0xd0 [ 179.780996] kasan_kmalloc+0xc4/0xe0 [ 179.784710] kmem_cache_alloc_trace+0x152/0x780 [ 179.789375] p9_fd_create+0x1a7/0x3f0 [ 179.793168] p9_client_create+0x8ed/0x1770 [ 179.797406] v9fs_session_init+0x21a/0x1a80 [ 179.801743] v9fs_mount+0x7c/0x900 [ 179.805310] mount_fs+0xae/0x328 [ 179.808686] vfs_kern_mount.part.34+0xdc/0x4e0 [ 179.813277] do_mount+0x581/0x30e0 [ 179.816819] ksys_mount+0x12d/0x140 [ 179.820446] __x64_sys_mount+0xbe/0x150 [ 179.824441] do_syscall_64+0x1b9/0x820 [ 179.828332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.833513] [ 179.835152] Freed by task 12036: [ 179.838529] save_stack+0x43/0xd0 [ 179.841978] __kasan_slab_free+0x11a/0x170 [ 179.846227] kasan_slab_free+0xe/0x10 [ 179.850042] kfree+0xd9/0x260 [ 179.853144] p9_fd_close+0x416/0x5b0 [ 179.856854] p9_client_create+0xa9a/0x1770 [ 179.861082] v9fs_session_init+0x21a/0x1a80 [ 179.865408] v9fs_mount+0x7c/0x900 [ 179.869212] mount_fs+0xae/0x328 [ 179.872572] vfs_kern_mount.part.34+0xdc/0x4e0 [ 179.877157] do_mount+0x581/0x30e0 [ 179.880706] ksys_mount+0x12d/0x140 [ 179.884331] __x64_sys_mount+0xbe/0x150 [ 179.888312] do_syscall_64+0x1b9/0x820 [ 179.892207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.897384] [ 179.899009] The buggy address belongs to the object at ffff8801b6c9dac0 [ 179.899009] which belongs to the cache kmalloc-512 of size 512 [ 179.911670] The buggy address is located 288 bytes inside of [ 179.911670] 512-byte region [ffff8801b6c9dac0, ffff8801b6c9dcc0) [ 179.923544] The buggy address belongs to the page: [ 179.928483] page:ffffea0006db2740 count:1 mapcount:0 mapping:ffff8801dac00940 index:0xffff8801b6c9d5c0 [ 179.937948] flags: 0x2fffc0000000100(slab) [ 179.942199] raw: 02fffc0000000100 ffffea00072e9148 ffffea0007602748 ffff8801dac00940 [ 179.950236] raw: ffff8801b6c9d5c0 ffff8801b6c9d0c0 0000000100000004 0000000000000000 [ 179.958221] page dumped because: kasan: bad access detected [ 179.964049] [ 179.965705] Memory state around the buggy address: [ 179.970669] ffff8801b6c9da80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 179.978602] ffff8801b6c9db00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.986189] >ffff8801b6c9db80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.993730] ^ [ 180.000383] ffff8801b6c9dc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.007787] ffff8801b6c9dc80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 180.015212] ================================================================== [ 180.022595] Disabling lock debugging due to kernel taint [ 180.028102] Kernel panic - not syncing: panic_on_warn set ... [ 180.028102] [ 180.036104] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 4.18.0+ #191 [ 180.044000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.053384] Workqueue: events p9_poll_workfn [ 180.057843] Call Trace: [ 180.060459] dump_stack+0x1c9/0x2b4 01:04:04 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4040534e, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000014) 01:04:04 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) 01:04:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x3, &(0x7f0000000040)={0x0, @broadcast, 0x0, 0x0, 'sh\x00\x00\x00\x00\x00\x00\x00_\x00'}, 0x2c) 01:04:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000280)=""/151, 0x97) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) write(r1, &(0x7f0000000100)="03", 0x1) 01:04:04 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000400)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000100)=[{0x18, 0x0, 0x7, "890704"}], 0x18}, 0x0) 01:04:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x3, &(0x7f0000000040)={0x0, @broadcast, 0x0, 0x0, 'sh\x00\x00\x00\x00\x00\x00\x00_\x00'}, 0x2c) [ 180.064383] ? dump_stack_print_info.cold.2+0x52/0x52 [ 180.069868] ? lock_downgrade+0x8f0/0x8f0 [ 180.074106] panic+0x238/0x4e7 [ 180.077792] ? add_taint.cold.5+0x16/0x16 [ 180.082014] ? add_taint.cold.5+0x5/0x16 [ 180.086110] ? do_raw_spin_unlock+0xa7/0x2f0 [ 180.090618] ? work_is_static_object+0x39/0x40 [ 180.095322] kasan_end_report+0x47/0x4f [ 180.099316] kasan_report.cold.7+0x76/0x2fe [ 180.103657] __asan_report_load8_noabort+0x14/0x20 [ 180.108655] work_is_static_object+0x39/0x40 [ 180.113256] debug_object_activate+0x2fc/0x690 [ 180.117847] ? __wake_up_common+0x740/0x740 [ 180.122166] ? debug_object_assert_init+0x4b0/0x4b0 [ 180.127221] ? mark_held_locks+0xc9/0x160 [ 180.131370] __queue_work+0x1ca/0x1410 [ 180.135370] ? __wake_up+0xe/0x10 [ 180.138966] ? p9_client_cb+0x62/0x80 [ 180.142809] ? flush_rcu_work+0x90/0x90 [ 180.146805] ? p9_fd_cancelled+0x2f0/0x2f0 [ 180.151215] ? lock_downgrade+0x8f0/0x8f0 [ 180.155361] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 180.160784] ? mounts_poll+0x1f9/0x290 [ 180.164706] ? mark_held_locks+0xc9/0x160 [ 180.168885] queue_work_on+0x19a/0x1e0 [ 180.172795] p9_poll_workfn+0x55e/0x6d0 [ 180.176814] ? p9_read_work+0x1060/0x1060 [ 180.180999] ? graph_lock+0x170/0x170 [ 180.184818] ? lock_acquire+0x1e4/0x540 [ 180.188807] ? process_one_work+0xb9b/0x1ba0 [ 180.193219] ? kasan_check_read+0x11/0x20 [ 180.197371] ? __lock_is_held+0xb5/0x140 [ 180.201436] process_one_work+0xc73/0x1ba0 [ 180.205706] ? trace_hardirqs_on+0x10/0x10 [ 180.209956] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 180.214627] ? __switch_to_asm+0x34/0x70 [ 180.218685] ? __switch_to_asm+0x40/0x70 [ 180.222831] ? __switch_to_asm+0x34/0x70 [ 180.226903] ? __switch_to_asm+0x34/0x70 [ 180.230995] ? __switch_to_asm+0x40/0x70 [ 180.236485] ? __switch_to_asm+0x34/0x70 [ 180.240545] ? __switch_to_asm+0x40/0x70 [ 180.244601] ? __switch_to_asm+0x34/0x70 [ 180.248728] ? __sched_text_start+0x8/0x8 [ 180.252911] ? graph_lock+0x170/0x170 [ 180.256771] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 180.261829] ? lock_acquire+0x1e4/0x540 [ 180.265927] ? worker_thread+0x3dc/0x13c0 [ 180.270076] ? lock_downgrade+0x8f0/0x8f0 [ 180.274229] ? lock_release+0xa30/0xa30 [ 180.278203] ? kasan_check_read+0x11/0x20 [ 180.282442] ? do_raw_spin_unlock+0xa7/0x2f0 [ 180.286880] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 180.291510] ? kasan_check_write+0x14/0x20 [ 180.295799] ? do_raw_spin_lock+0xc1/0x200 [ 180.300047] worker_thread+0x189/0x13c0 [ 180.304031] ? __switch_to_asm+0x34/0x70 [ 180.308254] ? process_one_work+0x1ba0/0x1ba0 [ 180.313074] ? graph_lock+0x170/0x170 [ 180.316877] ? graph_lock+0x170/0x170 [ 180.320849] ? find_held_lock+0x36/0x1c0 [ 180.324923] ? find_held_lock+0x36/0x1c0 [ 180.329033] ? kasan_check_read+0x11/0x20 [ 180.333184] ? do_raw_spin_unlock+0xa7/0x2f0 [ 180.337596] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 180.342706] ? __kthread_parkme+0x58/0x1b0 [ 180.346952] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 180.351976] ? trace_hardirqs_on+0xd/0x10 [ 180.356127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 180.361676] ? __kthread_parkme+0x106/0x1b0 [ 180.366005] kthread+0x35a/0x420 [ 180.369377] ? process_one_work+0x1ba0/0x1ba0 [ 180.373872] ? kthread_bind+0x40/0x40 [ 180.377705] ret_from_fork+0x3a/0x50 [ 180.382259] Dumping ftrace buffer: [ 180.385927] (ftrace buffer empty) [ 180.390142] Kernel Offset: disabled [ 180.393780] Rebooting in 86400 seconds..