ev/vga_arbiter\x00', 0x100, 0x0) 00:26:49 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 00:26:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:49 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0xffffffff, 0x18, [0x9, 0x2, 0x4, 0x1ff, 0x7, 0x2]}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) 00:26:49 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) sendto$netrom(r0, &(0x7f0000000180)="e0c66b002dd024be8c0d40bde7a848f46645d198fe3563be0a4765210b756694a9827f959473efd70cab69e877e99bb3d383ac7ff45a", 0x36, 0x28000, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000080)={0x6, 0x57, "65a51f3651e5d5b4f2b0765ea56813c1816f15f7426fda4bffc40c094129808954fc598c203fefdbfeab0c037818aecb6c78a080a627e5afb746503b2c57a5f72245e2adcf8d4e5f1182d204ca4c4c933bb9574f533f99"}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000100)) dup2(r1, r2) 00:26:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57a, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x6}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x20500, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) listen(r1, 0xef) prctl$PR_SET_UNALIGN(0x6, 0x3) dup2(r0, r1) 00:26:50 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfff, 0x8, &(0x7f00000005c0)=[{&(0x7f00000000c0)="7b4de922297743ad3987994e62a58a3078924d0c219fe688df435a9e49f4aad501e3c6a9d33e9ee03ec4792a8a45f9f66cf34db4357aa2eafbbb456a22dec6dca33abce8161bc43ec5a24cdf3da0ed83495b4890ea3f7d525c587e63b277916e9dbaf5d2588755cedefd0084ec67e1717d9dc6c2e78b715e40b4cb98b88303791746936a446ab916e680b2", 0x8b, 0x1}, {&(0x7f0000000180)="538908c24b05585af47b46e156f5580256ce5eabdf4553b282a456f13436d895e3a1da585c391f6aea1acb3cedce4fcc167887df1adb44026f17ee4c84b0431fb1b5", 0x42, 0x7}, {&(0x7f0000000200)="0b89ceb2ec64008917ca2eb77844793f5cbd9c08", 0x14, 0x1}, {&(0x7f0000000240)="0826c737a083f93b90ed0561b1c222cea79407729c4606f0c88a9f5c465074c35f0327f4173de0ff0ccad5e02739ed173cc7e4380728df56926551274df13342295464b2e2a40e57e9b9738120a2b91be7b282022185278f8fcc79a08754d908dc", 0x61, 0x80}, {&(0x7f00000002c0)="64379567d4c023139634c14823680976174efcb24a40639b715c3061e5426be9ca5587792e37f9b79b907f396f3e17ba6efe350e2de87c259c0ab0c1b52a8357edca043fe11406405b526f5674ea9b8b28de2cf148f7f8f35786c58fd7ec3e162ebd56fb6490e92cf619b85492de2ec513512d37eef189f7afcd175e005c9d1f41784bbc99c090b303cab10bcd8632af98a0258e29269c318adc44021ea44131a7ea4d26ea551f2daa2fe6ca6fd4720f6b730377370b732d2fc9afc17b3f54cfdd85e0258fab67d9f760c5996f94e8ac38b351c4f1620e4c2a4409216235ac5fee951b30da5cafec", 0xe8, 0x7}, {&(0x7f00000003c0)="8a22cab9c3a327e50c375038c510a3dc79", 0x11, 0x5}, {&(0x7f0000000400)="75515eb79e68c01531f486d67befb3037db1e0286c1e244bd01feb8c9b938804dcc5fca229575235b99d00cf296329f23e22bd6e46151278d4a28419fa4df28ac905d9aa9d44fe86cbe7d80982923e6d85a40dc900c511a4905d816582bf26f4f87743eda600558905d81649c75aa545b4c4ae9dbbcdaa24c22f58bbe74ed5713bff3653db64a65454619502537fe5", 0x8f, 0x4}, {&(0x7f00000004c0)="237c8ab2ee6e843a096bf0e30c809af452da1ac78a8c287e478f3f979449b1065ca2c1dc82eb8a5751e7b8309fe19e0e00f098ee8e3b6d9f1d2364300b6b4e6721804dacc2ca1bf3a8db52c56aa0c7be6a2a75f7baedae92e3837723b73c9757904616ebd48cdb914abcec7fd3973eb6d82d7cd535f38d8e6115b76a689b979d758beb121bbfc3932c7be7b6b90808c3b18a9df86ddcbfdebcdd688ea8a0b180410ca83bbea389444adc7441434296d5a5dff17429d9f30229f487db1811f22029e6eb037d3fdd42b55103b96656ed69ce88bcdf5a33b0c322c26655a7a5d3e86c3e545a5f8f77fe535de045", 0xec, 0x3}], 0x802000, &(0x7f0000000680)=ANY=[@ANYBLOB="6d61703d61636f726e2880727566742c736d61636b64132c65663d626465762d3a242f2b252e5e252c00"]) dup2(r0, r1) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 00:26:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffbffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "8180210f0816f539b04e9c859d7739"}, 0x10, 0x0) dup2(r0, r1) 00:26:50 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) close(r1) 00:26:50 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="46f6ab", 0x3) 00:26:50 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) close(r1) 00:26:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x240880, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8b) dup2(r0, r1) 00:26:50 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="f77db154c714750326ecc5557f71ad33043c296595a17d792416dd113aabd7c1bb2e03c87c", 0x25, 0x6}, {&(0x7f0000000180)="4972a59934d6e1bcf8c37b76f099e23b485133ae07961ceeaea6b9d0226b5659433f7fe3840636711cb833290f0986d0bc66949261bf40480a071b086eb9239581a5879e864731ca310ecdf9d1eca5a3adc21388b086be6751c97f7ef04a1964a1be137ee60f4b5e24574faa24ea40ffa2ec79c30f", 0x75, 0x8}], 0x24, &(0x7f0000000240)={[{@numtail='nonumtail=0'}], [{@uid_gt={'uid>', r1}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 00:26:50 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/\x00', 0x400, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)={r3, 0x2}) socket$inet6_udplite(0xa, 0x2, 0x88) 00:26:50 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x100002) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:26:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:51 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) r0 = open(&(0x7f0000000740)='./bus\x00', 0x141042, 0x0) fsync(r0) 00:26:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x100) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) [ 570.347334][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 570.347348][ T26] audit: type=1326 audit(1568420811.225:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 00:26:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) timer_create(0xc, &(0x7f0000000000)={0x0, 0x28, 0x5}, &(0x7f0000000080)=0x0) timer_gettime(r2, &(0x7f00000000c0)) 00:26:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) 00:26:51 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8140, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getown(r1, 0x9) fcntl$setlease(r0, 0x400, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) fcntl$setown(r0, 0x8, r2) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:26:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) pipe(&(0x7f0000000280)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000280)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r6) 00:26:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffff1ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'eql\x00', {0x2, 0x4e24, @multicast2}}) dup2(r0, r1) 00:26:52 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) tkill(r0, 0x1000000000016) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x1) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f0000000280)=0x1000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$TIOCEXCL(r5, 0x540c) dup2(r3, r4) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6}, {r6}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f00000002c0)) ppoll(&(0x7f0000000180)=[{r8}, {r8}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f0000000200)={0x1fffff4f, &(0x7f0000000140)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r7, 0x40086425, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000080)={r10}) [ 571.109755][ T26] audit: type=1326 audit(1568420811.995:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 00:26:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2684701e79bd8582c04c235f19432c726f6f300800303030303030303030303030303434303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c1f0000d516f898003d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) prctl$PR_CAPBSET_READ(0x17, 0x15) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = request_key(0x0, 0x0, &(0x7f00000000c0)='procproc\x00', r2) add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, r3) getsockname$netrom(r1, &(0x7f0000001840)={{0x3, @null}, [@netrom, @netrom, @bcast, @remote, @null, @netrom, @remote, @null]}, &(0x7f00000018c0)=0x48) restart_syscall() r4 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000001780)={'syz', 0x3}, 0x0, 0x0, r3) add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, r4) write$FUSE_DIRENT(r0, &(0x7f0000000000)={0x10, 0x1a0ffffffff, 0x2}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3f, 0x200400) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x20000, 0x0) connect$x25(r5, &(0x7f0000000440)={0x9, @remote={[], 0x2}}, 0x12) dup2(r0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000580)=0xe8) pkey_alloc(0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="722259e9a9fa974f74cd3bea0be7fd55698052ea95511c76190ff9fa2ef1b370a07efb34a88987627df70efd5adda0eb659df246cd55801e68052750789aa97af29c865d61c28c61d25b427c1fa655d4136713db43fc621166b23818", 0x5c, 0x5}, {&(0x7f0000000300)="ce7489035662bfa9aada84b1abab0204a13e7d5bd3ebfd1afd9ce2a36d298564c2f06fda5acdbd7816e4181bb15570c97654be3fba42f7d8c96e3e0acd6a4c5b6145e41c2373a9cf78d4f929a9089d8e95edd03a2252b69d8ce1388f49b5292679329e9f43d59fbec61fad2a3b979974c36d893d139f5da443f4fda79ac612c80c28d8e16e484e7bec566ae88ad002b46dcc52638a3773f1f2243b04168c2c8f6f790df18c1df7b8b321c7d752fa018c4505a0aba10e1983af47fea892caba0582674b191f2298bf6f0d660f3e66affc1276f11f06bd76585be7a299f2849529afff8f27bc9792e3327239e6d4c5d04fbd200198b5289bb370", 0xf9, 0xff}], 0x180c0a8, &(0x7f00000005c0)={[{@numtail='nonumtail=0'}, {@fat=@quiet='quiet'}, {@nonumtail='nnonumtail=1'}], [{@dont_hash='dont_hash'}, {@dont_hash='dont_hash'}, {@uid_gt={'uid>', r6}}, {@appraise_type='appraise_type=imasig'}, {@measure='measure'}]}) r7 = msgget$private(0x0, 0x80) msgctl$IPC_RMID(r7, 0x0) r8 = getegid() mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x8, &(0x7f0000000900)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@hash='hash'}, {@hash='hash'}, {@obj_role={'obj_role', 0x3d, '!\x00'}}, {@audit='audit'}, {@pcr={'pcr', 0x3d, 0x24}}, {@fsname={'fsname', 0x3d, ')eth0%em0vboxnet0)+@systemeth0'}}, {@obj_user={'obj_user', 0x3d, 'em1vboxnet1securitymd5sum'}}, {@appraise='appraise'}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r9, 0x0) getresgid(&(0x7f0000001900), &(0x7f0000001940)=0x0, &(0x7f0000001980)) r11 = fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) fcntl$getownex(r12, 0x10, &(0x7f00000019c0)={0x0, 0x0}) msgctl$IPC_SET(r7, 0x1, &(0x7f0000001a00)={{0x9, r6, r8, r9, r10, 0x0, 0x6}, 0x2, 0xbc6a, 0x2f, 0x597, 0x1f, 0x3, r11, r13}) restart_syscall() r14 = syz_open_dev$midi(&(0x7f0000000640)='/dev/midi#\x00', 0x44f, 0x6000) setsockopt$XDP_UMEM_FILL_RING(r14, 0x11b, 0x5, &(0x7f0000000680)=0x4000, 0x4) 00:26:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:52 executing program 4: r0 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x80000000, 0x0) fcntl$addseals(r0, 0x409, 0x0) 00:26:52 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 00:26:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000), 0x4) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000080)={{0x4, @name="bdfe53ef05599bfc05db4ece8c08d0f0bfdfd26a1b678c4e046c5e2e90bfd98c"}, 0x8, 0x4, 0x2}) dup2(r0, r1) 00:26:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xac, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x2000, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r5) 00:26:52 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 571.739290][ T26] audit: type=1326 audit(1568420812.625:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6068 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 [ 572.525536][ T26] audit: type=1326 audit(1568420813.405:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6068 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 00:26:54 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$getown(r2, 0x9) syz_open_procfs(r3, &(0x7f0000000040)='net/ptype\x00') truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:26:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') preadv(r1, &(0x7f0000001e00)=[{&(0x7f00000018c0)=""/188, 0xbc}], 0x1, 0x6c00000000000000) 00:26:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x200}) 00:26:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 00:26:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)=0xfffffffffffffcfd) 00:26:55 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={r0, r2, 0x1}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x10040, 0x0) sendto$inet(r3, &(0x7f0000000080)="13da1d90808066b8cb47a8fbcb3db1b99d3b04ff333d9d06a35090c7ac73f0b7cd20074612b32b2a1176e48b73761c6280e222184c", 0x35, 0x40840, &(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r6 = semget(0x0, 0xa, 0x400) semop(r6, &(0x7f0000000200)=[{0x3, 0x9, 0x1c00}, {0x2, 0x4, 0x1000}, {0x1, 0x100000001, 0x1000}], 0x3) dup2(r4, r5) 00:26:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f00000002c0)=""/240, 0xf0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) 00:26:55 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x460, 0x0, 0x0, 0x0, 0x378, 0x378, 0x378, 0x4, &(0x7f0000000000), {[{{@arp={@remote, @remote, 0xff000000, 0xff, @empty, {[0xff, 0xff, 0x101, 0x0, 0x7f]}, @empty, {}, 0x6, 0x71, 0xfffffffffffffc01, 0x0, 0x1, 0x3, 'bcsh0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x4}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1000, 0x81, 0x0, 0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, 0x0, 0xffffff00, @empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xc9289dce229b02d9]}, @mac, {[0xff, 0xff, 0x1fe, 0x181, 0x0, 0xff]}, 0x7, 0x1, 0x2, 0x6, 0x1f3, 0xff, 'veth0_to_team\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x80}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @rand_addr, @remote, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4b0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:26:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:55 executing program 3: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl(r0, 0x2, &(0x7f00000000c0)="b13ef8893f5ef2f9601287b9f02ebfd8217fe19de46c394417f11d1794a247882748bf913657f446a064682d2bff081bdb082c77ce007475e97f7205984a3ee05e5c6b17982004e16c7e2f988001a1b6525822d3810dfce38cb47a6fbdf6636b30933246d0c04c12fa75f22cbb3d1fc0b55deafffa648de9efdbd4a75f1324e66adf96") socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:26:55 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:55 executing program 0: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 00:26:55 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000001c0)={@tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0x2}}, {&(0x7f0000000100)=""/158, 0x9e}, &(0x7f0000000040), 0xa}, 0xa0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:26:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2000, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2ab974cbb4c7a63edccdca7000ffdbdf250b0000000c00090008000200090000000c0005000800010075647000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0xc06855c8, &(0x7f0000000000)={0xfffffffffffffffe}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) 00:26:55 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:55 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 00:26:55 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @dev={[], 0x1c}, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x33b, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:26:55 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x24400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="690e06f01f04f7d30ce4b9cb4c95e608048ff263e28c16cfac9f9609f76cb276c4915f162af0bec830fb9a15412afccbbd0e85dc0d8bcbe2ca382dbddce49ee92f43b95b55b44e683d8f5d0af599cbff030000e747bbe84e817b5cce675f9308a8a801f8d8e6da175d7b5a7e6c8baf79395d1ec49d424e9472e3c9ad10efb1845654e27dbad4be4b4f76e47e43d98ed5ecba4259a17d6b53da66c4ec440500000012389d521f000000ad5cb969565a7aad53b5d2805b2ebe52c084411216ae4d3751f2753c988201d29a694050b0247308bc1fe958607a7e2cfcfa63159a111a7be26f98de79e79d7b08fe433600") syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x204500) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:26:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r5, 0xdff}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r5, 0x2, 0x7fffffff, 0xfff, 0x4, 0x7fff}, &(0x7f00000000c0)=0x14) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r6) 00:26:56 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:56 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x80) write$char_usb(r0, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa2000000) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {0x4, 0x7}, [{}, {}, {}, {}, {0x8, 0x1}], {0x10, 0x6}}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) msgget(0x1, 0x0) 00:26:56 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0xa319363b81865688, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = gettid() tkill(r3, 0x1000000000016) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1, 0x8000, 0x3f74}, &(0x7f0000000140)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x20}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r3, r1, 0x0, 0x15, &(0x7f0000000000)='\'ppp0@vboxnet0system\x00', r4}, 0x30) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000440)={{0x67, @multicast1, 0x4e20, 0x0, 'sed\x00', 0x0, 0x20, 0x59}, {@rand_addr=0xffffffff00000000, 0x4e21, 0x0, 0x7, 0x0, 0x3}}, 0x44) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r6 = dup2(r2, r5) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r7}, {r7}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r10, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) sendfile(r8, r9, 0x0, 0x102000002) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000340)) recvfrom$rxrpc(r6, &(0x7f0000000380)=""/97, 0x61, 0x40000000, &(0x7f0000000400)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) 00:26:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='?\xd4Q\x1f\x00', 0x4102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() tkill(r2, 0x1000000000016) sched_setscheduler(r2, 0x0, &(0x7f0000000300)=0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) 00:26:56 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) read$alg(r1, &(0x7f0000000100)=""/164, 0xa4) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:26:56 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r0) [ 575.802372][ T7938] overlayfs: conflicting lowerdir path 00:26:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x332}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000000000001, 0x0) dup2(r2, r1) 00:26:56 executing program 3: accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000000)=0x80, 0x80000) fcntl$getflags(r0, 0x401) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000100)=""/137) dup2(r1, r2) 00:26:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:26:57 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = gettid() tkill(r0, 0x1000000000016) r1 = getpgid(r0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(0x0, r1, 0xfffffffffffffffd, r3, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6}, {r6}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r7}, {r7}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) write$input_event(r7, &(0x7f00000002c0)={{}, 0x11, 0x6, 0x3a5c}, 0x18) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x98, 0x4, 0x3, "64a6f12a7fcb0396ca46f08a8b8edc83", "85e2457ed95f11d3a58c22498aa6138417b2b1e0f23fdd9c1576c9a0eb86179ed4b48329455d0acb9f6bbf63c5e5d6a95e33a9d003ebf1891683a660de3d03db7eb6ec6b85f7d52e30da7a7f2009145d48973907a15930d770e20cb0161df87d9be6e03dd6a4e7d95f2d67a3c1d48b0c19927e5586b9c00d596f0c233126dd62e54bd3"}, 0x98, 0x1) sendto$llc(r6, &(0x7f0000000080)="ec75c078960a30a0663d9db2c488df588eeed26334ab4f76c3ab0a7b2162a734735494de48c8fe3383e8e351c25b9017496c770989488d377d72e0ce4dc499562337fc2cd2ed84b83079c8bf54c55c4eabee22c791fff93fa5979150e1d439965c060e82e9c654e612cc6f946affbe8169b643bf962cdb56b7046330e70efa260be4d9d566dc18e725b05e97c6c2", 0x8e, 0x0, &(0x7f0000000000)={0x1a, 0x6, 0x401, 0xcc, 0x2d1, 0x7, @broadcast}, 0x10) dup2(r4, r5) 00:26:57 executing program 0: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x10084) sendfile(r0, r1, 0x0, 0x72439a6b) socket$inet(0x2, 0x0, 0x6) 00:26:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:26:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:26:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:26:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:26:59 executing program 2: socket$inet(0x2, 0x800, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:26:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a71c6270146d0e0206e73ba8c63cd7dcc6760253efed8960cab967a408e0d1b22821897b6fb3c65860cec38735f20ab89a9b0d91e7410913a365f6dd", 0x61, 0x400}], 0x0, 0x0) 00:26:59 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x20000) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x4, 0x1, 0x4000, 0x2], 0x7, 0x2, 0x5}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) prctl$PR_SET_TSC(0x1a, 0x1) 00:26:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:26:59 executing program 5: getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x6419085dd6cbdc98) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x98}}) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) [ 578.873580][ T8736] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 00:26:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:00 executing program 3: socket$inet(0x2, 0x72f0ce3e202997f8, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x100, 0x0, 0x1, 0x1ff}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r2, 0x1bfd}) lseek(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r3, r4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x408080, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2200}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x53}}, {@max_read={'max_read', 0x3d, 0xc2}}], [{@euid_lt={'euid<', r6}}]}}) 00:27:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0xdd9b232cc3d8f3cf, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x6, 0xf6, 0x800, 0x1, 0x4, 0x0, 0x5, 0x8, 0x1, 0x8e1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38f37fdba040c4d5415a871b0f011c2fcf"], 0x0, 0x11}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:27:00 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) write$P9_RLERROR(r0, &(0x7f0000000100)={0xa, 0x7, 0x1, {0x1, '\xc8'}}, 0xa) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000002) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000280)=0x78) r7 = getuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x840002, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@cache_loose='cache=loose'}, {@msize={'msize', 0x3d, 0x81}}, {@access_user='access=user'}], [{@uid_lt={'uid<', r7}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) dup2(r1, r2) 00:27:00 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r1) socket$kcm(0xa, 0x3, 0x11) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x00', @random="01003a0c0b10"}) 00:27:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:00 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000200)}], 0x4}, 0x2000) dup2(r0, r1) 00:27:00 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000080)=0x8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r4) 00:27:00 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:00 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) fcntl$setlease(r0, 0x400, 0x2) 00:27:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r6 = socket(0x10, 0x80002, 0x0) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r7}, {r7}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa280410}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x8, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x100000001}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x24000002) close(r6) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={r10}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={r10, 0xdff}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000080)={r10, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) 00:27:01 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:01 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:01 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) prctl$PR_GET_TIMERSLACK(0x1e) 00:27:01 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 00:27:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000080)=""/169) dup2(r0, r1) 00:27:01 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:01 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) 00:27:01 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0xa92, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4c00, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0), 0x5) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r4) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r7}, {r7}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000100)={0x1d, @local, 0x4e23, 0x1, 'sh\x00', 0x10, 0x0, 0x78}, 0x2c) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000080)=[r5, 0xffffffffffffffff, r0, r6], 0x4) 00:27:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101041, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="80010000250000062bbd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r5, 0xffffffffffffffff) 00:27:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:01 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1ff, 0x20000) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4}, {r4}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, {0xa, 0x4e21, 0x4, @mcast2, 0x6}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) [ 580.562811][T10412] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) [ 580.755023][T10412] ntfs: (device loop0): parse_options(): NLS character set c not found. Using previous one iso8859-4. [ 580.786485][T10412] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. [ 580.916333][T10412] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 580.980366][T10412] ntfs: (device loop0): parse_options(): NLS character set c not found. Using previous one iso8859-4. [ 581.003083][T10412] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:02 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e20, @multicast1}}) fanotify_init(0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0xa5c0a2509f3991b5, 0x9}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x8000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = dup(r3) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f0000000100)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r6, 0xdff}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r6, 0x3d8}, 0x8) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r7) 00:27:02 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40000, 0x0) read$char_usb(r3, &(0x7f00000000c0)=""/168, 0xa8) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000000)={0x1}) r4 = gettid() tkill(r4, 0x1000000000016) r5 = getpgrp(r4) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x5, 0x60e, 0x1, 0x6, 0x0, 0x6, 0x8, 0x2, 0x63, 0x6, 0x1, 0x5, 0x5, 0x1, 0x8000000000000, 0xffff, 0x26, 0x6, 0x9ef, 0x11, 0x101, 0x9, 0x100000001, 0xfffffffffffffffa, 0x1f, 0x80, 0x1f53, 0x3, 0xf4, 0x0, 0xfffffffffffffff7, 0x0, 0x6, 0x7, 0x80000001, 0x1, 0x0, 0x7e3b052, 0x39faaf521e36834c, @perf_config_ext={0x0, 0x100}, 0x0, 0xfffffffffffffd69, 0x0, 0x2, 0x8, 0x81, 0x1}, r5, 0xd, 0xffffffffffffffff, 0x6c3af5f6cb5052a8) 00:27:02 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:02 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) 00:27:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) [ 581.385402][T10737] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) 00:27:02 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x8, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 581.519730][T10737] ntfs: (device loop0): parse_options(): NLS character set c not found. Using previous one iso8859-4. [ 581.537520][T10737] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:02 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x7}, [{}, {0x8, 0x2}, {}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x7}}, 0x44, 0x1) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 00:27:02 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) [ 581.972425][T11109] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 582.056905][T11008] overlayfs: conflicting lowerdir path 00:27:03 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:05 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='odev\xfaashmem\b', 0xa280, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/der/sequencer2\x00', 0x40002, 0x0) dup2(r0, r1) 00:27:05 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) 00:27:05 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@resize={'resize'}, 0x31}]}) 00:27:05 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000180)=[{r1, 0x92}, {r2, 0x419}, {r0, 0x3001}, {r0, 0x9}], 0x4, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)={0x4}, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:05 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) [ 584.456590][T11423] REISERFS warning (device loop1): jmacd-7 reiserfs_fill_super: resize option for remount only 00:27:05 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0)="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", &(0x7f00000011c0)="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"}, 0x20) 00:27:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) [ 584.628397][T11423] REISERFS warning (device loop1): jmacd-7 reiserfs_fill_super: resize option for remount only 00:27:05 executing program 0: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) 00:27:05 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@local, @in6=@mcast2, 0x4e21, 0x10001, 0x4e20, 0x2, 0xa, 0x80, 0x80, 0x33, r1, r2}, {0x2e601465, 0x81, 0x5, 0x6, 0x100000000, 0x5, 0x8362, 0x101}, {0x1, 0xde38, 0x3, 0xed}, 0x64, 0x6e6bbe, 0x2, 0xf032812fdee6e5e1, 0x5, 0x1}, {{@in=@loopback, 0x4d4, 0xff}, 0x2, @in=@remote, 0x3501, 0x4, 0x1, 0x19, 0x100000001, 0x9, 0xbff}}, 0xe8) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r3, r4) 00:27:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a1, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x5, @dev}]}}}]}, 0x44}}, 0x0) 00:27:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:05 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x581102, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0xffffffffffff8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:05 executing program 3: socket$inet(0x2, 0x5, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x2108c2) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)) dup(r2) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r5, 0x103, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x908}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5ed0edb2dcb4b0bd}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffd}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x88}}, 0x40) [ 585.097907][T11865] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 00:27:06 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r4, 0x1000, "d013b795844d9c4ae3da840c231347798a5b8e2b3ba9bae00b1eed826e39809a96fb1aba6c004466c1b0c6307dfda94fbdd350783bb6144aa4aa037b1474065e553a0223c1a15d2bfe253b7ab316993eadcdeb94d5dd384535289e81edff71d79b7ea31bbb89904e27583397a09dff4f0da467e4d28a61de1efa2df19bb0a1ff29b6d535899e7abcd676ffc92899a65eaf21fad405f0e89caabbdee0f224f21f9af01add35bc5edfa57fb3a02ade4ddbb58ea48146f7a031bc2a39fbda7caa174124971d4eb98c17f10bb51d779125398de2c90a0bfdbb0905ec63dd74c1a04b25fc97c1197d45a4919a454c00366ceb2d4d188d11e01728465b454286fd9b32ff89813e2cb509962353cfeec6dde49f1352cebcb95e07189d1e93f3c8bcd4d324584a4b5fc0efe6e267d9216fc69639d9e0d71a7a6f35e5a35dd80d8728502d88e3775770cdda5c1f8da1eac008bdb37e0a27a91c28d8ff797bdc61f1f06cb03b3714981988cef8c78294994b7385910de6c9c47bbd8976e5cc97f77bcc7463cc83c23b6fa2990715a24d4b23595ba25a849b6835edfdd311ae11ba2d434509fb2ac6f7f2ad25222256244f15751b0ec7eb3f07541238e4eecb3c3bae9604bd0f86d2e5df0b1b7b27253bdb26e7cde5e7102e8ec268edba16f7e173c6926798dbd0c8f255619f3da625df4b234ddeb77e5f074adf00eba6c8dfaf34dbe4be640dd52f959cbcf9bba3c56cd71cc0d8054b8bd732e76c747911d1247610d6927108bc2db7e7cb8ea1e2dfacda209bf5b3e8f45c5c144a3e5e7eef65ec21762cb8794c63adabb3ebf5793579d83551286ae0098edc9e8322e33161ed99511a308dc7359facf6b872bbdafd88ff753869f60cca625041d369d916b50502d2cb0d1b8c28a036c5bf234a27acfd15f4251b31371cfcfef184ec3eb2191e62c029b7b0dd5ca75d0a9319fcf84c28c4d1c681f2d7e7bf9cd52bf35a4ac0d7114f864db68c6b07fb90e5605f3c2263ddd9aee51261766ba57041ea3a765417d78bc7e7f79bbd46b82c3c25c33116c0090c6df116bad5a4cee23dfe49f98405d270156c78a7983d3c063de090267b80da1329bf74f2b257758c3cedb5e6ddc04653c6d71a29e2a826ec73836584c7ee9c0836102054d2c738b4a2d5938e46bd209cc1e71aaf80b575d959eecff9c33b65228e61590592da748dc2dc3250be7800d5d08328f36147ba92a71945360150b47735ba44e095f2580afed010da6df150bb4a0c8d4f5616c21131ba4b41f0d674c96905e7fc64431ba5faa5c6a8ffb9853d4552a415ae746dcccbe00bcb5404de6a7ddd36ba0505c386e2939277d4ad19b43d77bd2aeb80d824a323baddde592285d5185a9d563083b81a5c462cd419dea94e11b29624b1da470a4800ddc39f3a30e66a417b37257ca52a0f367143d1ee4d5276ec4181cd977b075f21a01dd41a478c233464e7a0924e3f21cf5c63b72e7017e6cefac5983681a8b814db21b8e72d21acbf2b58706a8fd92e9a5c663ab52e6fcfebf01cc41c9a54e07cb86d92e06e7a78657ab6ca9576c500b7afa8f81649e1f26f2e35277630867e80f7bc9594c0aed5cfb3cb942f2606212b175a78618a0aa7c3000d4cd924989fb3f0864811ecb1fdf582abb32a0c4f8f393aa6dcf8ebf6217f345f11eecf91ef1efc22d7eed766af32ada38b12f0eeaf126db9ed55f99b0ba46b5ab1fc7cf89d6d90ffd323521e3483888c3cc1ac8d7d3a6fe2e12cee92f0a5833d8cf542dc6483f22ae90e03c57f49cf9322a35f3348fb19fc265f63e897489d22952f0fbe2608839a07a2b4cf444ed4001da3c26e62aae1772f24a19443b0a06be33077af9f5ef2bf4090dd552a4845666a08776be32e69f2f844af1518487c71119da7b49d5fb01d704622208689c194eba759989ed901bd3f03f5dbf320feb8f3d1d3575526332f820b400955e52186aab4b21e3c645db803e95b98c8ffb15bf180a2a96ba6f206f780979a2afb95c746017cfa2c2ef9ada6e4d2d3ccad7538218c84fb1f89fd750cff874d4f27110ed39eb0acc340dc7422acbf5a8ea394f55d1eba0a33e513bd6d658bb3dfec3a5db2bcfa4d0977db824f8f6d5fac83da9f4f4df367d8be2a4657ab95f37aec09c65932efe8a30d82acb02753566a94f74300ee6f3f3f134f1eda91dd401e524ea3e61b11a2519ddc31b4bcdf2c8d6e3954d94247e6293f883b9ab4f9baefe006d0ef9c4bd3f6cc320b9deadeef07c16cf640b112c06cc0f2082d292b1956937fa1edb6c7b7eb0fa2810bbd98990dc80a8f2c66afb9b93ef7d6d8878f181058079e4a4211f427b289ea5ef22327d750aababd2c5d6b331785159f310a0757f45822c6805ad043c80c2cbb26f066861b185ae3e0565d76e49b8b8d145f4b38466440cd985284b2cf31f58c56e179bd7e5c398404252e2cbbfd7208e35b952a426e28248324dc364b408b1ef86f3276e0f98737d7549a00f9fd24933b416a542f2f8dca5b9d82a01365073e42a1b772ae4c1bb428c4df079f2f599a878d028817388356f1dc1e51accd3d73d42ce9e589acff9f6214af10e29db05406db13b015fb761686d0c420982169688847ea5f731e93c53178af56e8f71c19a1af5e38d6548e9aa0e55bbb86bc19689111c262f4b515d0fd75eebf6ea9aa23c08cdde7e1c92833eed511639bb627fa791cd2c9b0c4eacfc2f1b0531971ca7b3b484d6f1cb715c23498409a9c097e5a4e46224fd36569c06e34f730f4e67c73de4676f048b003023d79f43677a2db8e82ef536b37ff5711a0efa8abe5ffb401cc5f375fdf0507ee372361938973005b637b2395dc9e5fa9c62d90822851370cb5939a2e0ca73f88b4d180c8f9a6a409660e0d17c967511a4e57bc0c9e887106c590f1df84bc1fba65d58720e41352065ae21ca51d0c95a111fc100365693aa2fe870cd51fe75ebb99af1e27ec64ec3fc16587978bb54bc309eda9834bdf7914fd7cc1d7683977c5b51a1bbdd894a7436cf719f3301a557d09df246f0ba497aa46d23014b0989c31e2a0c68c9c9f5d6703ec194c2135a26b7ad4fe51ecd751dbf4330cb2cf81b3871a96e77c86250fb45a2a500edc13f8c7d5f504008ca537a785689cb6cf74532087261f07d375f23a0b77533efbd8dc6ab1f733332e4d7a631e9bffab73d549992295165a35d05da724f336870a99c2334ba25678189f1331666ad217edfe65e0039771598f550d5dfc1c1ab647678b1fdf114865638533b968b247547c0935e96cd3098c3e9314c7e83f4d703cbe4123df9301431d561b3561f00c5e14463019c6ed325c43f188331231feeccea61f361033b0172410f828812cb9b7c6197fa7618c8dbce8521ebcb6b5ef702384eea0899421bbec322f2ed16f80312bb370475a2831d13c49176bd62fb7bac0af37fe4691b0a9294cf36442179d2f48974c283b3ef59772553fda23df937fd16346e5ffcaecd073a33eb064b96326636bae98ad30b18abda60ec8b948cb916be545509576e68eb07d99b2c6e95f3408230bcb40c35bcee95548f47ff064b0705ea50c8bd3e930cbff4b99ef7263533f1f5bf7cb8b3df38297f9627789b9a57d57bed314fbc7663f0bc8eba4720d63664b6ac999d448c0073f14b6a9bc1e7e53d31bd5d9147eee8bf294e1271f9f2c7543ac784740278ab71db27eb18485e8fd73eff74757705bad7bfd3ec6ac600b930e2fd30891fba9bdc9195f368e44831e1833cdfe1e982b455a59e44ca794742c423e537511b405ce3e388a10ed159e3ec15582436a2b973a77ec16f3e304d6a21f6bd1ae64b89d0e158cb5cacaae28e4935b5516e4c24076ec6a3c56e4b6fcb84829fcff1b87c5651ae6aba87ead9341b8e8b777d29fbc2e5550559aea5c7b29081628f15c02822d0ee59d9fe035816aaa8f86a03f1447a53b313d288ba3343123e5c0a2734f6f55dab3a6c43f813f6737e730ecd08cca99b93f7fcb143f891ad07746fa34029bdb3245d463f7b1083b43b51bc0cc07770d82a23252a86891549d6d3e6bf06fb3bee89ab9d45da7a9c63777f71b9db93f2aca4f18e9849c73e76253f38eb9b0ffb0bad9fa5ae162a7731f2e0fe550f65f2ff18282127ee2c08d5301a0a107aad6bf592241239a18d0326e661de77755d25ce974997a1c4c29e46fda1c6f76c66f89c3aafe47f2cfd37dc1567b045e7cddad073d0de284817541633abce2a4a1ab9295a821f24654d980a7e9b39121d674f89448b71b28afd846b2ff42dfa9a3dc0646c0278451a41d2b61075db9a2052bcf217327b43c107d19b7d3cac495d6879de415541cbb0a74987808e58a8e43c312948b175f2766e4aa15cf94619e5a4a70a782f9c796a6ab6e5f210cbce0c3b21975e50cbdc22cb92c470ef6de1b9af1cc56772222b759d8f0faa9f81154203ab30a82892b38b1e6c9212e438358913cd7242cc7a1a3291acba53668ee561ff00a78a57d6d6744c9f2dde8c7e32d10fd9f43a82b3f30fd3694a829dab520f635c9543b4960c2c78d14dee6ad5e0e020cf00e68251e0004499cd4662273e0d174eb860171aba7fd63e1ad955e0c00083aa7c667749c2607a08d753138da7bcfe606ec79f5c986ba811cbefa5fc54526a4b2301e58a530c7ed9a9c3443ad0b40de53f25cb40a8928463d9732b6c1723f14415bd73df16365f511740deaaf87d54d7308216c39d2b8c3bdc17408001254a8def93f33960cbaa79d93cc4766005a899fc0fc1ce32311d0b385871269bf62f1c1fe1284edf2449764bbcdae35f263402dfe93a0aec6ec8afcd5ba4b6b61c4751566b147c9ac77181db0521a130f222af516a3f8dce12c44ea42ec309df0f1fb22504c09751e70800ca8f9a893eba41e804276fbd4a7c251d401e794ca24d3b51e630d10a7076c8dc48cd5024b184e2cd63f2751a9ba74ebabf0c8f5db23df812ec4805c520d4f71820fbc7aae0360382c294979f37fe794f48f16d34084518f40282d9c8fe157ecef83dce1d61a18838e27c99975f159ac5c74b8a4ba747acaa1fdf0a4a6da5ca608931237143e50ec1b7f69b9c173d9a6594b31ef8e513268e21b2913b28eac386aa6740529d7864c3d27b15a5c45e5015a9dd6acf009dc61cf60e7816e87413d31bae241b46eea31133425c6c1fd705d4e388692440c7a00254252af5cb83a840304ba45daaf25d709a07e106e3091222eec44b3b96d5a93d2780f6a8e838c9aa40c4fa91060a30a70075c09cba2d89cc81b9ed8c42edd7174f76499b22d80b24c7df9f9e9eb5f87c0a1ed394859ed35aff2d0595bdc5425500307c9f4d3d53f91e158b64cfa14e9fad442edc497d7424e6ad7a0a7bf00ff7bd45488a9f0b57b3d1d6accf336ba1be47b728e5f566e6ccad6313bf0d8260891f74ce89a7a3af580c3972b848be96550a26e9b4ca43d3d539df11f381d78f7b382f405e0c813661c8b840b6a5e3738555b10f29a6c0fc8f76505394b507c397d5c7f568a24337f9e8ee183b731e830532c14f20a97ce7ed46370a4b4f4832b8dea71172a27f281d25c2336191a5aed0847ae8b82147cf745770cbb572f5703d049d4141d29d82eb5fb33abb413f7f953ce95f38ea0533f1f2c1fb86873516409828c49fc10393d5896cad4ca286f0a6f0897125f9eb87c8806c9655aad6174ee71e8b7e5c0720ae5010de3687e064a3cf4fbe3aa2118bf827e12f6a63ef5363a47ddb70c3417e4ea48136b8b4cdd8142f2d0292f6c42897c25b235f1c7ecd87ef28b1a95cbe433f9"}, &(0x7f0000001180)=0x1008) 00:27:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:06 executing program 0: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) 00:27:06 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x7}}, 0x5c, 0x1) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 00:27:06 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashm^m\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:06 executing program 0: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) 00:27:06 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80001, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x192b, 0x335007cf223f48c5) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0xe7, 0x100, 0x20, 0x4, 0x19, 0xffff, 0x8001, 0x454, 0x8, 0x1, 0x10001, 0x20}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) 00:27:06 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'eql\x00', 0x6}) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) [ 585.623113][T12036] overlayfs: conflicting lowerdir path 00:27:06 executing program 1: seccomp(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 00:27:06 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/\x12~\xd96\x95E\x9c=s\xf1\xff\xb1\xca\xf0\x00', 0x402001, 0x0) r2 = dup2(r0, r1) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000000)='/dev/ashmem\x00', &(0x7f0000000080)='./file0\x00', r2) 00:27:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) [ 585.700640][T12405] Unknown ioctl -2147199944 00:27:06 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) [ 585.890689][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 585.890714][ T26] audit: type=1326 audit(1568420826.775:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0 00:27:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:06 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:07 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 00:27:07 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) 00:27:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:07 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockname$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r2, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r8}}, 0x24}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000140)={@empty, r8}, 0x14) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'yam0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f00000000c0)={@remote, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, [], 0x1a}, 0x10001, 0xffc00000, 0x5, 0x400, 0x0, 0x80100, r12}) dup2(r9, r10) 00:27:07 executing program 3: socket$inet(0x2, 0x4000000000000001, 0xfffffffffffffffa) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:07 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls=c']) 00:27:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) [ 586.857914][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:27:07 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:08 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x221280) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = semget(0x2, 0x5, 0x100) semctl$GETZCNT(r3, 0xa3f670d23a8ebdc1, 0xf, &(0x7f00000000c0)=""/73) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r4, r1) 00:27:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) [ 587.188120][T13284] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:08 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:08 executing program 1: 00:27:08 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80, 0x0) connect$rose(r1, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000001c0)=""/4096, 0x10000, 0xa74f2d032162ddd2, 0x3ff}, 0x18) dup2(r0, r2) [ 587.574527][T13503] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:08 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685, &(0x7f0000000280)={0x1, 0x9, 0x1000, 0xc6, &(0x7f0000000100)="f5fc5f6183702b8da82307e0801ecf4b97e4735ec4a88432838f742feb2fcc3c7d9cf47f901d89f983a8626b20a207f92334acc3fec3ea8e28848b3c283a81583c129a53048cfac5cde4afcc9994f92a731aa964148ad45c038ff296dbbbe05a976e2c0af9be0a5bd8b3538aaf797d698454237bd256a7e6ed288642563f9a442ce726395a8dc0a5d604729cacf4f448401675ac1a008fc5bace2c99c04250159a7b1fb07d209b853ab76a8770f72d6749a910b35f944e1a881fdd1c2f728b6341f7ad34bd97", 0x69, 0x0, &(0x7f0000000200)="e1c78613bc72565432d211d5fde7a25e85a83fe9e04ec4770d7df26ad23be9105ee4630d8bdd0c4769d6e34025ae62154b41d7cd919faf5a68d9c6dc331d1d19ce266069af1c276e3161f6819819a860ac2820772b029e1ca4baa3519a7ae27459dabbbc858d27501b"}) 00:27:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:08 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) dup2(r0, r1) 00:27:08 executing program 1: 00:27:08 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:08 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:08 executing program 1: [ 587.961273][T13619] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e6400"], 0x11d) 00:27:08 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r0, r1) 00:27:09 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) 00:27:09 executing program 1: 00:27:09 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000140)={0xb20, 0x8, 0x6}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x5, 0xc684}, 0x1}, 0x20, 0x1, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) dup2(r0, r3) 00:27:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, 0x0, 0x0) 00:27:09 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000040)=0x1) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000140)={0x8, 0x3f}) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x81, 0x100) fcntl$setlease(r2, 0x400, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x80, 0x9, 0x80, 0x80}, 0x10) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req={0x80000000, 0x1ff, 0x80000001, 0x3}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:09 executing program 1: [ 588.386195][T13991] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x7, 0x4) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0xbf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) 00:27:09 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) 00:27:09 executing program 1: 00:27:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, 0x0, 0x0) 00:27:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000002) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r7 = socket(0x10, 0x80002, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000069f7e244708de3ebdd36cdcc29c10d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r11 = socket(0x10, 0x80002, 0x0) close(r11) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000080)={r13, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000240)={r13, 0xdff}, &(0x7f0000000500)=0x8) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r14, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r14, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r16 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r16, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) sendfile(r14, r15, 0x0, 0x102000002) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000000080)={r13}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000240)={r9, 0xdff}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r9, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000140)={r17, 0x0, 0x20, 0x5, 0x3}, &(0x7f0000000180)=0x18) 00:27:09 executing program 1: [ 588.781080][T14236] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:09 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, r2, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, '\nip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6d3ea3ad755fc5b3}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x21}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x14b}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xec88}]}, 0xe0}}, 0x80) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:09 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) 00:27:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, 0x0, 0x0) 00:27:09 executing program 1: 00:27:09 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r3 = dup2(r1, r2) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000080)={0x43b, "735b73e1b2531f9aefd12fe6ccb3aaa2ca1ae91ae83cad5b0dac18ab7afd06dc", 0x10, 0x200, 0x10000, 0x8, 0x2}) [ 588.981801][T14415] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 589.068651][T14462] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. [ 589.084415][T14415] IPVS: persistence engine module ip_vs_pe_ [ 589.084415][T14415] ip not found 00:27:10 executing program 1: 00:27:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x0) 00:27:10 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup(r0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x4}}, 0x10) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) 00:27:10 executing program 5: lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'security.', 'nodevvmnet0md5sum.vmnet0/vboxnet0\x00'}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:10 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]) 00:27:10 executing program 1: 00:27:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x0) 00:27:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss={0x2, 0x8a}, @timestamp, @sack_perm, @timestamp], 0x6) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000080)={0x1, 0x4}) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x10f880) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x0, &(0x7f0000000100)=0xfe, 0x4) dup2(r1, r2) 00:27:10 executing program 3: 00:27:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x0) [ 589.549472][T14747] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:10 executing program 1: 00:27:10 executing program 3: 00:27:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) 00:27:10 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]) 00:27:10 executing program 1: [ 589.941060][T14932] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:11 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xf55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x3ff, 0x0, 0x1}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:11 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x7fff, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x476, 0x100, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) 00:27:11 executing program 3: 00:27:11 executing program 1: 00:27:11 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]) 00:27:11 executing program 1: [ 590.425446][T14948] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:11 executing program 3: 00:27:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) 00:27:11 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x36, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x0, 0x7fe283b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0x5, 0x40}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:11 executing program 3: 00:27:11 executing program 1: 00:27:12 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000004c0)=0x1, 0x4) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000280)=""/208, 0xd0}], 0x4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) sendto$ax25(r3, &(0x7f0000000400)="226aa98cd81e8d", 0x7, 0x4090, &(0x7f0000000440)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:12 executing program 2: 00:27:12 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=000000000000000000000']) 00:27:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1) 00:27:12 executing program 3: 00:27:12 executing program 1: 00:27:12 executing program 1: [ 591.370952][T15278] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:12 executing program 2: 00:27:12 executing program 3: 00:27:12 executing program 2: 00:27:12 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=000000000000000000000']) 00:27:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1) [ 591.761007][T15298] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:13 executing program 3: 00:27:13 executing program 1: 00:27:13 executing program 2: 00:27:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1) 00:27:13 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=000000000000000000000']) 00:27:13 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:13 executing program 2: 00:27:13 executing program 1: 00:27:13 executing program 3: [ 592.304668][T15409] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz1\x00'/214], 0x1) 00:27:13 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=is']) 00:27:13 executing program 2: 00:27:13 executing program 1: 00:27:13 executing program 3: 00:27:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz1\x00'/214], 0x1) [ 592.662780][T15431] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:13 executing program 1: 00:27:13 executing program 2: [ 592.855915][T15431] ntfs: (device loop0): parse_options(): NLS character set is not found. Using previous one utf8. [ 592.889324][T15431] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz1\x00'/214], 0x1) 00:27:14 executing program 3: 00:27:14 executing program 1: 00:27:14 executing program 2: 00:27:14 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=0000000000000000000000']) 00:27:14 executing program 5: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x50a4}, {r0, 0x280}, {0xffffffffffffffff, 0x40}], 0x7d, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) mq_open(&(0x7f0000000040)='.)*vboxnet1\x00', 0x40, 0x80, &(0x7f0000000100)={0x80000000, 0xda, 0x1, 0x5, 0x10000, 0x7, 0x9, 0x6}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x80002, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r7}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000240)={r7, 0xdff}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={r7, 0xe3, "3ea6b35f964d64b5050229a6d9f82429bda56abd6691bb083699ae10a1c665d2023c7933609020873b001ea1ccdf350b75b130bea336937e1baa744602298e9bf7efe41348e564a52acdd3e2a4b6538034b2b246335645cc1876df81479504994b2a3e036d5f65c1e339c5793adc9af10aaadd34579becdbbdbff7de77ce2fa52a03411a2e5470cd203652f199cc2f215479c82426dc14fa463e35b5fd04df8e4fc4d295c87250c43924c6bf38af411025fddca729d2634c21d834a6d2c46f64f4c6e3dca0173b53550455e610cbe1c98ab9696431fd7041edfa1b70c383e6c2edce14"}, &(0x7f00000003c0)=0xeb) ioctl$int_in(r3, 0x5421, &(0x7f0000000280)=0xbef) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:14 executing program 3: 00:27:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz1\x00'/250], 0x1) 00:27:14 executing program 1: [ 593.281317][T15456] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:14 executing program 2: 00:27:14 executing program 3: 00:27:14 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0x8d, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={0x0, 0xea, 0xd8}, &(0x7f0000000180)=ANY=[@ANYBLOB='enc=oaehash=sm3\x00'/78], &(0x7f0000000200)="5299a00ce0635d25cbb500d0fd3758ea6422f1f741525a294b59b50f334d9509a59c7bb650fc30e5401a65269c887da7132fb8ebf537b74fab059e656fd15c01058650f4809e7dd25d8e36745b927e7b415be5eb87ed00e920e80ed92260a63880d0b705d3f186694daedca99fe5c1236048d6cc926eb3d4ef74c0755dd98ce830ebc8313493c9cbdd6187148b25c3a8b5231676de3a8634230eec2d0483d31e301015ddd9f25fee3ae5f90dd94cfb68d38b392b37791f9a00fdb04cb153f83b2ad0a7c0c1022621c0ad7ad41a4573075b93686e01b5f4a8287b4e6ce9fb167eeb194c5e33b336dc346f", &(0x7f0000000300)=""/216) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:14 executing program 1: 00:27:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz1\x00'/250], 0x1) 00:27:14 executing program 2: 00:27:14 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=0000000000000000000000']) 00:27:14 executing program 3: 00:27:14 executing program 1: [ 593.819851][T15670] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:14 executing program 2: 00:27:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz1\x00'/250], 0x1) 00:27:14 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x61, 0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:14 executing program 3: 00:27:14 executing program 1: 00:27:14 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=0000000000000000000000']) 00:27:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f00000001"], 0x1) 00:27:15 executing program 3: 00:27:15 executing program 2: 00:27:15 executing program 1: [ 594.235384][T15707] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f00000001"], 0x1) 00:27:15 executing program 2: 00:27:15 executing program 3: 00:27:15 executing program 1: 00:27:15 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0xc19184286b14f4dd, 0x40) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000040)) write$UHID_CREATE2(r2, &(0x7f0000000200)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x8, 0x3f, 0xd8, 0x8001, 0x7, 0x6, "8205a9343cdb64d9"}, 0x120) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:15 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,']) 00:27:15 executing program 1: 00:27:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f00000001"], 0x1) 00:27:15 executing program 2: 00:27:15 executing program 3: [ 594.992845][T15739] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:15 executing program 1: 00:27:15 executing program 3: 00:27:15 executing program 2: 00:27:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f00000001000000000400000100"], 0x1) 00:27:16 executing program 1: 00:27:16 executing program 2: 00:27:16 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000003600)='tunl0\x003;\xb6n\\\x9d\x8f\xdf\x00', 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x404c0c0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 00:27:16 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,']) 00:27:16 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) r1 = getpgrp(0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) accept$packet(r2, &(0x7f0000000040), &(0x7f0000000100)=0x14) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r3 = getpgid(r1) syz_open_procfs(r3, &(0x7f0000000140)='fd/4\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f00000001000000000400000100"], 0x1) 00:27:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00\x00yz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000040)={r1, r0, 0x1}, 0x10) 00:27:16 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad66b6b30400fbab65d8b4ac2ca35c6e", 0x10) accept(r2, 0x0, 0x0) 00:27:16 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,']) 00:27:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f00000001000000000400000100"], 0x1) 00:27:16 executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e00000018008104e00f80ecdb4cb92e0a60142c000cd302e8bd6efb120009000e0014a00700000005000500fe80", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 00:27:16 executing program 3: r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e00000018008104e00f80ecdb4cb92e0a60142c000cd302e8bd6efb120009000e0014a01000000006000500fe80", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 00:27:16 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls']) 00:27:16 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,']) 00:27:16 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00"], 0x1) 00:27:17 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls']) 00:27:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss={0x2, 0x8a}, @timestamp, @sack_perm, @timestamp], 0x6) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000080)={0x1, 0x4}) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x10f880) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x0, &(0x7f0000000100)=0xfe, 0x4) dup2(r1, r2) 00:27:17 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,']) 00:27:17 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xcb99}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00000001c0)={0x5, r1}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000100)="1d1a6c64af823357407e47369200a711c80a7c840ada0efb908a4165627178dbec059100eee3c851a178baceaef37cc39eb95e201f3bae5b7325263368a143f5a1a60da8a0320b3d5e02b0e379ef42fc3c39e020c52ee25c8a0ae7add9523f16a719ddd1cf5e8ec45535a97d56cb4d8282a684bcc1f813e4983865b0de9bbdd42e987212838b8e0edb4ae23eb7c6c9b05500f641b44cd6dedb601c80f48764") truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00"], 0x1) [ 596.400649][T16214] __ntfs_warning: 9 callbacks suppressed [ 596.400671][T16214] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 596.514558][T16223] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00"], 0x1) [ 596.569147][T16214] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 596.596834][T16223] ntfs: (device loop0): parse_options(): The nls option requires an argument. 00:27:17 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80001, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x192b, 0x335007cf223f48c5) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0xe7, 0x100, 0x20, 0x4, 0x19, 0xffff, 0x8001, 0x454, 0x8, 0x1, 0x10001, 0x20}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) 00:27:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e"], 0x1) 00:27:17 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0)="a364da09ab9282597a85f4d7e254538413aa73cb4cd3d25db61656a167a6524221af8956d1abe91275566ddfe17d3f30a3316cb636689a2aa6d5304901cfb7db4f99117b71a0ece8a8323f5af9b0f4d182b4485c1f386d6dc09d81543df3160fb18ca5e7cfddc087a5ef27ffa8619848046ca3d3802f5be90cca0483b95a49a050b2b737c07eff2758542fbd6f2aee2b81455e615d6050def929e6d7a332c698ef38ab7c18147106d0bbc7ebdbce805afcd48a0e4c255d916f9495707397b12be9a31f6cc8ac0d20025013dc7345d4dafdb7aed87855e242de355629f24659cb3968811772db7426e275822d4f27480d6cb283a2b88fca0f60611e5bb90222c68ad396e301f5db1181c7c4fb64d303f0c0bd3ec59e24cf2abb0a368334f7457ace1ec67b593fa662b81e42ecf5d167f8aeb57cafd6d01070374caa05a529ca997c834907e6345b881c93a0a9e244b87aba068dbf879bd6874e880a0783c0168e0ed5854fede554c70b4cb34ef9ae6c15a11843a80228ef2fe7be5016d52c591754e05e16c6bfc88a9a85f61e94f6d661db193ffaaad7fa55d885eba58de4181ea715d4b477c026b735673c41577b8fcadc4d546007ef978eb9618259668c09d3a22d0a5ec6d5e239fc19074f1c9caf81c756a3dce51154b18f4d19e904ea7290a949b14de1047c3f36c4c0456e287f381c3315300f5bfa9dae43448ceb5310b07f54c20824487ccb90f66999842e09b0a4b86e7e5effb5455e8c2812648318ed447398466f69f4295c4f939f2e6d7b8eb0bfbba4a8ef1d8aba15f125b7bf658490c219492ac1a3e43110b2185a7fee072f697d8a9fcc1940ee86f1375107645cde950f39520af5500c4260ec5cd6452a3881a1d122bf420bde61ed1bf44cf18dc42a6f1553ec3a6585549e3193155dfc49c196957e60ea6e5fcbcef8ee4bd126faed94b09a97bfa28818e0e45681b59bd2ef71f3ece42ee654b7bb7a356d8b40578135243ec7773d7de0612abbfed40d4046008a8e22beee03009cc1a9663d00347e8e635be438ac05bf0a8914f316f3d507ab0fad31e276681d9c647835c16f71c7b02e448162ca59752e205b6bad0c840a630e2e81d9ec602567dd313559f353c424362b6c1fb79672699b57395e15a4f34b119c51abd25eb27986e58739b5f731d72e7f1d15ffff3c43414d00ccd1361365d1d8f4d10346506b6b1a7c4679dac54d7f807bdd9a07b382560a54f725191c5aad5d2134b05b42c695e4a2511349fffcfa10c822fb2a214de3ec5c459f4240d945e6635c72b1305a435b5eaeda8093c97dc9dae90602ff75b03da7c68c2c88ad1c4c701f0e2b922063a56d0fc371583e5fd841ac3a330705b529a1822d589a29384c2ef65efbcef73657141629ee9f5cc74956ac5973fa1f30b780c719197379393b553a1132f165986e2c11be09a9bc23cfd4e818dda55ff3df08ff9dbcc628b71ddc101b2cdbcf95ac643f50398e682ae310bbd6056774847ae1b7214af6a10a48801dae05b05b6e86caca085f56412c151991e2971ff8e7ae65c055e90d61e78979bac44344c92e955db04b26f91c891a55bf61fab0eaef99242ceb314944ab7e35c13c272fc5e7d922413c98b263c916524a9100eee2f502603001d305a3a4ea2e53dc111c4705a251e0d5625b8904078a488e826449b4c34a65dd44fe1d6849e31ad78df337c6b8a203a5213bc1ff2641c12c518b7f7c39eb9748451229611e1b4d8b9b2023fa011a2f4658c7b07d2487937cb39a008b4bb51160ea8434db2733c50b2442f20e7c89a6c206ad2413d0faf8c22913d6bc1924c8e4ae7a9da808feba3dd0991f94616b49571ef1ea667f94198efc8d068a9381727f963a19f74ca2febfd6a1291deab7e1eba0d85afcee802d236e103970629dbea0100b65ee5df890f9003483711c6fd4311d993ba668ec44133a7264249a436934568a074a0bf3412086628e1b25f31780af56806f179eed57ae90cb1d213838e630e4c4001bc224a8447974c87c3b152832ab3322c1ff2e5219545d94056f2316e9c72d61f8d98e8fdeeecf633009c340a3917d9ee4267d228b0f49421aafc71dc27be91f205bf21c6f1820641e8affe147410d3a29411677ace9040f5647b97186320d97e180fa45ad0dde5be9f99091f3b402feb5103ac80a99f22fb54315d34ab3ca7084f008235549767b2929e83a3cedd976e9b539ee45d54e4836e398a1f14829369576f3155cf4c35d9faaab601ef201634df8fb71b9f6d2e09db2d0fa5f1911955128915f15d3a8a79d735bc74acc2f35c346106d9e5f28637a1c0c90f745505883780870ef09071188d993a3c3beb4ea5ac7c94688fae608fcdc1561775060c8f0354cf3070afe51e8eb41983d7111d91aada5bcc83d61222d3d91fe359492bd9b7cc47197e282f3f1b5bb4910055147b6b83a883fc8de69885df4f589e73dfcd4a562a45251f723655cec5fcf264500716becf20b510d23c44f8bd2e6eae6f7697c1e2793f3efa760361c1ccd0f3615212a0e7da9f6c2a1a64fd7d48f111c4ce1d0e8c7bb425fabd1b8e8360f0cb2f0b2451c5aafd5c6b066c1712d4c664ef8913640d40f68d05062652af069a2c54ebe29f2a6b05c7f0f13b10a96e552cd2997130320b3ac054f694474d6a8832ce29049ebbb73eb8fc1cc65580a42e77537347e83e006bdf389cec3732b82e1acd0ed9d0605fdf5949b93fa5929ddddb5008d5986a0e8b118d0bfdec8b53ad14c4e481d59bb03417a60efa68b51a4a2606fd2aaa6a5f04baf7e92026eae98713afbaae090fee3fc071d365bea11d4174f5d3af8d8c1eacde4035da0dda34b0957549ac1fd11351d6e185b9e431c44932761c29614316c7f198a5fda78be7e190da8f797cf377bf188f417844d05e4fa712feeafb9ed6b795af2aa6a8f7a660daf01735ff374d605847a5b99d5abb2f82bd34ba4628b72d039e53b66a2b96f59a17839a8aeedbe137726971cd7b0227739a7ceb86ea0b48eb86809a343fd4ae751833ad1db0ebaa6dcba937f18bf8a72f4b1d2996d4005ea66b9ebb49f95f71c5d5fed6d6cc8b655062a6d66656573ac184146e1b362f9c15334453e5a771cdf4003f988cb4097bb92b68290d827ce4b679e77da7d6e8eace917d44a6ed51ed3d823b5e217450518ae299b9f9266f3e9cabe73b3507f08eb0d8ff6c9feadd08802aa24043e61bcd0d6e1e0720254f4abd1488ae7b4051b346f56039c36808d556d410e6753dc6ecea247c7f0d9ae5210d7a825bb09671afee479aad3cd5d0b354128e72937f9b549e2e2509f5f1862a30a83a7d60445c5cd28ead747f8a5d1f7f89d3f38976edd7ff3fe35c73988a456510af557cf42e1adbbd85db438a4c0598c5bd1dd351896762f5eb7e077d30e67333254239896501952ae737cb527cb3d63a7f7eff31d15cb9acd7a5ce1ecfb4514ee962d427b3086a5688f9757ce0839fad66b398763bf78d166e54fd540cae909d816fca97fec9c0afcfbf76781abfb2df7e86295f0591e6eb57c2d55b1bc930b0ca139c31e02f9a27cec0fcb1547a0b9b75c7ab84e749d86a18a4ff3dc8a86898f04aaa52712d5a196bfa8273c2640f91a65e3a2b84695945efd8feeda23eec43fecb40d43281e4c3549359e711f8d0b8189b5baed63221b1bd494e4a1755b927c20c0ea22c6994d40832d43aa22baf8a445a4e7396334e684881a643d39f858bb34536904edf60953d9ae85b7a2b1fe48a2c48f4b3369a2d35cabb91c9e32887a0a8bcba092f069dac9475bdee0be68a79147976f9bd594ad4749276720f710af4c597a65ed4fb1d6331c1651469dbd4e97441b008fa8ad3d8466487a4642e0c98fdad93bf277e1da0a284d1f271b6d43a9f20a6326c9579e7b13b6f1f4a0ac009055a39adac0d7596a1cc24ccd1af2f87a0d02797409230fe352753ec160e1ff990fddb210c8d2cce0e5c70fbccb898218cfea3ce2a58b232698d0f6888dde71f4e25231652fad69a96c640caefc117a2204fa135cd647e8d4dc9b925ae94b7f34d934c3d871b112e4d342b52a7705b6805f22a7f39d7a2db285823755f402828cfaa9036dd28be920be9bf292a73a6723872fd8d2903ed043b25cd7c7795a2304ab2caa4a18e24ca62a08c552e05a70a3428480ea74d3b97a285fbe81eb410f7d968c5c3dc4bf6cf540eff95f19954fe7e4c757e4e14ee79d6da5baa797a7b2a66686fcae4a800af1bd0b09d4d29db2a7c4f270b221d699bb82fc5c875b4ec16642895b7d7877ca1a313b812e5748a3ef8372b966758d51b64c08be91e1098826bc8932001a71b3a63b217d78bc374d3820739d2be12fb81cb52592f9c5a3a07fc24fd7d9eda1861a8d197cf2b584c7d48ad3ab4fd3e52a96fe1d21a0ba09b3b3e522fd0cfe5334f7a0f1e33214a1a8faec28a9615f123c62d8b0cd3bb4070a612686357c94333ad6dac1a8774f0e67662eb2f098023088790f99bfe057e7261c31ca58f61fc58706e2247b64d3fbe3d9bf998fcd6634b7e18bcb7e20e55c7b318e654b1a37b456e7bdd28279799086b464cfef9123484887597d29f1b8d5c9a351e8b54eee3428952324486ca6e04a7735b2ba66501edcb5abdaaa3b5c4da83d726585601bfc9fe01760dc1aef02e008feb225311226be1441985c793f0694fd6ae96009184bc16ecc9d4f5b4f2fa0cd42bd18dbad57f61aefb567bf5985c627125c65140cbb39e169d54cae66084d938a2575a0308b1d9ad07e0d1c9fb6151c7725ad6b272d4f46594aea3c92b383c1b55f9606300e37866cdeb34313133ab7d79f3871332bf2212ae76c99c53620d94c6269da08b75ad2a7d1493656c0034ab860181f466bdaf5de1b48bbf1d1092a1644272e3e089a64a2747f64b0522fbd0d8271007f78198b2440f6f6259cdddb533558e8956567dc69f428767bfc1c805d673dc21c0d6907224c10d02c1ff950d329bb468cbf78dbf1faebc2c6c9e4f6a3e0fdd3499dc406be702d8a96cdf0ebc1f34ff934d476c740d5e1c85bff8076955befe9f17e1bff033af8760e8eee78c5c1ce4158ffe82e148744e60302d507543f6b635bb849b325f8893a5d0b2c8a1a820e87eba677bbddc55ca8fc286f8f1ce5a3ed17fba54ed652ac656442a6988f318c22f978e39b4f18dccc451bd93f4ae85fb177e3b472a7ea576f7a614c5b2b74ca19a1ec47a846bce1313d65b5e229233c567b8fd2e7ec23c3ffba1d958e1d63b0eb057002d91300bc02c4a584ef4d1351268272ff3a5585a69305584c1ce5b7e4d013bbdaf13bf27baafd30fd036188b2ec1ccf3c419d126c7784e3624b334d003ff3a58678a1e22c67b8523b2a1b2b1fdb0c14c55aff6c5fbfbdaaa2a38f33ad6307017f4fd23c9012e612fe7f510d0d87ae8bbb349ac24e5b58e2b4e44685ec13323905757d2d2cb04bd8323f617b10bc7680950b535cf4eac74e7a0bba0fa5bc81376df48ecf34e68706499fef9fe329848a878e1cbae04cabdd316d424117b514d60fe6e632cbec6cf9401082f03aa46dbbe7b0399e742cfbe5e91cfc62c30d086efda4280eaab0f541885eb89189d6d5dacdb07d936b483a8af83f089ec36ce19929a266fa4062b6cf3a0db3cbcfd71955b75c23fe3c4eb547663a4fe4198134baf96c1909c9baa7401024bb1e2818fb06dc04d9a78c40e11e0a4966ca63baa476a2e313e748c238882e1bab4b6d46abcd9a6494e99d1e38c17c526f435a5ee3a77867ce7fd11011ec68b02601332cdb208ca38fc932", &(0x7f00000011c0)="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"}, 0x20) 00:27:17 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls']) [ 596.840048][T16234] Unknown ioctl -2147199944 [ 596.966635][T16259] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:17 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e"], 0x1) 00:27:17 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80001, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x192b, 0x335007cf223f48c5) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0xe7, 0x100, 0x20, 0x4, 0x19, 0xffff, 0x8001, 0x454, 0x8, 0x1, 0x10001, 0x20}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) 00:27:17 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40000, 0x0) read$char_usb(r3, &(0x7f00000000c0)=""/168, 0xa8) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000000)={0x1}) r4 = gettid() tkill(r4, 0x1000000000016) r5 = getpgrp(r4) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x5, 0x60e, 0x1, 0x6, 0x0, 0x6, 0x8, 0x2, 0x63, 0x6, 0x1, 0x5, 0x5, 0x1, 0x8000000000000, 0xffff, 0x26, 0x6, 0x9ef, 0x11, 0x101, 0x9, 0x100000001, 0xfffffffffffffffa, 0x1f, 0x80, 0x1f53, 0x3, 0xf4, 0x0, 0xfffffffffffffff7, 0x0, 0x6, 0x7, 0x80000001, 0x1, 0x0, 0x7e3b052, 0x39faaf521e36834c, @perf_config_ext={0x0, 0x100}, 0x0, 0xfffffffffffffd69, 0x0, 0x2, 0x8, 0x81, 0x1}, r5, 0xd, 0xffffffffffffffff, 0x6c3af5f6cb5052a8) [ 597.056149][T16259] ntfs: (device loop0): parse_options(): The nls option requires an argument. 00:27:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e"], 0x1) [ 597.270329][T16357] Unknown ioctl -2147199944 00:27:18 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40a2c0, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:18 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e64"], 0x1) 00:27:18 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) [ 597.472776][T16464] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e64"], 0x1) [ 597.618602][T16464] ntfs: (device loop0): parse_options(): NLS character set i not found. Using previous one utf8. [ 597.651670][T16464] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 00:27:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000001f0000000100000000040000010000007c00117e64"], 0x1) 00:27:18 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) getpgrp(0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) uselib(&(0x7f0000000100)='./file0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:18 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:18 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=']) 00:27:18 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x24400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="690e06f01f04f7d30ce4b9cb4c95e608048ff263e28c16cfac9f9609f76cb276c4915f162af0bec830fb9a15412afccbbd0e85dc0d8bcbe2ca382dbddce49ee92f43b95b55b44e683d8f5d0af599cbff030000e747bbe84e817b5cce675f9308a8a801f8d8e6da175d7b5a7e6c8baf79395d1ec49d424e9472e3c9ad10efb1845654e27dbad4be4b4f76e47e43d98ed5ecba4259a17d6b53da66c4ec440500000012389d521f000000ad5cb969565a7aad53b5d2805b2ebe52c084411216ae4d3751f2753c988201d29a694050b0247308bc1fe958607a7e2cfcfa63159a111a7be26f98de79e79d7b08fe433600") syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x204500) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) [ 598.054711][T16590] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) timer_create(0xc, &(0x7f0000000000)={0x0, 0x28, 0x5}, &(0x7f0000000080)=0x0) timer_gettime(r2, &(0x7f00000000c0)) 00:27:20 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x460, 0x0, 0x0, 0x0, 0x378, 0x378, 0x378, 0x4, &(0x7f0000000000), {[{{@arp={@remote, @remote, 0xff000000, 0xff, @empty, {[0xff, 0xff, 0x101, 0x0, 0x7f]}, @empty, {}, 0x6, 0x71, 0xfffffffffffffc01, 0x0, 0x1, 0x3, 'bcsh0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x4}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1000, 0x81, 0x0, 0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, 0x0, 0xffffff00, @empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xc9289dce229b02d9]}, @mac, {[0xff, 0xff, 0x1fe, 0x181, 0x0, 0xff]}, 0x7, 0x1, 0x2, 0x6, 0x1f3, 0xff, 'veth0_to_team\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x80}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @rand_addr, @remote, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4b0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:21 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=']) 00:27:21 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x24400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="690e06f01f04f7d30ce4b9cb4c95e608048ff263e28c16cfac9f9609f76cb276c4915f162af0bec830fb9a15412afccbbd0e85dc0d8bcbe2ca382dbddce49ee92f43b95b55b44e683d8f5d0af599cbff030000e747bbe84e817b5cce675f9308a8a801f8d8e6da175d7b5a7e6c8baf79395d1ec49d424e9472e3c9ad10efb1845654e27dbad4be4b4f76e47e43d98ed5ecba4259a17d6b53da66c4ec440500000012389d521f000000ad5cb969565a7aad53b5d2805b2ebe52c084411216ae4d3751f2753c988201d29a694050b0247308bc1fe958607a7e2cfcfa63159a111a7be26f98de79e79d7b08fe433600") syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x204500) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:21 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x40100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x1}) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:21 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:27:21 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) 00:27:21 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=']) 00:27:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57a, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x6}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x20500, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) listen(r1, 0xef) prctl$PR_SET_UNALIGN(0x6, 0x3) dup2(r0, r1) 00:27:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000080)={0x8, 0x0, [{0xfffffffffffffffb, 0x4, 0x0, 0x0, @adapter={0x7, 0x7, 0x1, 0x10000, 0x4}}, {0x2, 0x4, 0x0, 0x0, @irqchip={0x0, 0xffffffff00000001}}, {0x8, 0x5, 0x0, 0x0, @adapter={0x8001, 0x6, 0xff37, 0x2, 0x86d0}}, {0xffff, 0x5, 0x0, 0x0, @sint={0x9, 0x7fff}}, {0x10001, 0x3, 0x0, 0x0, @irqchip={0x3, 0x2}}, {0x401, 0x4, 0x0, 0x0, @msi={0x800, 0x100, 0x401}}, {0x1ff, 0x0, 0x0, 0x0, @adapter={0xdec, 0x0, 0x8d0, 0x5, 0x7}}, {0x1ff, 0x3, 0x0, 0x0, @msi={0x0, 0x3a9, 0x1bf8}}]}) dup2(r0, r1) 00:27:21 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x9) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40080, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000200)=0x7fffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0xa0, "177faf2cd06548cf3fa85445dd1ccd026af2596eb0a0d33b24499aafe2ef97d2ea3bde5a7170f84f2c2d05f18e183a6212d74e0d526c624d9005f8a6ed5938d90461de26572a9e96c96caa4177220933be334dd58fafdb5f8a14dfa6d914f5bd31499460b7d9f3918191fbe8c019fdba701b11001ba6adcae8a6e74a4a313a45cb7c7bde13a354f07a778d2b69a0a978718da2b4bab35b3289ca6fa1c71b765b"}, &(0x7f0000000000)=0xc4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r4) 00:27:21 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:27:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0xa0, "177faf2cd06548cf3fa85445dd1ccd026af2596eb0a0d33b24499aafe2ef97d2ea3bde5a7170f84f2c2d05f18e183a6212d74e0d526c624d9005f8a6ed5938d90461de26572a9e96c96caa4177220933be334dd58fafdb5f8a14dfa6d914f5bd31499460b7d9f3918191fbe8c019fdba701b11001ba6adcae8a6e74a4a313a45cb7c7bde13a354f07a778d2b69a0a978718da2b4bab35b3289ca6fa1c71b765b"}, &(0x7f0000000000)=0xc4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r4) 00:27:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0xa0, "177faf2cd06548cf3fa85445dd1ccd026af2596eb0a0d33b24499aafe2ef97d2ea3bde5a7170f84f2c2d05f18e183a6212d74e0d526c624d9005f8a6ed5938d90461de26572a9e96c96caa4177220933be334dd58fafdb5f8a14dfa6d914f5bd31499460b7d9f3918191fbe8c019fdba701b11001ba6adcae8a6e74a4a313a45cb7c7bde13a354f07a778d2b69a0a978718da2b4bab35b3289ca6fa1c71b765b"}, &(0x7f0000000000)=0xc4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r4) 00:27:21 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) 00:27:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000080)={0x8, 0x0, [{0xfffffffffffffffb, 0x4, 0x0, 0x0, @adapter={0x7, 0x7, 0x1, 0x10000, 0x4}}, {0x2, 0x4, 0x0, 0x0, @irqchip={0x0, 0xffffffff00000001}}, {0x8, 0x5, 0x0, 0x0, @adapter={0x8001, 0x6, 0xff37, 0x2, 0x86d0}}, {0xffff, 0x5, 0x0, 0x0, @sint={0x9, 0x7fff}}, {0x10001, 0x3, 0x0, 0x0, @irqchip={0x3, 0x2}}, {0x401, 0x4, 0x0, 0x0, @msi={0x800, 0x100, 0x401}}, {0x1ff, 0x0, 0x0, 0x0, @adapter={0xdec, 0x0, 0x8d0, 0x5, 0x7}}, {0x1ff, 0x3, 0x0, 0x0, @msi={0x0, 0x3a9, 0x1bf8}}]}) dup2(r0, r1) 00:27:22 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) 00:27:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:22 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x11) 00:27:22 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x88) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r1, 0xa, 0x40000000002001a) fcntl$setlease(r1, 0x400, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0xa0, "177faf2cd06548cf3fa85445dd1ccd026af2596eb0a0d33b24499aafe2ef97d2ea3bde5a7170f84f2c2d05f18e183a6212d74e0d526c624d9005f8a6ed5938d90461de26572a9e96c96caa4177220933be334dd58fafdb5f8a14dfa6d914f5bd31499460b7d9f3918191fbe8c019fdba701b11001ba6adcae8a6e74a4a313a45cb7c7bde13a354f07a778d2b69a0a978718da2b4bab35b3289ca6fa1c71b765b"}, &(0x7f0000000000)=0xc4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r4) 00:27:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000080)={0x8, 0x0, [{0xfffffffffffffffb, 0x4, 0x0, 0x0, @adapter={0x7, 0x7, 0x1, 0x10000, 0x4}}, {0x2, 0x4, 0x0, 0x0, @irqchip={0x0, 0xffffffff00000001}}, {0x8, 0x5, 0x0, 0x0, @adapter={0x8001, 0x6, 0xff37, 0x2, 0x86d0}}, {0xffff, 0x5, 0x0, 0x0, @sint={0x9, 0x7fff}}, {0x10001, 0x3, 0x0, 0x0, @irqchip={0x3, 0x2}}, {0x401, 0x4, 0x0, 0x0, @msi={0x800, 0x100, 0x401}}, {0x1ff, 0x0, 0x0, 0x0, @adapter={0xdec, 0x0, 0x8d0, 0x5, 0x7}}, {0x1ff, 0x3, 0x0, 0x0, @msi={0x0, 0x3a9, 0x1bf8}}]}) dup2(r0, r1) 00:27:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/232) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r2) 00:27:22 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) 00:27:22 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000600)='/dev/radio#\x00', 0x1, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r5, 0xdff}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={r5, 0x6}, 0x8) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x1, 0x9, 0x5, 0x7fff, 'syz0\x00', 0x9}, 0x1, [0x3ce7e48a, 0x1ff, 0x0, 0x400, 0xb8, 0x9, 0x2, 0x13f, 0x7, 0x8, 0xffffffffffffff01, 0x7ff, 0x0, 0x1, 0x8000, 0x80, 0x8, 0x3ff, 0xfff, 0x1ff, 0x5, 0x8, 0x340, 0x1a7f, 0x1, 0xfffffffffffffff8, 0x8, 0x9, 0x3, 0xffff, 0x3, 0x8, 0x1, 0x101, 0xb8, 0xd8, 0x0, 0x7fffffff, 0xfff, 0x48f6, 0x2, 0x517, 0xfffffffffffff800, 0x5, 0x5, 0x7, 0x202, 0xc858, 0x7, 0xffffffffffffff0f, 0x9, 0x1, 0x8, 0x4, 0xea9, 0xe9f, 0x3, 0x800, 0x8, 0xffffffffffffff00, 0x7a82, 0x4, 0x4, 0xffffffff, 0x8000000000000, 0x10001, 0x0, 0x0, 0x2, 0x8, 0x3, 0x70a, 0xfff, 0x3, 0x6, 0xa1fb, 0x7fffffff, 0x5, 0x1, 0x3, 0x3ff, 0x2, 0x80000001, 0x6, 0x7, 0xff, 0x7fffffff, 0xfffffffffffffff8, 0x6, 0x3, 0x5, 0x6, 0x38, 0x8, 0x9, 0x5, 0x1, 0x200, 0xfffffffffffffffd, 0xa5, 0x6, 0x7, 0x40000000, 0xe4, 0x4ea, 0xa45f, 0x8000, 0x80000001, 0x401, 0x9, 0x1000, 0x1, 0xfb48, 0x10000, 0x7, 0xca, 0x5, 0xfff, 0x6, 0x2, 0x6, 0x3f, 0xffffffffffffffff, 0x8000, 0x7b, 0x81, 0x100000000, 0x1ff], {r6, r7+10000000}}) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5b50, 0xf930}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$dupfd(r1, 0x54d7713699dbc061, r2) dup2(r0, r0) 00:27:23 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x1a, 0x2, 0x6, "b1143a82eb780ff6b4a24e29cf07104b", "905b3bda96"}, 0x1a, 0x5) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:23 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) 00:27:23 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x1a, 0x2, 0x6, "b1143a82eb780ff6b4a24e29cf07104b", "905b3bda96"}, 0x1a, 0x5) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$dupfd(r1, 0x54d7713699dbc061, r2) dup2(r0, r0) 00:27:23 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) 00:27:23 executing program 2: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc00) accept4(r0, 0x0, &(0x7f0000000000), 0x1400) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0xa0, "177faf2cd06548cf3fa85445dd1ccd026af2596eb0a0d33b24499aafe2ef97d2ea3bde5a7170f84f2c2d05f18e183a6212d74e0d526c624d9005f8a6ed5938d90461de26572a9e96c96caa4177220933be334dd58fafdb5f8a14dfa6d914f5bd31499460b7d9f3918191fbe8c019fdba701b11001ba6adcae8a6e74a4a313a45cb7c7bde13a354f07a778d2b69a0a978718da2b4bab35b3289ca6fa1c71b765b"}, &(0x7f0000000000)=0xc4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r4) 00:27:23 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:23 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x1a, 0x2, 0x6, "b1143a82eb780ff6b4a24e29cf07104b", "905b3bda96"}, 0x1a, 0x5) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:23 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dbc233cc14d3504, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000100)={0x8, 0x800, 0xfffffffffffffffc}) 00:27:23 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, [0x3, 0x101, 0xdf45, 0x24]}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r3, r4) 00:27:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$dupfd(r1, 0x54d7713699dbc061, r2) dup2(r0, r0) 00:27:24 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:24 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0xd003) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48cae4ba, 0x800000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:24 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x1a, 0x2, 0x6, "b1143a82eb780ff6b4a24e29cf07104b", "905b3bda96"}, 0x1a, 0x5) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:24 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:24 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfff, 0x2) ioctl$KVM_NMI(r0, 0xae9a) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x0, 0x1, 0x0, "3d2efd239ec8947c5982c6da935b227bb0461fed2c0ebcf4c969ca1aa69582e120fb612a99ed6d3fa5f93c5e62f4a5b8508bdf4ea078e39caf72dbedf2a0a6ce143a0069cd2484ee98cea43b40cec420"}, 0xd8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x11, 0x2, 0x4) dup2(r0, r2) 00:27:24 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000002) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) 00:27:24 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {0xffffffffffffffff, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x2d1900) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:24 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfff, 0x2) ioctl$KVM_NMI(r0, 0xae9a) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:24 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {0xffffffffffffffff, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xfffffffffffffffa, 0x8, '9P2000.u'}, 0x15) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:25 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfff, 0x2) ioctl$KVM_NMI(r0, 0xae9a) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:25 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) close(r0) fgetxattr(r0, &(0x7f0000000140)=@random={'btrfs.', '@proc\x00'}, &(0x7f0000000180)=""/128, 0x80) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x8, 0x0, 0x1, r0}) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x1f) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0xdb7) 00:27:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x0, 0x1, 0x0, "3d2efd239ec8947c5982c6da935b227bb0461fed2c0ebcf4c969ca1aa69582e120fb612a99ed6d3fa5f93c5e62f4a5b8508bdf4ea078e39caf72dbedf2a0a6ce143a0069cd2484ee98cea43b40cec420"}, 0xd8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x11, 0x2, 0x4) dup2(r0, r2) 00:27:25 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {0xffffffffffffffff, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x2d1900) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:25 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000), 0x2) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r6}}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r9, 0x0) setresuid(r8, r9, r7) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@remote, 0x4e24, 0x0, 0x4e22, 0xffffffff, 0xa, 0x0, 0x80, 0x3c, r6, r7}, {0x3, 0x9, 0x8, 0xf4fd, 0x4, 0x1, 0x1, 0x4}, {0x8000, 0x0, 0xffffffff, 0x7}, 0x4, 0x6e6bc0, 0x0, 0x1, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d2, 0x2b}, 0x8, @in6=@remote, 0x3500, 0x829c8c444b58eddd, 0x3, 0xf9a00000, 0x6, 0x3, 0x4}}, 0xe8) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r10) 00:27:25 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000), 0x2) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:25 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000000)={0x5a}, 0x8, 0x0) dup2(r1, r2) 00:27:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000000)={0x5a}, 0x8, 0x0) dup2(r1, r2) 00:27:25 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, &(0x7f0000000100)=0xfffffe15) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r5, 0xdff}, &(0x7f0000000500)=0x8) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000002c0)=""/50) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r5, 0x8}, 0x8) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@random={'os2.', '/dev/null\x00'}, &(0x7f0000000280)=""/18, 0x12) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:25 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000), 0x2) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:25 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) listen(r1, 0xff2c) r2 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 00:27:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) getcwd(&(0x7f0000000080)=""/116, 0x74) dup2(r0, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0xdd9, 'syz0\x00', @bcast, 0x2, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 00:27:25 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000340)=@bcast) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x12}, 0xe121b2bd9f2ec839, 0x0, 0x4, 0x0, 0x8, 0xfffffffffffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x40000, 0x0) mq_getsetattr(r1, &(0x7f0000000280)={0xfffffffeffffffff, 0x6, 0x3, 0x0, 0x3, 0x5735, 0x8001, 0x8ef5}, &(0x7f00000002c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) listen(r2, 0xff2c) r3 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 00:27:26 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {r3, 0xa0}, {r4, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:26 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(0x0, 0x0, &(0x7f00000000c0)='^\x00', r1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00', r4}) add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, r2) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="b477fec6c0d0152c28df77afaf78b2409aaa9a674173599ab5532efe6a87990f2d14d2c9992e49a451f90baba26ab07a4e8650e55372a22ba82fb11ea5fe3e9add48b015e6a9c7eaa1978b2bb931263658d421fc07101f21b2ea0a77f0420d46e49f76ea3d4a67fae92872f1bffa414c789e539e910c613de958888ca3d089f6d476116780089ae440d7e09383fad471687a07ad551169f0d3c7677e90333f92cafbda4f4f5c14afe2308789d846d09ed63cb9ae2aa84023fd0c77c35695c514116f4e69d1d3186471f5a7e51ba85e6daa7500fcd5d06f8b242ce6b616b8c9ac73", 0xe1, r2) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r5, &(0x7f00000000c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', '-$@proc:]-', 0x20, 0x401}, 0x31, r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r7) 00:27:26 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(0x0, 0x0, &(0x7f00000000c0)='^\x00', r1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00', r4}) add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, r2) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="b477fec6c0d0152c28df77afaf78b2409aaa9a674173599ab5532efe6a87990f2d14d2c9992e49a451f90baba26ab07a4e8650e55372a22ba82fb11ea5fe3e9add48b015e6a9c7eaa1978b2bb931263658d421fc07101f21b2ea0a77f0420d46e49f76ea3d4a67fae92872f1bffa414c789e539e910c613de958888ca3d089f6d476116780089ae440d7e09383fad471687a07ad551169f0d3c7677e90333f92cafbda4f4f5c14afe2308789d846d09ed63cb9ae2aa84023fd0c77c35695c514116f4e69d1d3186471f5a7e51ba85e6daa7500fcd5d06f8b242ce6b616b8c9ac73", 0xe1, r2) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r5, &(0x7f00000000c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', '-$@proc:]-', 0x20, 0x401}, 0x31, r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r7) 00:27:26 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(0x0, 0x0, &(0x7f00000000c0)='^\x00', r1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00', r4}) add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, r2) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="b477fec6c0d0152c28df77afaf78b2409aaa9a674173599ab5532efe6a87990f2d14d2c9992e49a451f90baba26ab07a4e8650e55372a22ba82fb11ea5fe3e9add48b015e6a9c7eaa1978b2bb931263658d421fc07101f21b2ea0a77f0420d46e49f76ea3d4a67fae92872f1bffa414c789e539e910c613de958888ca3d089f6d476116780089ae440d7e09383fad471687a07ad551169f0d3c7677e90333f92cafbda4f4f5c14afe2308789d846d09ed63cb9ae2aa84023fd0c77c35695c514116f4e69d1d3186471f5a7e51ba85e6daa7500fcd5d06f8b242ce6b616b8c9ac73", 0xe1, r2) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r5, &(0x7f00000000c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', '-$@proc:]-', 0x20, 0x401}, 0x31, r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r7) 00:27:26 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000340)=@bcast) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x12}, 0xe121b2bd9f2ec839, 0x0, 0x4, 0x0, 0x8, 0xfffffffffffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x40000, 0x0) mq_getsetattr(r1, &(0x7f0000000280)={0xfffffffeffffffff, 0x6, 0x3, 0x0, 0x3, 0x5735, 0x8001, 0x8ef5}, &(0x7f00000002c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) listen(r2, 0xff2c) r3 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 00:27:26 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(0x0, 0x0, &(0x7f00000000c0)='^\x00', r1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00', r4}) add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, r2) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="b477fec6c0d0152c28df77afaf78b2409aaa9a674173599ab5532efe6a87990f2d14d2c9992e49a451f90baba26ab07a4e8650e55372a22ba82fb11ea5fe3e9add48b015e6a9c7eaa1978b2bb931263658d421fc07101f21b2ea0a77f0420d46e49f76ea3d4a67fae92872f1bffa414c789e539e910c613de958888ca3d089f6d476116780089ae440d7e09383fad471687a07ad551169f0d3c7677e90333f92cafbda4f4f5c14afe2308789d846d09ed63cb9ae2aa84023fd0c77c35695c514116f4e69d1d3186471f5a7e51ba85e6daa7500fcd5d06f8b242ce6b616b8c9ac73", 0xe1, r2) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r5, &(0x7f00000000c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', '-$@proc:]-', 0x20, 0x401}, 0x31, r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r7) 00:27:26 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x2808d0, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x785238bd14dc2f07}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@audit='audit'}, {@euid_eq={'euid', 0x3d, r4}}, {@dont_appraise='dont_appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x36, 0x34, 0x63, 0x63, 0x38, 0x37, 0x65], 0x2d, [0x32, 0x31, 0x66, 0xbbe2f7542b12caa2], 0x2d, [0x61, 0x33, 0x61, 0x61], 0x2d, [0x36, 0x35, 0x61, 0x39], 0x2d, [0x36, 0x62, 0x1b, 0x32, 0x35, 0x39, 0x35, 0x38]}}}, {@uid_lt={'uid<', r6}}]}}) 00:27:26 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {0xffffffffffffffff, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:26 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000340)=@bcast) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x12}, 0xe121b2bd9f2ec839, 0x0, 0x4, 0x0, 0x8, 0xfffffffffffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x40000, 0x0) mq_getsetattr(r1, &(0x7f0000000280)={0xfffffffeffffffff, 0x6, 0x3, 0x0, 0x3, 0x5735, 0x8001, 0x8ef5}, &(0x7f00000002c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) listen(r2, 0xff2c) r3 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 00:27:26 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000340)=@bcast) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x12}, 0xe121b2bd9f2ec839, 0x0, 0x4, 0x0, 0x8, 0xfffffffffffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x40000, 0x0) mq_getsetattr(r1, &(0x7f0000000280)={0xfffffffeffffffff, 0x6, 0x3, 0x0, 0x3, 0x5735, 0x8001, 0x8ef5}, &(0x7f00000002c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) listen(r2, 0xff2c) r3 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 00:27:26 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(0x0, 0x0, &(0x7f00000000c0)='^\x00', r1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00', r4}) add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, r2) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="b477fec6c0d0152c28df77afaf78b2409aaa9a674173599ab5532efe6a87990f2d14d2c9992e49a451f90baba26ab07a4e8650e55372a22ba82fb11ea5fe3e9add48b015e6a9c7eaa1978b2bb931263658d421fc07101f21b2ea0a77f0420d46e49f76ea3d4a67fae92872f1bffa414c789e539e910c613de958888ca3d089f6d476116780089ae440d7e09383fad471687a07ad551169f0d3c7677e90333f92cafbda4f4f5c14afe2308789d846d09ed63cb9ae2aa84023fd0c77c35695c514116f4e69d1d3186471f5a7e51ba85e6daa7500fcd5d06f8b242ce6b616b8c9ac73", 0xe1, r2) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r5, &(0x7f00000000c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', '-$@proc:]-', 0x20, 0x401}, 0x31, r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r7) 00:27:26 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x200000) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$cgroup_int(r0, &(0x7f00000000c0)=0x5, 0x12) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x6, 0xfffffffffffffff9, 0xa5, 'queue1\x00', 0x5}) dup2(r1, r2) 00:27:26 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000340)=@bcast) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x12}, 0xe121b2bd9f2ec839, 0x0, 0x4, 0x0, 0x8, 0xfffffffffffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x40000, 0x0) mq_getsetattr(r1, &(0x7f0000000280)={0xfffffffeffffffff, 0x6, 0x3, 0x0, 0x3, 0x5735, 0x8001, 0x8ef5}, &(0x7f00000002c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) r4 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 00:27:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000140)={0x1ff, 0x9}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0xd58f568eac347bb0) dup2(r2, r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001680)=ANY=[@ANYBLOB="9feb010018000000000000002ffffff317000000030000000a0000000000000b030000000f0000000000e20b05000000fcff00000000000901000000060000000000000700000000026100fbb594a904a36bbd8249f7f1b1de84c97c2e3484da2cb3a0d690f77e8d8886cc540a7de972a481def39dbb1399fc19b930b31d8df4e142375de22aaa3e5cc1daa48ee953e3f7c559f323e8"], &(0x7f0000000600)=""/181, 0x96, 0xb5, 0x1}, 0x20) r6 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x7, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f00000002c0)) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r5, 0xb, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r9}}, 0x13a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r9, 0x4) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000380)={0x1, 0xff}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_GET_PIT2(r10, 0x8070ae9f, &(0x7f0000000080)) 00:27:26 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {0xffffffffffffffff, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x1) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x8, &(0x7f0000000900)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@hash='hash'}, {@hash='hash'}, {@obj_role={'obj_role', 0x3d, '!\x00'}}, {@audit='audit'}, {@pcr={'pcr', 0x3d, 0x24}}, {@fsname={'fsname', 0x3d, ')eth0%em0vboxnet0)+@systemeth0'}}, {@obj_user={'obj_user', 0x3d, 'em1vboxnet1securitymd5sum'}}, {@appraise='appraise'}]}}) setgroups(0x2, &(0x7f00000000c0)=[r1, r2]) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x80, 0x0) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f00000001c0)=0x4, 0x4) 00:27:27 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb67, 0x3ff, 0x1, 0x8, 0xffffffffffffffc0, 0x3, 0x80, 0xfffffffffffffffb}, &(0x7f0000000080)={0x8, 0x7, 0x6, 0x278, 0x84, 0x0, 0x400, 0x7ff}, &(0x7f00000000c0)={0xc8, 0x0, 0x200, 0x6, 0x20, 0x4, 0x1ca, 0x7fffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140)={0x3}, 0x8}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:27 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb67, 0x3ff, 0x1, 0x8, 0xffffffffffffffc0, 0x3, 0x80, 0xfffffffffffffffb}, &(0x7f0000000080)={0x8, 0x7, 0x6, 0x278, 0x84, 0x0, 0x400, 0x7ff}, &(0x7f00000000c0)={0xc8, 0x0, 0x200, 0x6, 0x20, 0x4, 0x1ca, 0x7fffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140)={0x3}, 0x8}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:27 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00', 0x0, 0x18}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {r2, 0x10}, {0xffffffffffffffff, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:27 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0xc8dd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) fcntl$setown(r1, 0x8, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x200001, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4}, {r4}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, r6, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, '\nip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x130, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xa0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="21927e6f9fa5c03ed71eaadfbb6d5437"}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x291}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a1}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffff499}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x574fe403fb3da383}, 0x4000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000340)={0x0, 0x0, 0x2, 0xaa507fe07224792, {0x5, 0x3, 0x8, 0x7fff}}) truncate(&(0x7f0000000080)='./file0\x00', 0x0) mq_open(&(0x7f0000000040)='eth1*,eth1#selinuxmime_typevmnet1#\x00', 0x40, 0x0, &(0x7f0000000100)={0x4, 0x10003, 0x9, 0x9, 0x7, 0x3, 0x8, 0x8000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r8, 0x103, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x908}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x82c1944}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="e40100db53172a5aef1fc104007d68796a6d1ef67adb60fc66929a8dacb33f21d64b526d33f216b14000000000000000efcaa166eb3218e7385f5cc045ef34e97733aa1cf2fa6e7a2db77b1bcb72454c3be098a53305478806aa554993963bc86aefa1ac31b12abbc70669959155db5047a9cdb1ed25acc2295480f43cfe988afbe1799249a8a9a3396d37170b4e5120da916363c36e0603d32622ce51a3f1e2c7f848227e9b9761b5736a7b9c849e97018504102921f145ffbb6726c06b9af13340dd8d57b65e6b8f62d92988035851bb8bff7c2943616d00"/240, @ANYRES16=r8, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x2000}, 0x20002050) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}]}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)=0x1, 0x4) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x200, 0x0) ioctl$VIDIOC_S_OUTPUT(r9, 0xc004562f, &(0x7f0000000240)=0x4) 00:27:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000007000000250000000000950ab2fd58000095000000000000005b8be09ddba3a20a1a422392a9b6b50c99a4aea8a1b10c71b6cacada8bdd5d9a962f784fa1d027bba2f00da015bbc89688c2"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x4, 0x36ab, 0x5, 0x10001, 0x0, 0x4, 0xcc681, 0x6, 0x4, 0xffffffffffffffff, 0xffffffff, 0xe52f, 0x2, 0xcfb, 0x4, 0x7fffffff, 0xd7, 0x3, 0xff, 0x7ff, 0xffffffff7fffffff, 0x29a32b76, 0x3ead, 0xfff, 0x0, 0xffffffff80000000, 0x7f, 0x80000001, 0x64a3, 0x3, 0xcd9, 0xfffffffffffffffd, 0x7, 0x0, 0xfffffffffffffffc, 0x82d, 0x0, 0xfff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x7ff}, 0xe, 0x7fff, 0x8, 0x4, 0x2, 0x4, 0x1}, r2, 0x3, r3, 0x4) 00:27:27 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x9) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:27 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:27 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/104) dup2(r0, r1) 00:27:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) connect$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) 00:27:27 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:27 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:27 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) r2 = getpgrp(r1) ptrace$getenv(0x4201, r2, 0x8, &(0x7f0000000040)) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000340)=0xfffffffffffff65b) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, 0x0, &(0x7f00000000c0)='procproc\x00', r2) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, 0x0, &(0x7f00000000c0)='procproc\x00', r4) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x3) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r6 = dup2(r0, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fsetxattr$security_evm(r7, &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=@v1={0x2, "cf9bbf4c"}, 0x5, 0x1) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{r0}, {r8}, {r8}], 0x3, &(0x7f0000000400)={r9, r10+10000000}, 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r8, 0x80044325, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000080)={{0x2, 0x3}, 'port1\x00', 0x10, 0x1000, 0x6, 0x7, 0x4, 0x3f8e, 0xffff, 0x0, 0x5, 0x3}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0) r11 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r11}, {r11}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r11, 0x80044325, &(0x7f0000000280)) fallocate(0xffffffffffffffff, 0x0, 0x6, 0xd650) 00:27:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) connect$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) 00:27:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000007000000250000000000950ab2fd58000095000000000000005b8be09ddba3a20a1a422392a9b6b50c99a4aea8a1b10c71b6cacada8bdd5d9a962f784fa1d027bba2f00da015bbc89688c2"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x4, 0x36ab, 0x5, 0x10001, 0x0, 0x4, 0xcc681, 0x6, 0x4, 0xffffffffffffffff, 0xffffffff, 0xe52f, 0x2, 0xcfb, 0x4, 0x7fffffff, 0xd7, 0x3, 0xff, 0x7ff, 0xffffffff7fffffff, 0x29a32b76, 0x3ead, 0xfff, 0x0, 0xffffffff80000000, 0x7f, 0x80000001, 0x64a3, 0x3, 0xcd9, 0xfffffffffffffffd, 0x7, 0x0, 0xfffffffffffffffc, 0x82d, 0x0, 0xfff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x7ff}, 0xe, 0x7fff, 0x8, 0x4, 0x2, 0x4, 0x1}, r2, 0x3, r3, 0x4) 00:27:28 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:28 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 607.279846][T19989] QAT: Invalid ioctl 00:27:28 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) connect$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) 00:27:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000007000000250000000000950ab2fd58000095000000000000005b8be09ddba3a20a1a422392a9b6b50c99a4aea8a1b10c71b6cacada8bdd5d9a962f784fa1d027bba2f00da015bbc89688c2"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x4, 0x36ab, 0x5, 0x10001, 0x0, 0x4, 0xcc681, 0x6, 0x4, 0xffffffffffffffff, 0xffffffff, 0xe52f, 0x2, 0xcfb, 0x4, 0x7fffffff, 0xd7, 0x3, 0xff, 0x7ff, 0xffffffff7fffffff, 0x29a32b76, 0x3ead, 0xfff, 0x0, 0xffffffff80000000, 0x7f, 0x80000001, 0x64a3, 0x3, 0xcd9, 0xfffffffffffffffd, 0x7, 0x0, 0xfffffffffffffffc, 0x82d, 0x0, 0xfff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x7ff}, 0xe, 0x7fff, 0x8, 0x4, 0x2, 0x4, 0x1}, r2, 0x3, r3, 0x4) 00:27:28 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}, {0xffffffffffffffff, 0x10}, {r0, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}, {0xffffffffffffffff, 0x10}, {r0, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:30 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x2, 0x40000) 00:27:30 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) 00:27:30 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}, {0xffffffffffffffff, 0x10}, {r0, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r2 = accept4$rose(r1, &(0x7f0000000000)=@short={0xb, @remote, @bcast, 0x1, @netrom}, &(0x7f0000000080)=0x1c, 0x800) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000002) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) sendmmsg$inet(r2, &(0x7f0000000480)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="b03f310c7717d79569c7c166634a6c76f0bbe6a494f6c00d73a8cd514a0e461c785b4f3c425ef889f17fc450ee0600466bc634b419b1b9caf6e4ff7c87d62b3a98eb20fcb7bb0ea42a0f02e0fbc2fb400b2e5a463833a103a9d4964cffbf8137812c8c77bca7f0cf0c058be52cf2b4c1d7287ea70a5ee51967054fe5cb1990b128224684f9fa009b386e35de04974ea94e5f18726cd04959ec3efe3441660410cc10bafbfde6fbc7d14f26d4495a3f8566330be07d001f68f9b34ff38ce6ecbf52b0aafedb88c967dd047b53ad85caa9a0b265206eb7e9d0cb34397ece7116905250f1e0", 0xe4}, {&(0x7f0000000200)="6c5bb4e7565bbbb4", 0x8}, {&(0x7f0000000240)="00363a4689ecd97d64aaed256ea19086b8797a401433b8b78100ac392d5316932a83ca1c3d620952", 0x28}], 0x3, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd928}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x50}}], 0x1, 0x10801) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r7) 00:27:31 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:31 executing program 1: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:31 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:31 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3040e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000340)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r3) acct(&(0x7f0000000080)='./file0\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14, 0xcbc6bfad602222ec) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@empty, 0x10, r5}) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6}, {r6}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=""/178, 0xb2}}, 0x10) 00:27:31 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)={0x5, 0x6, 0x5}) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x30, 0x650c0d30d72951a0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:31 executing program 1: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:31 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x5be, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000003c0)={r1, r6, 0x7, 0xf, &(0x7f0000000380)="868e549c660a96c07a9531e6073b39", 0x0, 0xdd, 0xea, 0x0, 0x73aa, 0x5, 0x9, 'syz1\x00'}) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000240)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) epoll_create1(0x80000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) dup2(r0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r8}, {r8}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) gettid() socket$inet(0x10, 0x2, 0xc) 00:27:31 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {0xffffffffffffffff, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:31 executing program 1: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:31 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3040e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000340)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r3) acct(&(0x7f0000000080)='./file0\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14, 0xcbc6bfad602222ec) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@empty, 0x10, r5}) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6}, {r6}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=""/178, 0xb2}}, 0x10) 00:27:31 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) 00:27:31 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {0xffffffffffffffff, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:31 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:32 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {0xffffffffffffffff, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0xd970eb6c28125bd1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000000)={0x2, 0x3ff}, 0x2) 00:27:32 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) clock_getres(0x4, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 00:27:32 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:32 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:32 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) 00:27:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:32 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:32 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0xd970eb6c28125bd1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000000)={0x2, 0x3ff}, 0x2) 00:27:32 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:33 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffffffffffffffe1, 0x313880) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x3, 0x6803, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000200)={0xfffffffffffffff8, 0x9, 0x2, 0x3}) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5}, {r5}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000140)=0xffffffffffffffff) ppoll(&(0x7f0000000180)=[{r4}, {r4}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) write$P9_RWALK(r4, &(0x7f0000000100)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x4, 0x8}]}}, 0x16) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x41e941617429b3c, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:33 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r2, 0xa0}, {r3, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:33 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:33 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:33 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:33 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) 00:27:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0xd970eb6c28125bd1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000000)={0x2, 0x3ff}, 0x2) 00:27:33 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) 00:27:33 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:33 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r1, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:33 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:34 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000100)={0x2, 0x2000}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fadvise64(r4, 0x0, 0x0, 0x5) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:34 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) 00:27:34 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:34 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:34 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) dup2(r0, r1) 00:27:34 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) 00:27:34 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:34 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) [ 613.510547][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 613.510563][ T26] audit: type=1804 audit(1568420854.395:122): pid=22372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir989294439/syzkaller.kDoUPI/552/file0" dev="sda1" ino=16911 res=1 00:27:34 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:34 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) 00:27:34 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:34 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffffffffffff8000) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0xff], 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f0000000100)={"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"}) 00:27:34 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}, {0xffffffffffffffff, 0x10}, {r0, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:35 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) dup2(r0, r1) 00:27:35 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}, {0xffffffffffffffff, 0x10}, {r0, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0xd970eb6c28125bd1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000000)={0x2, 0x3ff}, 0x2) 00:27:35 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:35 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) 00:27:35 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r6}}, 0x24}}, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, r6, 0x3}, 0xc) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}, {0xffffffffffffffff, 0x10}, {r0, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:35 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {0xffffffffffffffff, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:35 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r1 = socket(0x10, 0x80002, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r3}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r3, 0xdff}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x9, @mcast2, 0x96d}}, 0x10000, 0x9}, 0x90) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r4 = socket$kcm(0x29, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000100)={0x3f, 0x1000}) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="8500100007a80000250000e56c00000000009500000000007ea53036ac48f4b8dae0a087a317382cebd156dcf046ce797fff97005a847053217fabc4492305553391b1"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r5, r7}) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r8, r9) 00:27:35 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz0\x00', {0xffffffffffffffc1, 0x0, 0x5, 0xffffffffffffffff}, 0xc, [0x80000000, 0xff, 0x5, 0x7fff, 0x1, 0x7, 0x0, 0x2, 0x9, 0x6, 0x1, 0x200000000000000, 0x9dd1, 0x80, 0x3, 0x34c, 0x400, 0x5, 0x5, 0xa7b8, 0x823, 0x1, 0x2, 0x1, 0x5, 0xcfc8, 0x9, 0x65cf82aa, 0x10000, 0x7ff, 0x1f, 0x10001, 0xe5, 0x8, 0x2, 0x80, 0x80000001, 0x100, 0x7cf, 0x7fffffff, 0x8001, 0x3, 0x37d4800, 0x7, 0x80, 0x8, 0x2000000, 0x800, 0x1, 0x1000, 0x3, 0x0, 0x1095, 0x100000000, 0x5, 0x7f, 0xe92, 0x9e1b, 0x200, 0x7, 0x100000000, 0x800, 0x5d0d, 0x9], [0x7f, 0x0, 0x4000000080, 0xffffffff, 0x80000000, 0x3e5, 0xffffffff, 0x9, 0x1, 0x1f02, 0x80, 0xffff, 0xffffffffffffffff, 0x1, 0x3ff, 0x100000001, 0x1, 0xffffffff, 0xe00, 0x3, 0x705b, 0x1f, 0x0, 0x100000000, 0x8, 0x0, 0x0, 0x7, 0x56, 0x2, 0x10001, 0x7f, 0x0, 0x0, 0x2, 0x1, 0x800, 0x80, 0xfff, 0x80, 0x81, 0x8000, 0x0, 0x401, 0x81, 0x1, 0x8, 0x2, 0x1, 0x7, 0x883d, 0x23ab, 0x4, 0x8, 0xfffffffffffffff7, 0x101, 0x0, 0x4e6a, 0x598c151c, 0xfffffffffffffff9, 0x7, 0x8000, 0xefe, 0xfff], [0x101, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x9, 0xf0, 0x8, 0x6, 0x4, 0x2, 0x127, 0x5, 0x2, 0xffffffffffff7fff, 0xab, 0xe66, 0x18, 0x5, 0x3, 0x2, 0x0, 0x3, 0x9, 0x8, 0x6, 0x0, 0x3, 0x3, 0x3, 0x7fff, 0x9, 0x3e, 0xf9, 0x100000000, 0x8000, 0x8, 0x80800, 0x0, 0x516, 0xe55, 0x2, 0x4, 0x9, 0xff, 0x2, 0x72, 0x0, 0x100000001, 0x5, 0x7, 0xffffffffffff023a, 0x460, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x2710, 0x90c, 0x1, 0x7, 0x200, 0x2, 0x7, 0x4, 0xfffffffffffffff8], [0x1, 0x7, 0x3ff, 0x401, 0x5, 0x8, 0x4, 0x9, 0x68, 0x1000, 0x2, 0xae44, 0xd2c2, 0x7fff, 0x6, 0x7b, 0x100000000, 0x1, 0x0, 0x74, 0x100000000, 0x7fffffff, 0xfffffffffffffffd, 0x2, 0x9, 0x86, 0x10001, 0x7, 0xffffffffffffffff, 0x200, 0x9, 0x4, 0x7, 0x9, 0x0, 0xfca2, 0x560a, 0x2, 0x8, 0x0, 0x5, 0x8, 0x11, 0xfffffffffffffffb, 0x1f, 0x9, 0x10001, 0x9, 0x200, 0xffff, 0x9, 0xfff, 0x5, 0x3, 0x9, 0x6, 0x0, 0x5, 0xc26, 0x5, 0x3, 0x0, 0x4, 0x1]}, 0x45c) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 00:27:35 executing program 2: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:35 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) dup2(r0, r1) 00:27:35 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4722, 0x480) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000100)={0x29}) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xebdc68f4c6f68a9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:35 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:36 executing program 2: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:36 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x4, 0x4) dup2(r0, r1) 00:27:36 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:36 executing program 2: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:36 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:36 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r5, 0xdff}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r5, 0x100000001, 0x20, 0x8, 0xfff}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r6, 0x9, 0xf4, 0xffffffffb90b2735}, &(0x7f0000000240)=0x10) dup2(r0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 00:27:36 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:36 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}], 0x4, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:36 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:36 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}], 0x3, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:37 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "8acef8c6fe6f7970eda86d408ee0b6fb"}, 0x11, 0x0) 00:27:37 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r5, 0xdff}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r5, 0x100000001, 0x20, 0x8, 0xfff}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r6, 0x9, 0xf4, 0xffffffffb90b2735}, &(0x7f0000000240)=0x10) dup2(r0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 00:27:37 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:37 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x4, 0x4) dup2(r0, r1) 00:27:37 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:37 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:37 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:37 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:37 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e67de201b11a8a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff80, 0x5, &(0x7f0000001380)=[{&(0x7f0000000140)="0b745d17fc8b23e9e69e3efdd82665512e37b841c87acc42a9c8e76cbc884fd74610032d4994d616ae7b45b5cd377323612d9b7241a0e3395dc852184b11cb4eebae7be5389a736ef17efabff8a73ef5ad9cc8f202c307d5985457", 0x5b, 0x9}, {&(0x7f00000001c0)="bd670d451b2bd59c8549c20a9ff4c4a3364a69d48c82d1e1e2b2aa7f5fe2dc0c15b915c2367daba3ee77c5002ef99bb3adcdcdb92ba989d901dce0db960cb0fe62843f58ac015d9753a04c69bb4067dbcd129192028b91b226603c7fdeb2510cb64eb0ce0e1641c2ad56632077de8a55f27f353bc6b90eeba3a3b406e050b14be0dadb9f6224747b6f1bbd9181830462f2655f8302ffdc4d2427063bef2c66d863a168f7ea5ac9580ec4d145ead10dc2be14616f52b1d4cacdeb791c92d6175ba397b63df338adfec499d599e2ea877ac0e7e47953349c893d4fa9bc48b2290f99b042dc281546bffd3932ffc091c5114dedccf2d73c8ebc55c4dfbfa54003f696774a653af84c0647c4e77ea57777d172f768a6d88aa9fd4df6d47d447232e2913bf814bb902e62ea6a2ca8d0c8c0a923b2da4dd0c279a23d2bcff64240bc385828548bd36671e206e214d35aa89e1121d543478562126925c7be4f24df888cabff61a29b08bdf99eb7f971728e46159e6389aadf4f5e2782550bc4884689f50cd72e893c251f4e74321af38acd29bdcf210432c9d146d60800f5e540d9131d44d057fc958671bcdc93edf7424c752b07eb1619abd6aa2070034fa03eb0d07c3c2f0209dc9240b580c944a9d1ffe507ef659d4b6c1f85a17d843d773c02afad11136eb73d214a60b41ccd9c5b1c1ad578f0b87c2fb5299f494b4c5b5acc0522294979f0dbbddbcdba2deb4411d478bc375ff217a7e4c03472044d3755eb877affbc8b3fbd8705efb21b2e47a0a5a0ce54d2dcdb4e1959817b367cf8f6bb763b8e5b4d4dbcc240736235d30eebefdd842b5aec5b606bbbc9caeece925a71cb5b782f1a5f735aff97b3e7d25d43e983bfd614d4ed246ce9a0ab493759544e9a5cceb425bf278af34c9f485539be23fa36c3da905932c6ff202b540db1ff3bcb8c420f79b13427699a775569b026a8b4e030d66359872738981d1813cbaa94582b7ab8ba252fed985777d424c67ec805c3fc716ac8c3eb7de35835cf24fa824bc6e1ca05006fe19bf4bc3b15bffb4165a113709771b61a6f6f87ba57bdc8c2f47d76e0e7a2d7f80e38641b91362d688ec4378ab9cba1b087a9b833497d1a29301c53ee9ce54f55e385ce479d2f22dc654862e335de735910423f5bd776facab4397e97ae05f194d857baad353c89bcccc4295b4d248a4a7e953741f5784fefe574fc76bf2754ad72038eb16c7309d1423d52e1d5f2e91d574c8e876516d076cb14fbce298f7d53cfd30ad8f1072114f8bd0ea801f581a02d30786e3f987a7a5c525f176564c0a4a805034027685a9d4ded618657fe1347918e6235a48d90ae345fdf9178fe614520d7501689855af1a9f68e036299748d151bac8298ad0d07be129a2afba6eee23af21573285af123401be7e6fdcfd1b6b7a4f4b22055980e5ea9726a6c2df728d74b0375b29a093deefc698dfa937881197e3cb3bbd0e7fde4cbf33994965ee2650872fcdd1b7c00302082f0390805d4f661090bbfda31d18a775cd19b7300beb9c45f0cf7339314a02c2a3614deba1a3421a206088f088fdef50da24b29e2651838c22286074dc7ab1dd3ee8d670b14e1e407dbe9c25e914c42f9de209279ef0c0a68bccf05bb704420e6d7aa78a8d6d44b0986d0e8c3985086195cf6beb8c2148f654b7c2b8758fe87ad4b73c6cf7b6e72f3d1d282d925f9c51c7be5ca5912de44763492e877146e0a74b37e9d6a4be5cc208770ded4f54e77aab4c28a2468dab46302bc57d1073e81ed2b842e6ded03654723242896bdaf822a609732f63b502ffa5d6246fd4cef8e80d5c3f4552fc1f46316415d2e616969b523b2298111d8915260793a99edc1e03c5d025881dcc5be3d4221d89ec7c612ea87f0a9eaa1c9b39c1ecbbb1b97739ee7f442528d6f2d417eb7c9c0f68892160d12d9ebd6c852983c343d36f797531680c76eedd96a0fd16c0ca0a1307de4fe0b6fd4dcbdef9aaf2ca50a0b9fc4daaf262fbd94ec8a324b664033c9d070a9c3b795dc9b0d802d8ff83ec35aa4905d79e16680800936574cd15bc4cb1a6dccfbfe6c73c773427ffd245f44dc541c634ca6f16ecfe7b05f6dcbdb4a635f432869d99e43fcf03a1eefa4118e92f2ccb35c20aca9442b52985322a39a37d12d5a9e99528f44d315f306a56f8b7ec6e3aa1108815fab7987cab2649eebf3f531acce1ff9d325397607110bed9b9b4fd758f86c17bd27b7962d8514eb0e874257ff5c0b3704f03bbbcedb31669d13fbdee2adf8e856c25fa146be65bd7463ca7a40e5095322397a64bb31b73151d3fde485fba407a5526cf0478e4bf8052534dc624650155dcccf3f7281cd4a271ca1619d66ef4578dab1b351a4bbec7f3cdd293b3781c1a2bd52a64e92585d73c7de709dd3facb7397b541a2d09601cecbe983866b1c2d8f62e6216f1a6f58621193c58a9fe98bd47fdc542686d80d22a36da05e5d2ac784e7bef4bbc8299ae106d3a3630e408316ebd3c485287575f9522b4352ccb9176a61063fe2fe9e9fce228fd0b507ea0d195fc04188e6d878f164a4bfa9c68ced4cb8be58cc40e7f7876307633c20829e963d701e4227997bcb6f909d4f03ac2fa2e28f924a9188d043df8e80d9ec878f6571de3e2116fe568f33d0ab610d0e901b4dfdb0d0401cc80471b0b908c1bacc4777693c591e47f88e8035674e3a1f5731266345819aefc5339e12f5bd9fa4526ddfa895feb0c4ef22c6e4677388eee0ee627b7b66eec286a79bd350c8232bc313302d80e7cd49221e6a4f7087abe5d3b74a6008d9df05d437c6633d9906328a1a69cdf6f2dc260ff9938e77c4960ebe68916e7604532be319c1684850858ce75b7072f14021085d64b1777d671ba41d1f236c00547e6739cf9ee288bd3433399873985e8bb35a636be88f5bcbb3745dd48ca13f3ead461c544581070b50b8fabc34691dc5971c315ae6a630cc16bec59a86788f0ee738270dbe3c44fa70b05674cd3428e56d342208140ce91e723f17d43887d145c6858ad555167bbc698f6d3c94d5c76235df07bcf9a35c8828ba8df281ed704e640ce294dd588d5fbb52dc7fe8bd90ca9586fd4d75f51251c9d6a843a89a77712f1761021ea4c7156c7044a34d04c139ccab37ea72151436d1764dfd8e95e8b19ffe9bf51c4fd56c2bb28b26233ba79725d70af96ba3c684e91c9057eaa83f78c0264e2c9af42cddb4db86981a45c01bc03fab20f6eaa37fd1462fa5ae16c083997f7c254321145061e717b4d5640ed1ea7f3604b92169f3d962c29c7e950878fa0bbc74feae1afab53f48dcb1e1c8c517ba68c0c2e6e06436173ce27b2924e5ef32fe382e8a0a3e0d99d5b06d4bfeb8845c327a38018f10b3871bb87a0d1627830c024597e5c2f009805877947a0fb81d3e76ef7914c0414857db26faeca108492c666bc35ce07d0ac650cb63a03098e7dfd852257ba8910beaf4be0f7a07225266c9dcdbf6cfffd9583c1a21e7bb8d7086a695d3c905d423fd8b92a1fed5025594afa99a2b1ed5f09ebec567cbee07f8988d1c2a839d0f8b83e3b28a68bc4286eb0ba80b616065283c896fff80a6f03caf4914100268b4cb94c9e81495acaedd46e746f447b3c7ab955a5fd22efe8eccbb9de674b4a9bf36359e6214dd3eeed6beb7fd68f6ba7026647c2c697587e49f0a0550037673b00973a7da4b28e51bf1fad429280a3665f11d72ad546c6945ee4d97afafabf126e32ab9f81d6e9f7c1fbd2cd05cc1bec443ed1f8e50d899c981e677ebd4f2b176646655e419d3b9bdfe3a92bc70812010fa4314108f18b239257b874d11f329f63ccf61d644f3ae17d00fed968e69751841615ec2f237607556756edee9c515423ef02d75a1f32c8212fa5bfbab4e866f649139206869600ae15d50a94cf7b346907e9040b3d8195213db2c6b74b8e258616703cc6f1b3352c98438809e1db22a3bd17f320a77f1d6089eb267b9d817d425103717ecd6cf785a1531595c087d843ef993e8f4bae09e8c68b1b9354a20d472c15bc29dbc7564c6e1b723a02e7aa48cb6bb67d4a9ed470bee36a0452f54278c8f0cc1200b43a65b9d1acb14cc8a08ac20c320c414ef03c46a72dad1c4fb520dfbdf8e5d2c3f8afc56c2e5f2c6b4982606899e24585094d53d5b769aefed67b5ad4206c6e199d07867fa55a251e6562737258f39b4fea16c23b4b5d71b3237901180ce2142ab3374038926981e7a28a05c19d9d0095ee38158ba06c4acb51ec29768c1efb1ab4ac189e9d5106c8fcfc63fb8340d0a71aa3748c814062d75bd0de04af4e0e3700032eb2e52e61d4aee4356261247763d86b9926114766d1d8b8278eba11ac604615daf338530bfad3bd2b1a3d916c2d8250d0abecc857ade6e22fcbefbb3e3c1d8361a84dc3cd359ab585673e52b5afffb4fd189c3840193a3e01625bbe77b9a29f7540247a2ade420bc56782057ccb921ec42e40f12c793369e067f954fc3a2bcbe6151e78f7a843287ac5df36c9b1a1649b3532adcac36dafca232f313ab3df09eda8e5eec0da0f6da5c888e2fabfd8bcb4c91225fd9b7d7749ae479fca3faecee03d36360c8421662490a9d3cc1becbf0a0d4e6e757e2bd15bfeb6ab16ad3dfcaf9448ff975221984177c8195a86eaa8454465a57307c8a12db50484cbf439726bf95da083024b28d6eb68fe78ffb41101f82bcbb5b358b50a2181949a7eb93fc28714ad98baf5b7cafed8d944648175bb9aadfd3b62e11cd0bd20c4276ccb9825eb30bc438c06eedb33d71d3cd35d5b46286f9951f2bbb135b22e3005eadc880885128e1372bcf7560492f32d952a2c7a9bbbc1fba820a31f46e65f6264513361e9c4017904bd12f31ef74502f612f25701b8631af4ff7f4e36ffbb0e100e0f801d7f3595751c290b70a079d00f348ded57ad38e40352c86e71ea89972515829e617a5eeeae263f737bba98eeba6be5761dea5285c1b501141d767c97c4cbb21b385c6ac9bef08c49f5e0fc302fea81d266fde7ee6ddd7c7c71e42622f79e6117fa9e8ac3d87a4c1376a8afc4b61b0bada746cf63b67b4c30d3cd8d192c2704599451bdb3684d6e86a7be922a78b6decb72e35f68eaa72f3e471dd3f3f910aa1458fbb4b6386f550853fdf16b42103014b72b93839f6cd4e37a71d5543cd67c1e2b46c16df0d6e113a6d6a593ee4665be19cc895fec2ae47610163f5373aaf51fa2eec7bccf654bbd4cd8427ce4b521df4ea21baf6fe6eceed2ca3571107974aaa4d57598a5ba84d68c99a55afdc4fb181c45bf4ecfa32d8b573f283372aeb9ce11c1d807261f283fe07767453943e9a0df52a6d8220806a76cd0a6c31a86520a8486d20ad8fa3fc6e354303e493956f74de6173e276ebabf69372bb00f39d83ab855ceb1fddb7344f554dee5fbb4433a2a209c26314fb3fa5b1672df63850b48d3ed5353851cafecdaa799a905db310197f2c72bdf49995d4d42d53f5875667304627ab19a82f896f650786aee9155ee7a0e6ecc8ed98d0a1cd8c9f5a4b48c396267be95ceb833b05c78ead5185de87439f70c84c6b5e112a53b71145d1e18fcd2b7654455a3f5e35ee96a93e4f9668fcda02a3a9ddc3608de10ffbf488ceb0d1ffae597a64eb210b5f00708de7bcfad0a3e27685466e04704bc9f803785cd703aaa69220bc6f9221e5a6cbd5daf294579d3cd7037d92e6f164fe9cb966cb5d364d0cbab9534fb25aeb1d39cd61cdd63b2f791d70a483866b6ae62403c48b96466837b9c5a506a3", 0x1000, 0xd47}, {&(0x7f00000011c0)="139d214b649e53f7efc040b8e42a4b4890f4a5c70b33fa4e4052d4b58fb1923367325088620bd53574f6e64b7f6696e02cc861c5b839f4e49830529ea47cd60ec50e88f16ff6a7b2c836ff95fb9407d04c23736caed03b2bcad8000a052337031cb65111af9178de98216fc1ca77cd5f7aa74c2254c88c13765f9db3bd98", 0x7e, 0x4}, {&(0x7f0000001240)="23cf122ed53a48f0dcf7b82565299f2e49a06df7c31df88a1a238a38e85048b323c829b4443ef5a89eaf3dbac184f457a871daa507dd69d33e74cc40a555ce04d19484dbde06852cedc3431808", 0x4d, 0x40000000}, {&(0x7f00000012c0)="bf47580703b927213ddffd432f4164ac77239388047818f1eb4f06c0950153760d5ba25d24b3f77dbc17a881689d9ae4b28f1bff86fe13ce63a6c96b42547f52f11f75b512142531820104bb72fb3ad537f9005314c1f385d1411938588a7bbaf444f8540e3e4d71afcc66a09823ef21500133fae4ec4025bf4cf5a027f144c89d361193", 0x84, 0x5}], 0x20, &(0x7f0000001400)={[{@errors_recover='errors=recover'}], [{@smackfsroot={'smackfsroot', 0x3d, 'proc{*securitynodev(cpuset:}ppp1trustedP,{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}]}) 00:27:37 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:37 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:37 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:37 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:37 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:37 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x4, 0x4) dup2(r0, r1) 00:27:37 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:38 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:27:38 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:38 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:38 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa0}, {r1, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x2c) r1 = accept4$alg(r0, 0x0, 0x0, 0x180000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001140)={'ifb0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x10001, 0x1000, "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"}}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) 00:27:38 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:38 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:38 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="85000000070000002500000000000000950000000000000005247a5af3fc9a5eb89557d3085ddc143fd84fee444437af8c1e3e1dd085f84fec5490414f184707c8aa37617edf303cc8c8597902c2691001a4e191a63bbd875b042e5b1d9074b622cc5e52b5d974cc132f6d00ef6b6eefa95bb0896e1dd8b36eb19e290a050c724bf4fbb6178d9363ac276b9cb2c28430c9fe6c2e453cea96cb9f5a72db1228a857b42a6ff87182705a3ac43db09df6f4797074faf859f62fdf69bf042f79a65c76f9970eab67144b2db71ed8dc05de8d69c3777411ce6c1b03dd4e5e46bdfa50f3265cf695636d960cbcc80b30abababcd161eab346b0ba176939620013a08a64a5190955bee291f3fdae396acd2bc7469f042f41c408ac49131ca3c622f312a591d800000000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6a, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20700, 0x0, 0x0, 0xa, 0xfffffffffffffffe, 0x200}, 0x0, 0x0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() tkill(r4, 0x1000000000016) fcntl$setown(r3, 0x8, r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x14, 0x1, 0x100, &(0x7f0000000100)=[0x0, 0x0], 0x2}, 0x20) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:38 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:38 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4440, 0x0) ppoll(&(0x7f0000000180)=[{}, {}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1ea) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:38 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:38 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:38 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:38 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:39 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x80002, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r7}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000240)={r7, 0xdff}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r7, @in={{0x2, 0x4e22, @broadcast}}, [0x96c, 0x9c47, 0x7fffffff, 0x1, 0x9, 0xf4, 0x3, 0x6, 0x6, 0x49b, 0x3963, 0x1, 0xfffffffffffffff8, 0x1f, 0x400]}, &(0x7f0000000040)=0x100) clock_adjtime(0x3, &(0x7f0000000100)={0x2, 0x1, 0x81, 0x7ff, 0x27baeba0, 0x7fff, 0xfffffffffffffffb, 0x797, 0x7, 0x74a, 0xfffffffffffffff9, 0x7c51128f, 0x6, 0x6, 0x7a, 0x800, 0x100000001, 0x3, 0x7fffffff, 0x80000000, 0x7ff, 0x6, 0x1f, 0x800, 0x1, 0x8000}) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:39 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:39 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4440, 0x0) ppoll(&(0x7f0000000180)=[{}, {}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1ea) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:39 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:39 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:39 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:39 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:39 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:39 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:39 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4440, 0x0) ppoll(&(0x7f0000000180)=[{}, {}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1ea) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 00:27:39 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:39 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:39 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:39 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, &(0x7f0000000380)={0x81}, 0x8) 00:27:40 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:40 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {r2, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:40 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:40 executing program 4 (fault-call:0 fault-nth:0): syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:40 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}, {0xffffffffffffffff, 0x4080}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:40 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:40 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6a66d80878646e6f3d69b863727ea99874d94fba78460512863daf8c66ff2d81fe8826f4050034533e0824b1efb000c4050340c0038a4094c267da95eee22e43a30e796dfddf0278cc325b239e0b3bdc4da3796296ea899cf4d3a7d561cafc07653d3f234df4bd0700000030477b365fc6d160251869a5096bffaceba29a69de0c2a8f20bbdd84379702a031db81088394fd9886830cdc4fd8dbd26b0eaa4abd2d6ff4db63a258d09122bba3a17b82c23b245bf222f6a8352b", @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.L,uid>', @ANYRESDEC=r3, @ANYBLOB="2c6f626a5f757365723d21736563757269747947504c656d307b926d643573756d2e2c657569643c", @ANYRESDEC=r4, @ANYBLOB=',mask=^MAY_WRITE,uid=', @ANYRESDEC=r5, @ANYBLOB=',\x00']) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6}, {r6}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) truncate(&(0x7f0000000080)='./file0\x00', 0x0) [ 619.576341][T25842] FAULT_INJECTION: forcing a failure. [ 619.576341][T25842] name failslab, interval 1, probability 0, space 0, times 0 [ 619.607578][T25842] CPU: 0 PID: 25842 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 619.616851][T25842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.626898][T25842] Call Trace: [ 619.630203][T25842] dump_stack+0x172/0x1f0 [ 619.634538][T25842] should_fail.cold+0xa/0x15 [ 619.639122][T25842] ? fault_create_debugfs_attr+0x180/0x180 [ 619.644916][T25842] ? ___might_sleep+0x163/0x280 [ 619.649763][T25842] __should_failslab+0x121/0x190 [ 619.654710][T25842] should_failslab+0x9/0x14 [ 619.659192][T25842] __kmalloc+0x2e0/0x770 [ 619.663417][T25842] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 619.669648][T25842] ? fput_many+0x12c/0x1a0 [ 619.674056][T25842] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 619.681666][T25842] ? strnlen_user+0x1ed/0x2e0 [ 619.686322][T25842] ? __x64_sys_memfd_create+0x13c/0x470 [ 619.691862][T25842] __x64_sys_memfd_create+0x13c/0x470 [ 619.697240][T25842] ? memfd_fcntl+0x18c0/0x18c0 [ 619.701997][T25842] ? do_syscall_64+0x26/0x760 [ 619.706680][T25842] ? lockdep_hardirqs_on+0x418/0x5d0 [ 619.711971][T25842] ? trace_hardirqs_on+0x67/0x240 [ 619.717082][T25842] do_syscall_64+0xfa/0x760 [ 619.721572][T25842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 619.727451][T25842] RIP: 0033:0x4598e9 [ 619.731346][T25842] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 619.750948][T25842] RSP: 002b:00007ff6642a9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 619.759351][T25842] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004598e9 [ 619.767313][T25842] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be808 00:27:40 executing program 4 (fault-call:0 fault-nth:1): syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:40 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 619.775276][T25842] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 619.783237][T25842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6642aa6d4 [ 619.791200][T25842] R13: 00000000004c8afb R14: 00000000004dfa80 R15: 0000000000000003 00:27:40 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) [ 619.891762][T25845] 9pnet: Insufficient options for proto=fd 00:27:40 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) [ 620.006400][T25857] FAULT_INJECTION: forcing a failure. [ 620.006400][T25857] name failslab, interval 1, probability 0, space 0, times 0 00:27:40 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, &(0x7f0000000380)={0x81}, 0x8) [ 620.120276][T25857] CPU: 0 PID: 25857 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 620.129436][T25857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.139502][T25857] Call Trace: [ 620.142810][T25857] dump_stack+0x172/0x1f0 [ 620.147165][T25857] should_fail.cold+0xa/0x15 [ 620.151776][T25857] ? fault_create_debugfs_attr+0x180/0x180 [ 620.157601][T25857] ? ___might_sleep+0x163/0x280 [ 620.162467][T25857] __should_failslab+0x121/0x190 00:27:41 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 620.167417][T25857] ? shmem_destroy_inode+0x80/0x80 [ 620.172536][T25857] should_failslab+0x9/0x14 [ 620.177038][T25857] kmem_cache_alloc+0x2aa/0x710 [ 620.181891][T25857] ? __alloc_fd+0x487/0x620 [ 620.186411][T25857] ? shmem_destroy_inode+0x80/0x80 [ 620.191524][T25857] shmem_alloc_inode+0x1c/0x50 [ 620.196302][T25857] alloc_inode+0x68/0x1e0 [ 620.200648][T25857] new_inode_pseudo+0x19/0xf0 [ 620.205336][T25857] new_inode+0x1f/0x40 [ 620.209417][T25857] shmem_get_inode+0x84/0x7e0 [ 620.214114][T25857] __shmem_file_setup.part.0+0x7e/0x2b0 00:27:41 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 620.219679][T25857] shmem_file_setup+0x66/0x90 [ 620.224368][T25857] __x64_sys_memfd_create+0x2a2/0x470 [ 620.229748][T25857] ? memfd_fcntl+0x18c0/0x18c0 [ 620.234951][T25857] ? do_syscall_64+0x26/0x760 [ 620.239645][T25857] ? lockdep_hardirqs_on+0x418/0x5d0 [ 620.244929][T25857] ? trace_hardirqs_on+0x67/0x240 [ 620.249954][T25857] do_syscall_64+0xfa/0x760 [ 620.249978][T25857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 620.249990][T25857] RIP: 0033:0x4598e9 [ 620.250005][T25857] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 620.250013][T25857] RSP: 002b:00007ff6642a9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 620.250031][T25857] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004598e9 [ 620.250039][T25857] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be808 [ 620.250047][T25857] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 620.250060][T25857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6642aa6d4 [ 620.325445][T25857] R13: 00000000004c8afb R14: 00000000004dfa80 R15: 0000000000000003 00:27:41 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:41 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:41 executing program 4 (fault-call:0 fault-nth:2): syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:41 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}, {r1, 0xa0}], 0x4, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) [ 620.610931][T25978] FAULT_INJECTION: forcing a failure. [ 620.610931][T25978] name failslab, interval 1, probability 0, space 0, times 0 [ 620.683231][T25978] CPU: 0 PID: 25978 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 620.692389][T25978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.702452][T25978] Call Trace: [ 620.705763][T25978] dump_stack+0x172/0x1f0 [ 620.710120][T25978] should_fail.cold+0xa/0x15 [ 620.714736][T25978] ? fault_create_debugfs_attr+0x180/0x180 [ 620.720564][T25978] ? ___might_sleep+0x163/0x280 [ 620.725424][T25978] __should_failslab+0x121/0x190 [ 620.730365][T25978] should_failslab+0x9/0x14 [ 620.734871][T25978] kmem_cache_alloc+0x2aa/0x710 [ 620.739723][T25978] ? current_time+0x6b/0x140 [ 620.744313][T25978] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 620.750120][T25978] ? lockdep_hardirqs_on+0x418/0x5d0 [ 620.755408][T25978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 620.761692][T25978] ? timespec64_trunc+0xf0/0x180 [ 620.766613][T25978] __d_alloc+0x2e/0x8c0 [ 620.770778][T25978] d_alloc_pseudo+0x1e/0x70 [ 620.775271][T25978] alloc_file_pseudo+0xe2/0x280 [ 620.780110][T25978] ? alloc_file+0x4d0/0x4d0 [ 620.784607][T25978] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 620.790843][T25978] __shmem_file_setup.part.0+0x108/0x2b0 [ 620.796464][T25978] shmem_file_setup+0x66/0x90 [ 620.801136][T25978] __x64_sys_memfd_create+0x2a2/0x470 [ 620.806493][T25978] ? memfd_fcntl+0x18c0/0x18c0 [ 620.811248][T25978] ? do_syscall_64+0x26/0x760 [ 620.815912][T25978] ? lockdep_hardirqs_on+0x418/0x5d0 [ 620.821183][T25978] ? trace_hardirqs_on+0x67/0x240 [ 620.826203][T25978] do_syscall_64+0xfa/0x760 [ 620.830727][T25978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 620.836598][T25978] RIP: 0033:0x4598e9 [ 620.840474][T25978] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 620.860072][T25978] RSP: 002b:00007ff6642a9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 620.868467][T25978] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004598e9 [ 620.879120][T25978] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be808 [ 620.887082][T25978] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 620.895043][T25978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6642aa6d4 [ 620.902999][T25978] R13: 00000000004c8afb R14: 00000000004dfa80 R15: 0000000000000003 00:27:41 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000100)=""/4096, &(0x7f0000000040)=0x1000) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:41 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:41 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}, {0xffffffffffffffff, 0x10}], 0x3, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:41 executing program 4 (fault-call:0 fault-nth:3): syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:41 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 621.053343][T26086] FAULT_INJECTION: forcing a failure. [ 621.053343][T26086] name failslab, interval 1, probability 0, space 0, times 0 [ 621.075001][T26086] CPU: 0 PID: 26086 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 621.084150][T26086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.094211][T26086] Call Trace: [ 621.097517][T26086] dump_stack+0x172/0x1f0 [ 621.101868][T26086] should_fail.cold+0xa/0x15 [ 621.106472][T26086] ? fault_create_debugfs_attr+0x180/0x180 [ 621.112298][T26086] ? ___might_sleep+0x163/0x280 [ 621.117165][T26086] __should_failslab+0x121/0x190 [ 621.122109][T26086] should_failslab+0x9/0x14 [ 621.126646][T26086] kmem_cache_alloc+0x2aa/0x710 [ 621.131532][T26086] ? current_time+0x6b/0x140 [ 621.136479][T26086] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 621.142272][T26086] ? lockdep_hardirqs_on+0x418/0x5d0 [ 621.147555][T26086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 621.153827][T26086] ? timespec64_trunc+0xf0/0x180 [ 621.158752][T26086] __d_alloc+0x2e/0x8c0 [ 621.162895][T26086] d_alloc_pseudo+0x1e/0x70 [ 621.167383][T26086] alloc_file_pseudo+0xe2/0x280 [ 621.172272][T26086] ? alloc_file+0x4d0/0x4d0 [ 621.176772][T26086] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 621.183026][T26086] __shmem_file_setup.part.0+0x108/0x2b0 [ 621.188770][T26086] shmem_file_setup+0x66/0x90 [ 621.193464][T26086] __x64_sys_memfd_create+0x2a2/0x470 [ 621.198846][T26086] ? memfd_fcntl+0x18c0/0x18c0 [ 621.203633][T26086] ? do_syscall_64+0x26/0x760 [ 621.208323][T26086] ? lockdep_hardirqs_on+0x418/0x5d0 [ 621.213613][T26086] ? trace_hardirqs_on+0x67/0x240 [ 621.218643][T26086] do_syscall_64+0xfa/0x760 [ 621.223155][T26086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 621.229048][T26086] RIP: 0033:0x4598e9 [ 621.232948][T26086] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 621.252585][T26086] RSP: 002b:00007ff6642a9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 621.260976][T26086] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004598e9 [ 621.268941][T26086] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be808 [ 621.276903][T26086] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 621.284855][T26086] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6642aa6d4 [ 621.292857][T26086] R13: 00000000004c8afb R14: 00000000004dfa80 R15: 0000000000000003 00:27:42 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, &(0x7f0000000380)={0x81}, 0x8) 00:27:42 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0, 0x2820}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:42 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:42 executing program 4 (fault-call:0 fault-nth:4): syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:42 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:42 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 621.557825][T26208] FAULT_INJECTION: forcing a failure. [ 621.557825][T26208] name failslab, interval 1, probability 0, space 0, times 0 [ 621.575273][T26208] CPU: 0 PID: 26208 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 621.584502][T26208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.594564][T26208] Call Trace: [ 621.597876][T26208] dump_stack+0x172/0x1f0 [ 621.602246][T26208] should_fail.cold+0xa/0x15 [ 621.606859][T26208] ? fault_create_debugfs_attr+0x180/0x180 [ 621.612688][T26208] ? ___might_sleep+0x163/0x280 [ 621.620416][T26208] __should_failslab+0x121/0x190 [ 621.625369][T26208] should_failslab+0x9/0x14 [ 621.629882][T26208] kmem_cache_alloc+0x2aa/0x710 [ 621.634743][T26208] ? kmem_cache_alloc+0x364/0x710 [ 621.639785][T26208] security_file_alloc+0x39/0x170 [ 621.644822][T26208] __alloc_file+0xde/0x340 [ 621.649251][T26208] alloc_empty_file+0x72/0x170 [ 621.654027][T26208] alloc_file+0x5e/0x4d0 00:27:42 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 621.658288][T26208] alloc_file_pseudo+0x189/0x280 [ 621.663230][T26208] ? alloc_file+0x4d0/0x4d0 [ 621.667750][T26208] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 621.674014][T26208] __shmem_file_setup.part.0+0x108/0x2b0 [ 621.679661][T26208] shmem_file_setup+0x66/0x90 [ 621.684350][T26208] __x64_sys_memfd_create+0x2a2/0x470 [ 621.689734][T26208] ? memfd_fcntl+0x18c0/0x18c0 [ 621.694499][T26208] ? do_syscall_64+0x26/0x760 [ 621.699187][T26208] ? lockdep_hardirqs_on+0x418/0x5d0 [ 621.704477][T26208] ? trace_hardirqs_on+0x67/0x240 [ 621.709506][T26208] do_syscall_64+0xfa/0x760 [ 621.709531][T26208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 621.709544][T26208] RIP: 0033:0x4598e9 [ 621.709558][T26208] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 621.709566][T26208] RSP: 002b:00007ff6642a9a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 621.709581][T26208] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004598e9 [ 621.709588][T26208] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be808 [ 621.709597][T26208] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 621.709610][T26208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6642aa6d4 [ 621.719967][T26208] R13: 00000000004c8afb R14: 00000000004dfa80 R15: 0000000000000003 00:27:43 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000180)=0x5bd, 0x4) 00:27:43 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:43 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:43 executing program 4 (fault-call:0 fault-nth:5): syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:43 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:43 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:43 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) [ 622.335734][T26429] FAULT_INJECTION: forcing a failure. [ 622.335734][T26429] name failslab, interval 1, probability 0, space 0, times 0 [ 622.457546][T26429] CPU: 0 PID: 26429 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 622.466801][T26429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.476873][T26429] Call Trace: [ 622.480705][T26429] dump_stack+0x172/0x1f0 [ 622.485060][T26429] should_fail.cold+0xa/0x15 [ 622.489667][T26429] ? fault_create_debugfs_attr+0x180/0x180 [ 622.495517][T26429] ? ___might_sleep+0x163/0x280 [ 622.500383][T26429] __should_failslab+0x121/0x190 [ 622.505331][T26429] should_failslab+0x9/0x14 [ 622.509841][T26429] __kmalloc+0x2e0/0x770 [ 622.514095][T26429] ? mark_held_locks+0xf0/0xf0 [ 622.518868][T26429] ? stack_trace_save+0xac/0xe0 [ 622.523735][T26429] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 622.529464][T26429] tomoyo_realpath_from_path+0xcd/0x7b0 [ 622.535017][T26429] ? tomoyo_path_perm+0x1cb/0x430 [ 622.539966][T26430] syz-executor.5 (26430) used greatest stack depth: 21472 bytes left [ 622.540045][T26429] tomoyo_path_perm+0x230/0x430 [ 622.552935][T26429] ? tomoyo_path_perm+0x1cb/0x430 [ 622.557965][T26429] ? tomoyo_check_open_permission+0x3f0/0x3f0 [ 622.564404][T26429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.570673][T26429] ? rcu_read_lock_any_held+0xcd/0xf0 [ 622.576048][T26429] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 622.581344][T26429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.587595][T26429] tomoyo_path_truncate+0x1d/0x30 [ 622.592632][T26429] security_path_truncate+0xf2/0x150 [ 622.597927][T26429] do_sys_ftruncate+0x3d9/0x550 [ 622.602791][T26429] __x64_sys_ftruncate+0x59/0x80 [ 622.607738][T26429] do_syscall_64+0xfa/0x760 [ 622.612254][T26429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 622.618145][T26429] RIP: 0033:0x4598b7 [ 622.622045][T26429] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 622.641650][T26429] RSP: 002b:00007ff6642a9a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 622.650057][T26429] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004598b7 00:27:43 executing program 1 (fault-call:4 fault-nth:0): r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:43 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:43 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 622.650066][T26429] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000004 [ 622.650075][T26429] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 622.650089][T26429] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000004 [ 622.681935][T26429] R13: 00000000004c8afb R14: 00000000004dfa80 R15: 0000000000000003 00:27:43 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:43 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:43 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) [ 622.845933][T26429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.938974][T26429] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:43 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:44 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000180)=0x5bd, 0x4) [ 623.200609][T26429] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. [ 623.245780][T26429] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 00:27:44 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:44 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x8}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:44 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:44 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {0xffffffffffffffff, 0x2820}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:44 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000180)=0x5bd, 0x4) 00:27:44 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x64}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:44 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xffb51cbef29571e}, {r0}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) [ 623.624929][T26782] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:44 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x26f}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:44 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 623.852482][T26782] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. [ 623.901350][T26782] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 00:27:44 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value, &(0x7f0000000100)=0x8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:44 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x3f00}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:44 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:45 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='\ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:45 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000180)=0x5bd, 0x4) 00:27:45 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x6400}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:45 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:45 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:45 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:45 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x6f02}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:45 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='%tfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:45 executing program 2: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={0x81}, 0x8) 00:27:45 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:45 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:45 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x8000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:45 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, &(0x7f0000000380)={0x81}, 0x8) 00:27:45 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='\\tfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:45 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:46 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x3f000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:46 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='n\nfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:46 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x64000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:46 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:46 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:46 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x6f020000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:46 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x7) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:46 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='n%fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:46 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0xfefdffff}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:46 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, &(0x7f0000000380)={0x81}, 0x8) 00:27:46 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:46 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000180)=0x5bd, 0x4) 00:27:47 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0xfffffdfe}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:47 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:47 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:47 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x800000000000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:47 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='n\\fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:47 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000180)=0x5bd, 0x4) 00:27:47 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x3f00000000000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:47 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:47 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x6400000000000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:47 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, &(0x7f0000000380)={0x81}, 0x8) 00:27:47 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='n\xf8fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:47 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x11, &(0x7f0000000000)=@raw={'\x0f\x00', 0x9, 0x3, 0x2d0, 0xf0, 0x0, 0xf0, 0xf0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@mcast2, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xc8, 0x110}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 00:27:47 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x6f02000000000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:48 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) recvfrom$x25(r1, &(0x7f0000000100)=""/228, 0xe4, 0x20, &(0x7f0000000040)={0x9, @remote={[], 0x3}}, 0x12) 00:27:48 executing program 3: r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, 0x0, 0x0) 00:27:48 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='nt\ns\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:48 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(0xffffffffffffffff, r2, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:48 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0xfefdffff00000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:48 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=iso8859-4,nls']) 00:27:48 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x8}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:48 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(0xffffffffffffffff, r2, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 627.751012][T28437] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 627.867533][T28437] ntfs: (device loop3): parse_options(): The nls option requires an argument. [ 627.980606][T28437] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:27:48 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x64}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:48 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='nt%s\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:48 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:48 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) r1 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r1, &(0x7f0000001640)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/97, 0x61}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000001400)=""/117, 0x75}, {&(0x7f0000001480)=""/54, 0x36}, {&(0x7f00000014c0)=""/207, 0xcf}], 0x8}, 0x7ff}], 0x1, 0x7020, &(0x7f0000001680)={0x77359400}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) [ 628.102734][T28437] ntfs: (device loop3): parse_options(): The nls option requires an argument. 00:27:49 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x26f}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000002000000bf230000000000002703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000400)='./file0/file0\x00', r0}, 0x10) 00:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) 00:27:49 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(0xffffffffffffffff, r2, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:49 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='nt.s\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:49 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x3f00}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:49 executing program 3: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x10000009, 0x8, 0x0) 00:27:49 executing program 2: r0 = socket$inet6(0xa, 0x806, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x6, &(0x7f0000000000)=@raw={'\x0f\x00', 0x9, 0x3, 0x2d0, 0xf0, 0x0, 0xf0, 0xf0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@mcast2, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xc8, 0x110}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 00:27:49 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:49 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x6400}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:49 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, 0xffffffffffffffff) 00:27:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) 00:27:50 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='nt/s\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:50 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x6f02}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:50 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, 0xffffffffffffffff) 00:27:50 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:50 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x80, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000280)={0x3, 0x4}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) connect$packet(r1, &(0x7f0000000140)={0x11, 0x6, r2, 0x1, 0x400}, 0x14) r3 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r3, 0xa, 0x11) fcntl$setlease(r3, 0x400, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4}, {r4}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0x5, 0xffffffffffffffff, 0x7, 0x5, 0x17, 0x1f, 0x80000000, 0xfffffffffffffbff, 0x8, 0xfffffffffffff88f}) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:50 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x8000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="4cf940bce9f1fd82a1728fa14c825e08", 0x10) 00:27:50 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, 0xffffffffffffffff) 00:27:50 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='nt\\s\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:50 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0x80, 0x20363059, 0x1, @discrete={0x1000, 0x6}}) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) 00:27:50 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:50 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x3f000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 00:27:50 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x64000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:50 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x16, r1, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:27:50 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(0xffffffffffffffff, r0) 00:27:50 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf\n\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:50 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setsig(r2, 0xa, 0x11) syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x200) capget(&(0x7f0000000140)={0x9d8eb155e3d53911}, &(0x7f0000000200)={0x6, 0x3, 0x1, 0x1c0000000, 0x80000000, 0x4}) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x80000000) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) sendto$unix(r1, &(0x7f0000000280)="168c9fbb44201cf23029a7a4e8180117624b6fc2f2580ad2036c67a8233488a900519d8c1b8b5c781fba9b2eaa91375b044ce1bc1b6f91a737f6e1ae627d1c64a8987edec97a3d177e3b4ad17f939fcdd7aa3360a1bf9ff2673718e1a6a07859f1610819b9fbc6ed", 0x68, 0x80, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000240)=0x1) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1) 00:27:50 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:51 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x6f020000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:51 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(0xffffffffffffffff, r0) 00:27:51 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x8, 0x30102) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xbc1a, 0x0) mknodat(r1, &(0x7f0000000200)='./file0\x00', 0xa4e80591ea7dcb71, 0x1) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8500000007000000000000010000000000007367f892399926680a5560acac2d738802c6812af262eb10733d1d64bc6c940a69df457bafdb5e85caac16b9ff8336c7391b76cdd18aeec9c2888bd45fc50cdc592436a824e4e342505783ded62d275d7252ef8d1440edcb141e5180bb4358059597f031de4140"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mmap$perf(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1, 0x80010, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000340)="899c5edd313ee97bb98375927504bcf29c040242192696859162a6a8ce8517a0e64ede95feabb6a4d58e33ab454cb747d62f9494ba9a12e887456cdb1b5c0c5a1da865bdcc064d998cb605ac52f5ecc5a7e75c036419b587cb7c78a6f792ce6b88d53ab89800c0101eabdda9c4ac290ca19ff9bf1f97af05404b", 0x7a) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:51 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="666d61736b3d30303030303030303030303030303030303030303030342c757466382c6e6c733d69736f383835392d342c6e6c733d63703836a1022a14cbc17c4b6e655f6d756c7469706c6965723d3078303030303030303030303030303030342c73686f775f7379735f66696c65733d"]) 00:27:51 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0xfefdffff}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:51 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:51 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf#\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:51 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:51 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0xfffffdfe}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) [ 630.610802][T29568] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 630.754075][T29568] ntfs: (device loop2): parse_options(): NLS character set cp86¡*ËÁ|Kne_multiplier=0x0000000000000004 not found. Using previous one iso8859-4. 00:27:51 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:51 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x800000000000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) [ 630.814064][T29568] ntfs: (device loop2): parse_options(): The show_sys_files option requires a boolean argument. 00:27:51 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf%\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) [ 631.012906][T29568] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 631.087668][T29568] ntfs: (device loop2): parse_options(): NLS character set cp86¡*ËÁ|Kne_multiplier=0x0000000000000004 not found. Using previous one iso8859-4. 00:27:52 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 631.152480][T29568] ntfs: (device loop2): parse_options(): The show_sys_files option requires a boolean argument. 00:27:52 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:52 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x3f00000000000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:52 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x40, 0x1, 0x0, 0x80000001, 0x8001, {0x0, @in={{0x2, 0x0, @broadcast}}, 0xfffffffffffffffe, 0x525, 0xbc, 0x0, 0x9}}, &(0x7f0000000440)=0xb0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 00:27:52 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(0xffffffffffffffff, r0) 00:27:52 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:52 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf*\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:52 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x6400000000000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:52 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:52 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x6f02000000000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:52 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmod(r0, 0x0) 00:27:52 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0xfefdffff00000000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:52 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:53 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x311143) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x400, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:53 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:53 executing program 2: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() connect$inet(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) tkill(r1, 0x200000000038) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:53 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf+\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:53 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:53 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/154, 0x9a) 00:27:53 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0xf, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:53 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:53 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf-\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:53 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:53 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x300, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:27:54 executing program 2: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x200000000038) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") request_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x20000000, 0x20000000, 0xf9}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:27:54 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:54 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x8) 00:27:54 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf.\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:54 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000700)={&(0x7f0000000380), 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2ac, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x39}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x49}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20000}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x602}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6d}]}, @TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0xa88, 0x3f, @ipv4={[], [], @multicast2}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x25e, @loopback, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x78a6dadcaa8d6bd3}, 0x4800a) fanotify_init(0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) execveat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='!!+vboxnet0vboxnet1\'%vboxnet1\x8a\x00'], &(0x7f0000000280)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='#GPLwlan1trusted{security\xa2\x00', &(0x7f0000000200)='cgroup\x00', &(0x7f0000000240)='cpuset%\x00'], 0x100) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2c4, 0x4}, 0x0, 0x5e352672}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4}, {r4}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f00000002c0)=""/84) 00:27:54 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:54 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) 00:27:54 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x64) 00:27:54 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:54 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf/\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:54 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x26f) 00:27:55 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:55 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() truncate(&(0x7f0000000080)='./file0\x00', 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000100)=""/130) 00:27:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 00:27:55 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x3f00) 00:27:55 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:55 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:55 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x104) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="a3900ee1f3feed2179d49779b46566b4be0daf057a7d42f3e5eb53844d4895672c6dc4ccfdee03254faab24df10ea7f0cdac9ac32973890cbeecf15030aebe0dadfd21668e87fb88583a4bbe052d2ad869cfefee080a04e6badcc535456b16f7743451ea68dba2ca5619cd4d8d7879f9d63e0c29fb5c83492a", 0x79, 0x2ff2fe75}, {&(0x7f00000001c0)="546db63b23edc78158290c3a50e8cc03b5355d4d8a5230dda563dfc054ae4a6e0143a1d64030722c6c859b9eac1ae477e0c9ac", 0x33, 0x8}], 0x800000, &(0x7f0000000240)={[{@heap='heap'}], [{@smackfsdef={'smackfsdef', 0x3d, 'ppp0'}}]}) 00:27:55 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x6400) 00:27:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:55 executing program 2: syz_open_dev$binder(0x0, 0x0, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:27:56 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x6f02) 00:27:56 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:56 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfX\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) [ 635.262009][T31068] IPVS: ftp: loaded support on port[0] = 21 00:27:56 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:56 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:56 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x8000000) 00:27:56 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntf\\\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:56 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @dev, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x33b, 0x0) 00:27:56 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x3f000000) 00:27:56 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:56 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x64000000) 00:27:56 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:57 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfc\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:57 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x6f020000) 00:27:57 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:57 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0xfefdffff) 00:27:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:57 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfd\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:57 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = dup(r1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x31c6, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x27) fcntl$setstatus(r1, 0x4, 0x80000000002c00) 00:27:57 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:58 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0xfffffdfe) 00:27:58 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfi\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:58 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x800000000000000) 00:27:58 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:58 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x2, 0x221}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:58 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:58 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:58 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x3f00000000000000) 00:27:58 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfl\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:58 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x6400000000000000) 00:27:59 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x6f02000000000000) 00:27:59 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:59 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfo\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x3, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 00:27:59 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:27:59 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0xfefdffff00000000) 00:27:59 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000040)=0x80, 0x40000) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:27:59 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfp\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:27:59 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:27:59 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x100) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8840, 0x0) 00:27:59 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:28:00 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r5 = accept4$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001880)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000280)=0xad) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r7}, {r7}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000380)='erofs\x00', &(0x7f00000003c0)='./file0\x00', 0x10ff50dd, 0x6, &(0x7f0000001740)=[{&(0x7f0000000400)="b400bed0ec3606c74504f6461e43135da10ec5f1a06798965c565b8acba050fd10733753812d6926cfb48dbe11e3cad0aa546e08a2341218c932bab36a0c142705fd3d5e1aed7a89e23787285f4b4715f0aff5461f92d215d79ccfcb3b1dc8551f923c7876f614ce5f026b893899f1af57361ee6e643d04e11a2e3fe496f670b7724d5a0b880b1ce451e9766dfdf0522166ffa2d46d87be5f91c28021b8d44cacc0d03eb63707821a8e2237196c0ee5484ec40", 0xb3, 0x7}, {&(0x7f00000004c0)="308a85cc84928e44cc4c5a1dbcc6e4acae533d8c1bbc9c7079b6329d472897921df63f30fb7a6fc1bbb80e4963bce11778bb9e01b436d1282648738bcec0818c891b46c66aaee6788ad349bb7642ed6fde63321a185ebab01a92a5a4e740fe732365ea8eb1a4fdf0b8044ac027765f0af6e1dcfae59a51a7d4e9c2610f43ff205760f12c24d4cf3cf50c740ddf26d8cf11db1cd3b089845bcb67f192051494e5c29a500c1f96bd060ffc4803c2f9522462c853127b267962b35643dc069c9ec0d3709f54dd1e54a98762470a5c2a6c2d8604de57ee134476f863d5cf42fe22701c130c5a39cc742305c134cc9f161df01400e14077ac86", 0xf7, 0x4}, {&(0x7f00000005c0)="d7a2ee31bdb9e224de50d1e828436ff5d765d379f070d8dda613aa3a38d7aa952cf1322bc9f05f6606bf663e3f88f47e56e85626d9d5bdad9ea5e62d6a5d5ee5aa31b01a8b369ba26862f5e5736666a09740d584cda49344649c8aab4cf223816797d184c7163f2ab0d16254bc425ed975ba695bd06fc0860e552e51607f10053c967edb6c95612a7e77f57b71a82fda70dba9a61de3dae4e54e6a71604abed108d749e4fdce86658a432bb89df8594b198a2ce0de636ac0a483f7b063e1991e4fadaf2d69a40f8b99b0b53483ad03d6502b7ee45469248873c3b22a975a23255c27e1f010f37ef31182d5125150592535aa987b5f536f2a7c6969255406e277b3edbc501daa96963ec3515f475510c7fd422b27caaf693a5afc37b72cf8928198ba631de9587b50027bb463bbe9a6f0b4c457120bcf1376d600ecad17bb6ded9b7eea71b31d9f8abba2904a9de37f07c7cda247da798b1f8ea9664eed50881698c7cb5a515236228930e9e5c808b8082e15ea0f10e2d2db9a298894f2036af66b93b1a98ccbe93047ca0e3c9ac43cf21db4521cdc21cc3253a4c068063f69b167f9f7f06c8791c05c7021b42cd68dab41e73a7cff162c4115a5d5d15c843857be3df0166f8f0867b15c8742708b58f829458f8c284f3f61336e9a789692f103f6a88c7010783ef3c469cf27387680fbf56e02fdc4c17c034fdce9c7a45665ee0af745e9887eea2d308b65b2281700349b15b6106399d00ff9f219943b4df1ae87d0b3cb7ba8cebde3e25f7ec18823ffaf1ebe4174d76bc0c7fadf8933fde8c960d0d7636c459b8899dbc22179b7d28bdeaf7ecbb22ac92662a3f3d28c05dd56a9b6fe6000bc9d69705f928e925d455f7c6b41bbcb2930dc35336a21bc739ee5f96141b4007049d99a0168c81ce681c1dec2b98a7e497888d52ef7789af8a9e623cecedd5378c33595488933cf6de001f23c7ec49400ccf65de71c6da74f58f442126b02923e40dc1377f99113bb5eae122899c0852f1516bcdfade8c18090948fa721fb218979bdd929ea0b21c66d61de9f4fa954ea5d24412fda3072f64889d33e5300cb4b2607467b9486c0fea17e7936d8244df23f8eb0283bc993c13650e24b4320b473256ac0ae279d423f2442da06b408359f304281960cf6d9e5ae8026900fcf34f3ca7c429c0d30da8c221d73f94c36b7db6f17f1030117285c2e85789b009c7548c108e9b3023a279dccda99d5ddc90f69f7f765a716bf8724dfde1adf882a14467a3258e997260b636352a950734c8313e61fda87ae7f848ad41c3fc8336da71ed3342b6679955c19ff71b4c615a957de9851dffc967783578478c8bd97cf17ca22552646cce4766058860a2c227be5651ada069c0ceb957eb1c941c3d1258c6e605de1ca1c48acfe73ae48e2c4fe1deebccd619992f04b8b77d55bd58fbb31e6abb99562e40606ffa189700dbb5216f88c3cac1b4cf10bf95660bc694d47b35559f0eb386aab54ecba609671d76b6ff4d459d85b27bd3033421aea6677c4807493f5ab50bd456d5ae0a4ef298dd390b1f61a592b64b2863f7b2d15b9e3d5b5a1099fa257b6292e2890ca9a2fac63364658bafa03483e88184b54aa4ca15971de27dad9c426d848aa238efcd921fd017f06412d3773ca24f32cc32381b4df911e9b80fb9da928365615b3ccbe94e698704536d71e38069a3970a927b2261566f54708b1728b28d4c9b700e40a7963f947a7588991688958154551e74be022ec2e3eb5dc6e6429d2163f908bfa4d506f05f6368cd843b64156e4967c17c01776e1235115eacc615e2c8c6912d99a24bcfddc08a1b1d08b565ef3e49cdc104d9056d59fb4a6ad60ac69a76888562ad277c96c16d098202c2ce4804a08b76df9f4e8b1ad82c26648839e9520ba3910cbafde98d42485812f3bb5e3b3e24229591eb7b93d95edb224b028bef464eddd30c7f530b9c8de214aeb65797315dd4f61d75bb0196921a18b7dac5a265a5e54d7f9a220a870e6bbffbdf62a491f0ca956f0ccfc49dd3a674d574711a0bd6fb76cbb00368d84fcb4d18465dc8e4ecc5b0a2f59782eeada5960a36714097f057c367f5decacb0c831124db4a7d2e06c348da9737aff4220b773ecbb67efa25b986436d24e183c8aeee9b3a7337f59bf68f56e4339219d066e9fd041c7985c91c017f50e32024eac6250b8e2a55527a9a9b1eedf53024e6d9647ecaee5fe11bf58f5b2ab31db3cc09242de5e33e82c5a7cb640d8274de1ece1cd2a9f93c92cccb68ae7b0b5124615b3b2d3fb73f0f64af541b15a972d37098c872fdd3f54c19e944052abf36659e2debd1d06897a5db135918521e51bf132897536a5c50fe5ed49be55abb5897490dfd1bebfc7458cd123d54b8c97cbf92e2b28599e9a1973ade03a07e7e6557542ecee8dd2742659a0456d0ec4a0d9e53a26e3fa152f76bdfa309150881472323318e278efbbbe55205eee14a737c671d6a079bd7043a4ab0169360db0b4a736b5eadb67197f8b70573a2a82d15249b6e5b32540c95aff3eeda60065b37a1140d60c09d940eaef4b83a7260d3d17e474d9d437196fe3895fa00ca3f99638dc94b6f6ee5c3100cd4af2e24424f1600d4aa1e965591eeebfe37aaaebbc370eb42624a322230f360fe0ede42d6c0b02cbfd137611de5f6585ca906eb23f8d6239df0894e3e623c2db30d1eb2596274ba70d06428b26c46f12d18884ac5bf238b5b4125fb65ab6efcdc753e63da70659384cdbd8626f54e0827e9d9dd2b3e461bc517a5e67de3d527d5c9c06fff1c1247c4327669d174bc6d91437d00d623e7e69b706841148738944540c5b07ed01a17e94d4be968fd315151daaf858903550a8ad2cd65e70e8ba62b055575a0209fa92e29e03412379b93cfa28c3f62bb95fd6466ab7388a1c58a9cc99f8d55adee264eb9a36b070ed4a6af5c8b92683fae9c7aca6ec21ebc041c3f6932eb61673957afc4b2ae3a9c421a328e2561817720a9c98398a9d0c8c9e487f4b6f192ff659acba95c47363eba893a0a004d93c9f0e50775f642ff483b48c2f73425d919290b0a675508192cc21d39a89c79ed0c80287679f4921e95aad9b6c4d3ec585833f19a295df8956ed801c997ddeceee5d19a04dff8eac5ee344d7cc73df4e2c4b1299c5de028d451e91131cf0dc58aae4277e5e22e484a3a0c6248b49c8562e4859709c417cbab60d836e329dcab0b3a28b160e73a57d565718a2e7407f43e428014ad7d9542ffd0b022d0f918f5f42e95f6fd5ce8d9014979f12dd4095d1bbcb9244116c4eb24dba9315a4fd2b495d6f511597047dafa02cab9f8a54b6cecebbc05a9e4d1fa9922e65edc560c93b67cb1acc30e72792fc284f92fa630cd9ea69bcc0824c5fca67678cdc36254cd5cda9079982c79e9db44edbf31647c712175383822a4c967d9fd70d132c3c173bf3ca6f24679d63acb293996bc57ccdeb8f31d64d285105a240d81990151738fbfc9437663e45b703988cfd60097dab4ad9f12817b3c4116c0bc3680f673b251edc8e84f1a25ac2e9b007f9c2e50716737ff68c3484a1ad0b4912b297ac0ff6244967fe0d82fbf7d671a6da4ac119db72b70cdad7f2e7d615d137d9963f8512332746e452c43541336c4f895eca169080216766a2963b6ba5dcda71b34aae4df81039354a4b957d9626d7ffe722ff05184affede5e9559b0c82b641c84a82ac46041e646e8774ac8f914d9116431cbacc45615efc6b34294a0bb5654ababd5937924940022a3a84eae6bf1059762efaa6b3b00df234b9780f8afeb8d0bcd06e4a0c001b2f28166e823ee19b03a75af32dae88456c7092810d70d436c14d1b95e45d99cd6e86b3ef122ede2098dc843168f15540f2fb02b81aef401f9d010e57e7e9e842a07617f406f0c04f9783aa98b7b16c3f2b66f2db54b5d1da944caca5e73c827df3d4cdc39665f6ad1fe4ebd47ba78881a0a262844dc4f1c274c89fe7cacfd0ac28d7809335f9160ea50a1fd33e7e3ae0aa31c7c28651fe63a54fa76f3b6548e5c5c57bc00f45a2fefdfd12057c4169aad18bc75034a4a9453185edb0b8bbd616fc598fd3f1639a582909c9c6916f05683b47dba3a99a937aa1a7d27cfdb6a4d133cbf9c53de2abc8438a508f1503248e516f78edd2a479d5b556a177581504c5a5f7b168183b369e4324729e3d06cd5bb97d48c001b1a3cf606371965af9c955755397247d35c06630255af47f4e195950bbe57d567abbba56bd2859fe11f8efc3b999a06d69ca3435e5c8206e3b6c6a6ced0d9593ddfdd47cd49ae58b822090a6c8ca9e8ee74e3da0111998351812cfa645da6f036f7f87c3361de6d10fdfeebfe55a651ddac152cbf274e9c1bbf7e760ece9ed9ff8612576e1303db0cd032b8205f3b0728e4bc149ac651aef31f17d696672870922f83aab0df4364ee33f772ccc839ec1da7ef4074a605f68c496ad08e330a5a4283c3198ae1bfdeed853582d70890f10f923f244b737529d641d47676f379ea118545f12f1d7499f4f386edae7ed0f13a9a361f7b45bbac25803eaaffb92bdebce7dffe8c6d1b9a35c6a3be22d29d7524e42b9127c1e3edbbc57c6c0aa7de230339b0a20ee7e9186c98f1c848b3fcf64158a143084b8cf0daf1feb237c32a82b6b219af00554132c6f579c93825b90d37578017bd7c7c79314c78c00384ad70f631d108bbba7fef5cee681565934ec9ee18f1764476886d82650d1e9c29e75545ef95f53d9495cd2a9fd985e78e0efdd6047f9a82079e8ef1c0c2e9274e048664469e00df6524d5672aee552372909ed00d0171e96e26fded764e01a8e50d162b39df2bda7322a2e3971be858977659ebb36e23cb7825a7b28b8fe89f53210600f5dc841ec2772b8e649e20ce32f47e44317515c25f7538a09f909faa23721b3bdefd5e7e5651375986eff443ece84218527a608b28c6328a8c4a583bed1d372e5c9e360e4f91bf57f8d8b91b96fbbc5dbfcde95717d9495ab58e18bfd781173deeb406bd2fc11e41174c5e3d4e44ae3610a64bf63a49219f9cb1019dc425d417744d864ed6d21c15c6a3de0985dc70dcfc94d35e5b0264c0f28373c3cd78b66599ce6d58ca16797d016138b83620cde1f922f451cfab8973f1469856c0e74ccdb34c4cd4205056a0fadb2f75c136f2fb58109f1278e87666942542a2ca72d786c88934e3c7cb37fbdc624c675f46eab240569e43191f4e62620d2aa6e76175d00e1adc46cf532277f543a037ca6a49eacd1a675a70616a3a963b3497e6b3969dc7dc25e505c4537c98125d57e40f8fc31b2f71f4844ced80b4676e274e373ac5eb7c05524af7a3b7c00f2150ccde2cc96d80e9b9837968012c7f5fac95810d3193b0fd06cba1de3cd1a32c8790c8cbb1740e2f4c68cbe69e7fc23c07592cf186161f32a911c47ee8335ad3e43b494ab84315655822b48de18232ae75d7b8efba9daea3cb47737f0dc2cacc27b0b3ba1f16ecc6a8d5bae16b7bc398fbd2c8d78ffb98335992f2627efdba8ece1fde2e945dcaf9b950a991a329caeeb413322d24dc50cc5982684564dea98ae5f18450e0883ecdbb7c254dacf8fb0e665ea49cca58359432e8d649ee3bf7f4b8b5d5477a5f989cd3d54e44f33ade6aee4c40ce8088cdf9cc8f45d89528eb6eb7388583a39f49c5840c03a1d9baa9cb4264fa3ab9a246f9e527373074ac9cbff5ad9822ee341f377d77e2ba3f37a89e7471c2ef1295f19fac20aef7dcaf4d3d92a103c54eb6b9735", 0x1000, 0x4}, {&(0x7f00000015c0), 0x0, 0xd0}, {&(0x7f0000001600)="5ada0156d7e740628ffab3553f076aa5b7f445f0b228b86c0f16267a7467913b4f9e20c86ba3b5e45719406af8876f5bb9480ce348bdb8a93b8d7f1a8c31d99e679e40bf8a7c9f0d740710ef826479e7da2b4920f2fff5842e3e3e592d1e419d08b6cbf6846f7d47490941f29c9bfbf176bf72937e8426d485ea7f9fabee58797c1e5a25f0e31a334871c8685fd5c9753de625a3b34c44ec59ff2a30ab69c7ccd242bff4fce6a442c153f4c16a117e062a4f5bc6cba7b9e292a001c4c2cd43d9d5f440f8e3c070", 0xc7, 0x9}, {&(0x7f0000001700)="09a130", 0x3, 0x2}], 0x800000, &(0x7f0000001800)={[{@acl='acl'}, {@noacl='noacl'}, {@acl='acl'}, {@user_xattr='user_xattr'}, {@noacl='noacl'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'wlan1\\vmnet0{^&{ppp1vmnet1-&^+'}}, {@permit_directio='permit_directio'}]}) write$P9_RLCREATE(r7, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x2}, 0x80}}, 0x18) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r6, 0x4}, 0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:00 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfu\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:00 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:00 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 639.397225][T32507] erofs: fill_super, device -> loop1 [ 639.427073][T32507] erofs: options -> acl,noacl,acl,user_xattr,noacl,smackfsfloor=wlan1\vmnet0{^&{ppp1vmnet1-&^+,permit_directio, 00:28:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f00000001c0)={0x8d, 0x0, [0x60000048c]}) 00:28:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:00 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 639.519826][T32507] erofs: cannot find valid erofs superblock [ 639.569724][T32507] erofs: unmounting for loop1 00:28:00 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:00 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfx\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:00 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$isdn_base(0x22, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000040)=[{r2, 0x4081}, {r3, 0x4000}, {r0, 0x8108}, {r4, 0x2}], 0x4, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0, 0x0) 00:28:00 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:00 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f00000000c0)=0x54) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) [ 640.074044][ T26] audit: type=1326 audit(1568420880.955:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=382 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 00:28:01 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:01 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000000)={0x81, 0x0, 0x2017, 0xff, 0x40, {0xd609, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:01 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x02', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:01 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) [ 640.704560][ T26] audit: type=1326 audit(1568420881.585:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=382 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 00:28:01 executing program 5: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930a09430200a843090226274d040016001500154002004c00007aa3c728f1c46b7b31afdc1338d54400009b84136ef75afb6cde448daa7227c43ab8620f00bf0cec6bab91d4", 0x55}], 0x1}, 0x0) 00:28:01 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:01 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:01 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x03', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:01 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:01 executing program 2: ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x100000001}) [ 640.978697][ T725] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 641.014831][ T725] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.5'. 00:28:01 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:02 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802103001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x10000, 0x400, 0x0, 0x48}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:28:02 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) fcntl$dupfd(r2, 0x0, r3) r4 = msgget(0x0, 0x424) msgctl$IPC_RMID(r4, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:02 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:28:02 executing program 2: ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:02 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:02 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x04', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:02 executing program 2: ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:02 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/231, 0xe7) 00:28:02 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:02 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:02 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x05', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:02 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xcf1) r3 = accept4$unix(r2, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) 00:28:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:03 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:03 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:03 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) r5 = geteuid() r6 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8, 0xf05f8a13657ea557) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000000140)={0xb65e, 0x400, 0x1f, @empty, 'ip6tnl0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000040)={0x1000, 0x1, r4, 0x0, r5, 0x0, 0x8, 0x7f}) 00:28:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:03 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x06', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:03 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1e) 00:28:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xd) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r1}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:03 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:03 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:03 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\a', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:03 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:03 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fgetxattr(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='trh1\x00'/21], &(0x7f0000000200)=""/163, 0xa3) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3fc000000000, 0x8000) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x80000001, 0x20, 0xa, 0x57, 0x3, 0x81, 0x1000, 0x401, 0x0, 0x2, 0x82f, 0x9, 0x401, 0x7fff, 0x0, 0x70], 0x6000, 0x214054}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:03 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1e412afff, 0x811, r1, 0x0) 00:28:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x100000001}) 00:28:04 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:04 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x8000) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) 00:28:04 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x98, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000"]}, 0x110) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:04 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\b', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:04 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r0}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) migrate_pages(r1, 0x9, &(0x7f0000000040)=0xf8, &(0x7f00000000c0)=0x9) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f00000002c0)={0x35}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r2}], 0x1, &(0x7f0000000340)={0x77359400}, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x30, 0x4, 0x0, {0x1, 0x1ff, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r4}) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6}, {r6}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)=0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000200)=r7) 00:28:04 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:04 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x98, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000"]}, 0x110) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) 00:28:04 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 00:28:04 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x401, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/104, &(0x7f0000000040)=0x68) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:04 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\t', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:05 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) 00:28:05 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x98, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000"]}, 0x110) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:05 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r2, 0x10000}, {r3, 0x1040}, {r4, 0x40}, {r0, 0xd42347f6b0a26db0}], 0x4, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38f37fdba040c4d5415a871b0f01"], 0x0, 0xe}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)) 00:28:05 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:05 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\n', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:05 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0xe4, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b000000000000000500"]}, 0x15c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)) 00:28:05 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:05 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0xe4, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b000000000000000500"]}, 0x15c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:06 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2300}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x1fa) 00:28:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)) 00:28:06 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x10', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:06 executing program 5: 00:28:06 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) prlimit64(r3, 0x4, 0x0, &(0x7f0000000040)) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:06 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:06 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) open(&(0x7f0000000740)='./bus\x00', 0x141042, 0x0) setxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) 00:28:06 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0xe4, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b000000000000000500"]}, 0x15c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:06 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfsH', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) [ 645.714563][ T26] audit: type=1326 audit(1568420886.595:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2139 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 00:28:06 executing program 5: 00:28:06 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:06 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0xfffffffffffffffd, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r7}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ifb0\x00', r7}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, r8}, 0xc) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r9 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r9}, {r9}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockopt$netlink(r9, 0x10e, 0x2, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=0x1000) 00:28:06 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x10a, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x182) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 646.014260][ T2161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:06 executing program 5: 00:28:07 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:07 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfsL', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:07 executing program 5: 00:28:07 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x10a, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x182) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 646.469331][ T26] audit: type=1326 audit(1568420887.355:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2139 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 00:28:07 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 00:28:07 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x5, 0x80, 0xcc, 0x0, 0x0, [], [], [], 0x8, 0xf419}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4}, {r4}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000380)={@null=' \x00', 0x9, 'yam0\x00'}) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5}, {r5}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000000)={0x2, 0x2, 0xfffffffffffffff9}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007540)=[{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000480)="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", 0xfc}, {&(0x7f00000000c0)="df02445dc813a0e0621bb528767570b00f965f0ecf48258ee6753d277ac22a5fbf832bca6dc784076c85baa9d29158", 0x2f}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000280)="35f30214acf3126930e4bff557031d9855a67773f0ae4de95f8b13dc7790dff352226d01ea4bb1049e349487bd3d39020ed7d10281ba451c7cd5dfb9357ff32045fa604efa8d6c50b65021eed0264ec47986d3c6a1c00eec5e2a40fda620b2", 0x5f}, {&(0x7f0000001580)="43a934b4dcf8ab8184129ef6f91ab6cab1ab48d773646ad172149dbfaf16de67f8c02db6b1eb4d1b6d0e3f04a91683a810521ee3d80e8306c112fb83520e9e04ffd76a649e440affc6a0229539e430fc27ec740198d53210bb9294cc4f05bafa20c0edc35088f710accf7581b78ad1c9df90cd5ae82d5ea07c02e58232210ef9f5d0bad519bd403d8c69c3ec654759186ffb9a8bb7102a2058", 0x99}], 0x5, 0x0, 0x0, 0x4000040}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000016c0)="45eceea170db5857cf3ee12fb490f3b4c656e8f4edb8c5258dad854ab18d5570f4c6c42ca98ac03fcc29532d367ca2195991cdf67b36c1f341cc95e8808f9b8480ac020b879f3ebd95f1757574c61b29333996499f340439dd6dffed2b2bb8169eebd7def7e5a8ce3064be1cad259333e5ae62659890d8bb443e49ac56b851f3169797915934b6", 0x87}, {&(0x7f0000001780)="fd55cb6b8f780bed558955e04921151fcb72baa0a4df86ad0fc2eeb0819d85e05492e58df4f479eeedd9f950ada832401e24fcb327fdd1d1e37e394f32f37ce634fb7ceea5", 0x45}, {&(0x7f0000001800)="37637115d645136b552cf64fab7efc9e71b31a2058d88c02e1a61b5dff3f2769d6216d1449888ded4316dc431c6ffc782a8b53d559b458546b9fb4fc8b8492509d3e046da825e06e3d6b34b758b3c1a1d976c544e7d568440affe7c72ef193f82eed81bfca078fe38006207388c3f1e1187edb3116194b2a7ea8240315239b5a0b856ce7d432c0a99e6988dd", 0x8c}, {&(0x7f00000018c0)="289199663789abb1505dad3a158a432a7b6267beeb38cb3b314f0aceb1c3c7c76d6b9f9e9b9faf8d46c004f1723526d3cfcc17847979b11aad408ac21b21df99fabd7cd71a59d0f4dbc18b80a6fece1f83532f74cb101be12f14086edd3876798b8de4d21407775ade88f597601ef970e66fa32d502d99eb3c14eaac673bc063e3cc3c0d87987e566689390504d3b13f0e99f40529bf5cd7636c45456067ff05c78c6c5a514445af796144aeb1762c2b8e0cf7da588f54d518422ef03cf49b3161c51ff58e3e7204703b97536215f830c3865ba8e652e1ca39ffdf18a4086b7efcbc1a53c919e376", 0xe8}, {&(0x7f00000019c0)="bd309da81c66a79e018171", 0xb}], 0x5, &(0x7f0000001a80)=[@assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}], 0x48}, {0x0, 0x0, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=[@assoc={0x18, 0x117, 0x4, 0x10000}], 0x18, 0x400a804}, {0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001b80)="e07b232f40938df7b5d3d6da53b6c3370ea39023b451de4554192f435cb1dc54363df4c9ecb638bd9dbaf7624b151d99407fa04cc12d01101e24dcf12575abcf4bb5a38adeade85434900777c8d7e40b8ddfe992df563bdf47adb86d221c56a9ad9e22d944d9aae3595f4fd188a587c6443c2bf552d23a54e1edf3a086bd07fa7786cd9d5ef8d5af48fd0e0c4646", 0x8e}, {&(0x7f0000001c40)="3a0913be1d9532c92868c537", 0xc}, {&(0x7f0000001c80)="52dd5a9d31e7fee01296a276a17c00bedfe3abe01b3d18e32fd5551d2a2f9d52a6d1b9a1594fd9a0992046f2fb735b36c9f2886df531cbb11caaadc800e909eb1e12ae0d0d09522f535e2f47e2c33801c65c633582d76a82187737dd2accbd85bae775947ff80e34bdfe71133e19ec79da0afacb5343a9b09210de5c473b8bf5f7b841f9ab9248de2d7daac9a9943b8705879aa10401417ce7181d5f21364de8d572ceaa1a73f0c9d78c907c8fc1145a5d9275a77c51e20f28045c1efb415196253a1f7355fb781b79416a35443c75279e895fad", 0xd4}, {&(0x7f0000001d80)="7803ddb27f4554b5a2a8745034642f0bb0cd6d7ad7739ac47e54560ec235bf16cf1f2e6cb23a9674a638494ef4bf25595595acf5a4d2becc4a2bb86794a235bab0202130977cca3b5d964250f1257ba517e9f762c1787c73e2012032fe500bc506cb272d3dcc5402af0be234b75d312667e37d70ccbe8e287bf08f4d45606f1f4a6017e58af0c91619ccff5b434d27dfd60015345230f3e5a0fc45648152b096b75024a50f15c08a8a96a74b2f0c80ce04c01c0c5abd0c7a3066999194f427250634fe9b281ad6f152e03b22aadd9486c086d6c029519f", 0xd7}, {&(0x7f0000001e80)="64d154308b3e0d216cef7852f050f4d680c1b53b094998e2ffdeb0d5be796039b65ed4c43340cd34a884c7e62191ac6492524c6492a87433fa40fe9462eef52249c0116266402ad5a95ea04c1e6a1034f8e0ed701e144b5f26a5358a1fa2018621db2e4afb05a0024e1917c129687ae94d91ab6e4c18140f6ff2b93c0391809ac238a2c360cf8605dc97e87f8076eb69cfbe91f726ba0d04da347484d9a00fea15f5f2d5f264ef904b42a7018a627a594a2c7f2c5f5032e1028e8606f188f5fd77df7680660a0fab55325e81cd458b71b6e7bed12c512fd89716a08270", 0xdd}, {&(0x7f0000001f80)="1f144161d832eaaf6ee50c44c6f8994314a79f9e4657786463467deb53d7b7ae4370a58147169f38bdb3eaf60e251c3952f8514d3fc0fc0b93802e913e692afed14b15f9e4badca8c05b26eb61b471187bb00a670d116e4ade722e5b22a99634ff34564da60e8f8d505a6135e24bc368f0f3da85532f17b66525ee62", 0x7c}, {&(0x7f0000002000)="a3aaa05c3f532e3c4fbb45a176dbb5c83ca6953029c2167ee26d835e533750060349fbeb9645c51cf1c2ee380df2a53af4ebf69cd1cf119df480b30b8244ffcb427792f3510ef5d93c718d6f0bf97fd9583909b5182e48f99b85f01566cdd58e33c0dfcfb4e7107053129a0a51424e1e374d6805f1257ef4060e17abdbf5b047aca4b437ca96321c5705d4e2f485200237b0d77273874015681f3ba39a6c41e8289159070fbe91b7904aee3647016ca3b70986becc601d16b46c10e4dedbaf22629ed44a01e3f6", 0xc7}, {&(0x7f0000002100)="a295ee1cc900d24a005895c7e87bf9b41b183365921a0aa910a4328c13466ce6068c044d748ad156a911ead46695664d79ab019734282739452466c3605084a5dd77deb2555048655fdb6688eb103c2e6b1b60f03cef7e9b7a5a646a8f4a2766356a80e4e3b4995595607e3ebaf81732c0839afce8c783b4fd590211f9e6475220002aec5433c32264031265595400e2a6188eadfb05fa336754b11dcf4b47b59cb13ecf47bfdbc56c4d1ccdfb20e046cb", 0xb1}, {&(0x7f00000021c0)="c2e9e070ef2c65c1ac83d09ef6962b52e119176a36ac5e84a437f78b7a59bb95940a172da3ac65d776d060abc73c2efde79a32551086675ff072ba1ed1f527cff6691b967f0724d76fc96ce7cb91b1236721d8495ca5775213cea736512506e5704520e78c6230c7b198e9dec060de2bfed52eb248aeea890578a9b263f2e0dc0522ce42fc2a5801739f531a376fba27b36d7b208a936326bf6ce404d36fb647dc5321937a59c0206594d19754577d1461546b2ea5e26776d8da299995908c297b17b3cdabe2068dce48487193f565e6bf50b8768f82ac3229af4c6d408360a3b4f8", 0xe2}], 0x9, &(0x7f0000002380)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x60, 0x117, 0x2, 0x45, "867a319ff7a4ecef5973127eeee117d923298deac44e0ed3708f41c00be84c02d36f379c69f099fd05ea7f9e47af18003d5a39bb6068116aea6fcc4d1f41b298e688070fb0"}], 0x1078, 0x1}, {0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003400)="7ab25ad7db90087fbf09afd4535db86bb788cfdfc4676e997f85380a6622ee3627c88f33e1cc126c1d979caf0ef844c68a8a0b6f2b0cd3a7775cc40deca8865c814c", 0x42}], 0x1, &(0x7f00000034c0)=[@op={0x18}, @iv={0xe8, 0x117, 0x2, 0xcf, "2a4495b756de3f0a9e71cbc9f696bbf75511ce4057397a4bdc7fd6058b9fe840a39eab76cf5eacc3a1e512e0f15d0a3fa8e2db8f919ac4b27042cd5856c7b619eeedd80fc1a5ee06f6b9132bd445f9a2dc2ce91a98a44115a506586d268871f00abfb3a39f41932b7c5ca7be9f6848ca040e849ea22bcea354a08dabe920a34413a6d0f92c66cfb26ab5f7d73dbcd0d14fcc0a0c4c5dc550d842ed9412f343bb38891d2bbd08a45c7d840ed37e80e5458242008d24ce80d564cf902c507b63026a74dbbc06a3efcaedc8c3e078a2be"}, @iv={0xd0, 0x117, 0x2, 0xb5, "00a6cfdd0bdde6f05d3a2255449b7bdb03c5c6173c8186d397f2826d244346a64a7cf0de7df43ec33b7555a95eead887f7e935436b276690de74074c2d6c02ac716c656b692b0219be1f04e76983f87f6048f8c4d4074f6f1ce995d32eb9d011bbb8a6f3c29a55576e985f2d4df9c7f1e89a5e3a6200aca4040abefa697ba7b9c1c6f91e26a60f6b4cae560d13e397f3e4f484f844a3596779d3524726ecfccc80a48e38b7bbffdd444366e76fcfd035c8c6c9ca3c"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6a, "9053e54a2ceac33d09c400b07d876a4fff76a2101cc873cfceda4d218dbeac27f1c302878707556d777a50bee99f62f952e3824effe5948db418fc9b346fb963c95e46b8d316077975cd80ed6324a1f48b4b93dc412000d39dea973d81624fbb4385f93f3004f8ee2d8a"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x2c8, 0x40000}, {0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000037c0)="73a7259a8d495aaae5d7ba34404b2ad2d7c5829ff6296b0a58ba1f47ef7bda90e7736c07b898a4cc737f5b9cc728d1ff9641ccb432a64bd6d355493d6d752c7f5c237daf8e7bf0ca94c03c7018a43928c518db344344110468f465343c2efe4420222f6d04733a87ca8aa84350033bfc59a011be35a1712718b1acc559618d7cad095a82d0ce48d656ee1460412f9fbb4a034752d0f3958447bd3c00e2d12bd9e20f1c6ed705f85a5abf2945af5e5b9e4b2a810cc1f607762b0047a02ab2d6f9c21707fca80a42a60df9b37b7b65b547f86910", 0xd3}, {&(0x7f00000038c0)="408bb29668530531dc5752b7bb150057685d2c1568be9a4ac45d5022f86abb0248943d86868663fe85ce52fc1a579c43a6ecab0e081040f4b1dbc13c6b05133007d1a49bd861041d5707b9c823bcc14c6d068534bee50e07b85b16ba0a5f8a26bde81219c9d88da6a6c53d597c4109dc0436af5a4c3273b1e054e6ed01f1b6daa85dcc4031a9d6830e652bdfd6fa392aae95fce755ad2d00030593903e1802d8a1f358db4660e944c6d551b00faa1d63ef6aee0999462393c38e29510d6541ca37c37d0fb0da5a5f5646cbb54ff5a8dd06781b3aa23184db15ce324989f0c01e2ce5572740ced4e815179e296fc573a8", 0xf0}], 0x2, &(0x7f0000003a00)=[@op={0x18}, @op={0x18}, @iv={0x48, 0x117, 0x2, 0x30, "b9fe7b1e64bd6fba5bd1de98e0953dc86fe51c5267389c6aa668d4ce2685860d1993379e44852968293a573f0d0d8eb9"}], 0x78, 0x4000004}, {0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003a80)="08f6d48265f4bdd79f75cd94d12fea54ac770b97ccd539b686e16340f952191000050eda5545aef88bc2d9e1006e0c59fadc8594d45068a54584f41d9e6302939ef3848454fc0b888f3a11848e35877571f50155e62aad7ecd23a43506", 0x5d}, {&(0x7f0000003b00)="44290790ea79ff98f7b1a7a41573b3770e89bb435d171d644250683ac2bf384707bb50131fb1a6009be03295cb84ba", 0x2f}], 0x2, 0x0, 0x0, 0x8800}, {0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003b80)="f161b68e63fba5f670ff6a90d20fe46fb7b0e7a567e4cf7e87f326216ff7719ba6e06f61dcd63bc832f6bfba6ecbec0401c27135b005", 0x36}, {&(0x7f0000003bc0)="1b98c36769a152f539c13e3e95c50027fe14d6e3e2ac65beb9aa057c30df553a9fe038bf65b22e1450a0630e39a449f283a9d86eab1c7ace0491b090b6584667983e59de5363e984904fb6dd49c16d0fbad8aa4aca6c2a783d19b48d0a6d1e86f493bcf96153e7d16abf41882ae0c8ad6c13d493a560469067109bc042e229290de8798f4d090fae4e69401a91ab", 0x8e}, {&(0x7f0000003c80)="013e4ce162a7a5845f221d6e90b7", 0xe}, {&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000004cc0)="2135101c08655c222e62d321fb4d3c1cb3a4f432e2172927ef4fc8af71fb6cbb985a8e61cfd3d1268137d75cd3d1a3b4b0909e4f5aff6e54c547273eba1b961c0fd15f9119c8175f25692f2022e8ea9bbf7a2a348c62c80a79de92227900febd2dec6a00000d6612107fe39cb0f449a69dc3e5720e12a4647fc91845bb394e369915968fe0ac7db73f5012d6c265c37fe5b9b58b7176825d67b51a384e9760895fa4aa2b5e7e426c4dd1fe60dd3e69d3eaa6f442c404bc64b63f0b40c3b09a548b", 0xc1}], 0x5, &(0x7f0000004e40)=[@iv={0xe8, 0x117, 0x2, 0xce, "07749959ebf513f418af55f30069e7f2a4920d481121fdc616d8a02e7b74308ef814196461c4258fce39cd360789e4df7689b358bbfd3e5856e38fde49565a50622392dd8d69ab0d4df2b10bacc1dae381e8e97f65c186d4aa50f97b77b73dc6250450b00d39f34ae5795e8ae714de9ff8b3a7b2247dbe514e292ab327571d9a0b85847de0d6c4c59fcf0e54f7bda5df8fce8d79c20197ab65156df8ed0fe0e364cbd5683183a61a57dadadd388e1f38e27d8e5b3e4498e804d0383757a6988a85f41df7fd073d9846a4fe7e7d0a"}, @op={0x18, 0x117, 0x3, 0x1}], 0x100, 0x80}, {0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000004f40)="18ec849d720a4976964ad21d4d24058c00b8fd903f46f2bccdeec7a7af028534db0b283d604c96d06b9949d9e645456e6fef5b45c94f58228e394863a97fc9565b6be7a7f63a21c00c67d9a7e590", 0x4e}, {&(0x7f0000004fc0)="16db78df0e80a8b69cc16d5184d7e3b98f709cba42db637ed94cc2e64ee092e87613fa9ae24334709c9d548c3f6dad89b1968e44828859cec0a7b2d639f133de175c86e7ea7ec9b8980bb88466246220224e499dc53dc6084b5cf6928683803ffed53f426b2aceea8386e7d4e02b5c5d1ac80df2a1af74103eb35f090aa0da043907d2b39485d92cef61b2b1683bad0b6046ba1954eb2e10e84c99956f88915714ec50cc1c5bb1189e5aa81803909746222242b1b3b3a218c6f84f", 0xbb}, {&(0x7f0000005080)="a2b0e0f7fd7c042cc2769507ff09b725069a67ca0e1022e2a3b016", 0x1b}, {&(0x7f00000050c0)="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", 0x1000}], 0x4, &(0x7f0000006100)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x100000000}, @iv={0xc0, 0x117, 0x2, 0xac, "0a0643c3a79d3d476b78e2fe24816e7714d4ef60d16ce62eb75abc04f15264c098f199540a6667934715f50fa62d624095982f4f700986b4f0cd345b264f7fca6f1c06e06fe7c9ce3e90ccb5c83e9952e8224b1a2ea72db4f1e0ea1217a699d4a16498ff26f22142a460ac5dc6be3972449a96c16c2bdd7a669043095e440d9a98177e0b5cd4be8431779aa04b182e1222bea170bc026c47ca997d9a990c634a1eed093c5926ecb3cf9af792"}], 0xf0, 0x8000}, {0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000006200)="405cba97009d125967ed183f8279111887880022c45015bfb34955f00a6cc19a1ece4f09c005c118d966299cc290", 0x2e}, {&(0x7f0000006240)="695178a536eb4cab67c77f17be9d083c1458529ff7b8178d266e0ed0c6fee07e64cecb2026727e90609d9b4600b8838a1d2286f2f3ce82f806a00e712e74cc5996b450d9cec523b7914931b92961679c20b2cabdbd3237048ead10b0d5444016e65290a76d1048fa0ae1040ff54d35f1027e1dd7364034f9de1a4f54560e2f1aa20918704ca07c6af30b5f91f6010f80dac8a90a1659d633663ae5638c34f16b21316833e84ec03c7b5eb48967d26efe619139b288941d9db099e2fab3436433444598e41763fd477e72595205a027c84b410b1c7e", 0xd5}, {&(0x7f0000006340)="64b33a67c8a2b9cce188b8e8650b8baa3aa0f28f14d92f8f3a9e83cea9f4b176a7e8c8aae685903efd8428bfe82369442df22a177fffc3f8fc79186a984382570995a59d4d540c73b3c79324f47a38579157cb", 0x53}], 0x3, &(0x7f0000006400)=[@op={0x18, 0x117, 0x3, 0x3}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xc8, 0x117, 0x2, 0xad, "14cd974615612528f744549148a24a78dfb2067e302930f8aedbbaadde8294c381c817e5ad5bfd180955073b9c1e5cb6a470aeab4e3c0bff043c62f8ce294a7816cf90c8f5269641532e993d23d16935cd7010b81a58222ea8f1b96e5a30700113afbc8ed9020c536b8330aa3a09b6269f1d528237a6d7da134b5f6a28865a2c6f429f3cdd2b12df157caec6865174656d63d502ea4d0f6780459c31af1d26cf3fdaab2e5c18c3d7c71374f1d4"}, @op={0x18, 0x117, 0x3, 0x2}, @op={0x18, 0x117, 0x3, 0x1}], 0x1140, 0x88004}], 0xa, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xc) sync_file_range(r3, 0x4, 0x2, 0x2) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6}, {r6}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) bind$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, {0x1, 0x8, 0x9, 0x4, 0x1, 0x4}, 0x4}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff0100014e2000010028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x2a3) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1}, 0x1c}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0xf1, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001100)="04", 0x1}], 0x1}}], 0x1, 0x4008000) close(r3) 00:28:07 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:07 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x10a, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x182) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 646.710451][ T2401] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:28:07 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfsh', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:07 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x62, @empty, 0x4e20, 0x4, 'fo\x00', 0x1, 0x1, 0x78}, {@multicast2, 0x4e23, 0x2, 0xb6c4, 0x1, 0x3}}, 0x44) 00:28:07 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x11d, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/285]}, 0x195) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:07 executing program 5: [ 646.827178][ T26] audit: type=1326 audit(1568420887.705:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 00:28:07 executing program 5: 00:28:07 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x2000000000000316, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:07 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 647.637895][ T26] audit: type=1326 audit(1568420888.525:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000 00:28:08 executing program 2: 00:28:08 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x11d, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/285]}, 0x195) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:08 executing program 5: 00:28:08 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_uring_setup(0x241, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, 0xd0}) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:08 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:08 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfsl', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:08 executing program 5: 00:28:08 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x11d, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a0000000415544495400"/285]}, 0x195) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:08 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:08 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:08 executing program 5: 00:28:08 executing program 2: 00:28:09 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfst', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:09 executing program 5: 00:28:09 executing program 2: 00:28:09 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:09 executing program 5: 00:28:09 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x127, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x19f) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:09 executing program 2: 00:28:09 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, {0x14000000000, 0x24, 0x4c7, 0xd3c, 0xff, 0x1}, 0xef51ce1, 0xcde}, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:09 executing program 5: 00:28:09 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfsz', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:09 executing program 2: 00:28:09 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x42) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$security_smack_transmute(r4, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x14000, 0x0) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6}, {r6}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) connect$can_bcm(r6, &(0x7f0000000200), 0x10) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000140)={0xa5c, 0x1fe, 0x6a5}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0xd000, 0x104000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000380)={0x3, 0x6, 0x0, 0x4, 0x4, [{0x4000000000, 0x3, 0x4, 0x0, 0x0, 0xd}, {0xf0da, 0x4, 0x6, 0x0, 0x0, 0x5200}, {0x7ff, 0x80000000, 0x5b, 0x0, 0x0, 0x1000}, {0x0, 0x7fff, 0x2, 0x0, 0x0, 0xc}]}) 00:28:09 executing program 5: 00:28:09 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x127, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x19f) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:09 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:09 executing program 2: 00:28:09 executing program 5: 00:28:09 executing program 2: 00:28:10 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x127, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x19f) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:10 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:10 executing program 5: 00:28:10 executing program 2: 00:28:10 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340), 0x0, 0x0) 00:28:10 executing program 5: 00:28:10 executing program 2: [ 649.502516][ T3212] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:28:10 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000000)=[0x3, 0x4], 0x2) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="852000"/12], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='/dev/kvm\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xb800) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:10 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:10 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x12c, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d0000000000"]}, 0x1a4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:10 executing program 5: 00:28:10 executing program 2: 00:28:10 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept(r2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) [ 649.882640][ T3212] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. [ 649.916096][ T3212] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. [ 650.116131][ T3212] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 650.179252][ T3212] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. [ 650.196809][ T3212] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 00:28:11 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:11 executing program 5: 00:28:11 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x1, "bb"}, &(0x7f0000000180)=0x9) 00:28:11 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x12c, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:11 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:11 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={r2, r3+10000000}, 0x0, 0x1fb) 00:28:11 executing program 5: 00:28:11 executing program 2: 00:28:11 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x12c, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:11 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:11 executing program 2: 00:28:11 executing program 5: 00:28:11 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:11 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x12e, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d00000000000000"]}, 0x1a6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:11 executing program 5: 00:28:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38f37fdba040c4"], 0x0, 0x7}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:11 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 650.967238][ T3408] __ntfs_warning: 3 callbacks suppressed [ 650.987435][ T3408] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 651.098416][ T3408] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. [ 651.130794][ T3408] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. [ 651.213349][ T3408] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 651.254256][ T3408] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. 00:28:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x8, {{0xff, 0x3, 0x0, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r2}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:12 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8840, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x8, 0x0) fanotify_init(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8000, 0x0, 0x4}, &(0x7f0000000200)=0x10) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000480)=""/212) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000340)=0x2) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={r3, 0x7, 0x4, 0x40, 0x1, 0x0, 0x80000001, 0x8001, {r5, @in={{0x2, 0x0, @broadcast}}, 0xfffffffffffffffe, 0x525, 0xbc, 0x0, 0x9}}, &(0x7f0000000440)=0xb0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 00:28:12 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x12e, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38f37fdba040c4"], 0x0, 0x7}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 651.301373][ T3408] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 00:28:12 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:12 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x1, {0xa, 0x2, 0x7}}, 0x14) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:12 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:12 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x12e, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 651.713012][ T3870] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:28:12 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r3 = accept4$x25(r2, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80800) ioctl$sock_netdev_private(r3, 0x89fc, &(0x7f0000000140)="56de40043933e98284606956da97fbe712052b624c0270aa19c3ff00689c04b88fef00436a3d47befcf21b8d0f908eaba5505e6ef8dfc593660bd0d850a1fdf247bbd04dacfa248b9cc52489e1cc66c53241e066c54f530c9bd643865e1340772f11cfae42f1d2a59a2e5a162299") socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0xc080}, {r4, 0x221}, {}], 0x3, &(0x7f0000000580)={0x77359400}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x50, 0x0, &(0x7f00000004c0)=[@register_looper, @release, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x9a4d2d987bbd6072, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/187, 0xbb, 0x2, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/140, 0x8c, 0x1, 0x1c}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}}], 0x12, 0x0, &(0x7f00000002c0)="f7000bf234e3c974eafb7fd4844fc9fb2c16"}) 00:28:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x2}) 00:28:12 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) [ 651.990587][ T3870] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. [ 652.072494][ T3870] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 00:28:13 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x12f, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a7) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:13 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB="03000000fcca7d10955a79d4c0b8345fa445e0e306ac5de48c57769d2acafcce6af3a8e8c87fdd19d16fd00ce18fc3f0ba08e4c9a3b871913d1cd96c22a0fdba6d2db06b96108ab5a0b9759f1b6d208c27b781c7ac076c4b5c2763aab6a852fb06d0d3c4d3b1e67aa9544910238ec0a640bceeb78758d62d39cd649d6b6a1fb843a38f3027a96981a3e2ec8ebad8d0dc52838a130882870eaca7648100f854c2cbd46dd1fbaf8aef10515ad09ca4ffbaea2bae9607cbb8d1a006ecd6778bd90e5b5686c7453dd33d740ac3a4fa0000000000000000000032bb52dda87f60553398857fe61e5a274870a4373c68ab840e29c3b55e084066dca5b8afd8a7af0ccd672792621ca580cf0abf116eec619def7eb89e3cdad3da49c3c67dd8d1eefb80bf3fadefffcddc87bb73ff95f43df0303dc17ac8f1d5a81ac58c87cf699dbed43f028928ae47713f0a"]) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x138230, 0xfffffffffffffdf6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000010, 0x802, 0x0) write(r2, &(0x7f0000000040)="fc00000048000701ac092500090007000aab0805000000000000e293210001c000000000000000000000000009000000fa2c1ec28656aaa79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463aa5f752e4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c095387e6e158a1ad0a4f41f0d48f6f0000080548deac270e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c22700"/252, 0xfc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x80, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r2, &(0x7f00000001c0), r3, &(0x7f0000000200), 0x4, 0x8) ppoll(&(0x7f0000000300)=[{r0, 0x20c0}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) 00:28:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1d, &(0x7f0000000040)={@empty}, 0x20) 00:28:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x19, &(0x7f0000000040)={@empty}, 0x20) 00:28:13 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 652.362000][ T3870] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:28:13 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='@ \x16\x00\x1c\x00\x00\x00\xfd\xff\xff\xff', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:13 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:13 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000440)=@in6={0xa, 0x4e21, 0x0, @empty, 0x3}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, &(0x7f0000000040)}, 0x8000) sendmsg(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)="b678b7fa325606000000bd8a0098e785a52188812b0d2075018500000000d90d7a187e641eb729c66d0692fb82c1381d1bd06748093802275f72953520db9d61e901521eeb082adb43149a099cc8ffd0e639f649b644efd0fd43830d492660eb48a1ea04f07e4a53959d414598ba5dabaefcc6f92305bcfc8346c0b2de8674034426112fcffc3d54e33e800dc7c16ad91a8f2745527ec3f5adca5c62d8d1f504f912c8341090f91bddda982df6", 0xad}], 0x1}, 0x4000001) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:28:13 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x12f, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d0000000000000000"]}, 0x1a7) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:13 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x95c6ba16f1efcda) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCFLSH(r2, 0x540b, 0x2) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) getgid() 00:28:13 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x1f91, &(0x7f0000ffc000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/190) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:13 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:13 executing program 5: socket$inet(0x2, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x95c6ba16f1efcda) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0xffffffff) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) getgid() 00:28:13 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:13 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x12f, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a7) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:14 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x400}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:14 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x3213) 00:28:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:14 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:14 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0xbd9, 0x0, 0x0, 0x0, 0x0) 00:28:14 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs ', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:14 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 653.644694][ T5135] REISERFS warning (device loop5): sh-2006 read_super_block: bread failed (dev loop5, block 2, size 4096) 00:28:14 executing program 2: socket$inet(0x2, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x95c6ba16f1efcda) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) getgid() [ 653.697568][ T5135] REISERFS warning (device loop5): sh-2006 read_super_block: bread failed (dev loop5, block 16, size 4096) 00:28:14 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) [ 653.755650][ T5135] REISERFS warning (device loop5): sh-2021 reiserfs_fill_super: can not find reiserfs on loop5 00:28:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:14 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:14 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:14 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xa0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80127}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r3, 0x5a1b7b9f271865c4, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) prctl$PR_SET_TSC(0x1a, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000209}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5}, {r5}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) recvfrom$rose(r5, &(0x7f0000000440)=""/166, 0xa6, 0x20, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @default}, 0x1c) 00:28:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) 00:28:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:15 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x0, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:15 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/d/radio\x97l\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) [ 654.317636][ T5520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:28:15 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x10', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:15 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:15 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000380)=""/4096, &(0x7f0000000040)=0x1000) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:15 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x0, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:15 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r2, r3) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x100, 0x110081) write$FUSE_STATFS(r1, &(0x7f0000000240)={0x60, 0x0, 0x1, {{0x7fffffff, 0x8, 0x0, 0x9, 0x7, 0x2, 0xffffffffffffc8b6, 0x9}}}, 0x60) ioctl$RTC_VL_CLR(r4, 0x7014) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5}, {r5}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) fcntl$setpipe(r7, 0x407, 0x9) ppoll(&(0x7f0000000180)=[{r6}, {r6}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000200)=""/50) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4000000000400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x20000000000001e8, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400, 0x0) setxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='cgroup\x00', 0x7, 0x1) 00:28:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:15 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) 00:28:15 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0xffffffbd) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000000)) [ 655.025909][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:28:16 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:16 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x0, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:16 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:16 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x6, {0x0, 0x4}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r2, &(0x7f0000000140)=""/210, 0xd2, 0x4040, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:16 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:16 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001f80)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002080)=0xe8) accept4$packet(r0, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000021c0)=0x14, 0x81800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000140)="1575db26c64938a2391dc826fa237a0a2d1cab2843bc89bab19694234108b23e41cbde4e7a5b57d86aa4e867539415dbfa57725814f529be6d0b42cf79825ae86094fe34aa945b683c09354e5ceeb2203400c20e23991f284c065b778fb83a7f081df09a43137729feb16353fae52a355d967fd7aec9f0e4f8fa847d3ded31c14ef09199cbdb165c27ad6e8e162caa24924fdab82ffce460b601da598e19a21a010c91e61fde81d6688f3b78602d389d8d25359fbbbb4fadb9cade5107f10c305218f2f20f82f1543c1a16b1bb7eb937fb3d8815904fb5f2b16c95ea9f2d4174c36465faba8b", 0xe6}, {&(0x7f0000000240)="8fc79dc9462d76ff4fbd99a0ff084da6d50235214708fa41d992fe68ac1184d7d9c623c632a7e908d8c0a7480e02038de51c76e73cb32ba53e589358c0c6b9f833a79521575b2ada9499858913a98d8fe5820414142a0069c34537319ed6cea6a0d834ec6ed9614bbdb2d0e8e2279bf8a911b31b1ecf53888c66aea61173fa0324f27b2a616b544c", 0x88}, {&(0x7f0000000380)="c24152fc053c467b90efa3f41de764f13ea8035a3c718dde679e895a076a93c80b7831e09a98f3a2a42bdd2a79df377872d2572cf6491a8950927caa71475caeae0c74f2539f03cbb7e61b811ef307dacc2ce3f7f4f41847e6f4a29937dc89346cb0a99358fd5a6649295d11c5cff997e413c1db4ed52226d33431780dfce87bf51ceda5e6d766ee66cba8dddfdc", 0x8e}, {&(0x7f0000000440)="c57ab7d06852bbd4e730c0498a338d2e712cd9adc57f615f31024eae4a74313a11d5de8f1c4ef5d6f3af4f9727ad842e12910a905827975af47bde84e174dde30f42b10449d7a0360d3ea4df04abab3210207388a3b846", 0x57}, {&(0x7f00000004c0)="eed627e47919208561b8c1cf0cd69529fd7034b5aa6a30cb259097483484dca0ad202ac981ea1a19bca1eea49a0fa5cb9d4b8f3f78e6676671657f410661c186eaef069e3d5d67e06de9d0e75090564b112b3bee", 0x54}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000000000000000000000100000033000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac141421e00000010000000014000000000000000000000002000000000100000000000011000000000000000000000001000000000000000000000064000000000000000000000007000000071b00ac14140c00000000ac1e01010000009900000ca800003cf586280000001f060fe01869fd8c36600481ef03874a0207b31e0454ef060cdd876b7b2d417b15ddeb000308440ce323ffffffff00002cd5000000000000140000000000000000000000010000000008000000000000"], 0xe8}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1, &(0x7f0000001700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}}, {{&(0x7f0000001740)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000001780)="eab2a6bfe5edbc0652f844d0d26c5abfa7ed6b7c7eb155c5a5fffbf15fe32a9ce72e7a43537edb45837fb7965eb4f0", 0x2f}, {&(0x7f00000017c0)="e55220752df8de199af9ce2bfd84ba92fdcbadfc7b6f03d1247d5b610107aed70ce48adfaf1cb91c32ab54a21b1ed01163c946c9af218c4f55746d1c600b4d1843de9a053ae862bc93b9566175783fce43baaf2a14151991079b4025c0c441e62837af28f41bba96d7ae3950f99631c575cfb47f03f1dbae6c6ffe64a69fb31be3344f4c58f4bd2a70bc3641e3045607bccf5172cb0213f48313fad305bf6e625573f38ce9c0171a59cfe69e393849a9d8738feebb4858d01754d9e6838dc44df242b1e8b915b877ede36bacf03b4333cc1c2e", 0xd3}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="d7ad91b7f052053f489a707916de95891ef07643feb4ca528cb163e3313e37917f8697e9930ddc2b9aec26eaf2f214bd24fbe0ef2918b2d1caf652bf994249c0dff7089d177e37d36f88a89ad1b4ba5e3609beccaa14cd1a9f6eedea7b85e47a750f55fcd177faf793ff498c59851a5786b43387527432688aa84055035b991a196e030260911d63aa83f7ac3663b45d0b5a7d92c6d2af4073f656eab5b6747a94b4c240da31e207e74e45ad225bd41768d357c574de711914eac9f1f1f7c966abf2168c3dc0382e927e31bb2230644fbcb05c1294ac22", 0xd7}], 0x4, &(0x7f0000001a40)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xdae4, 0xa0e75bf31c236d24, 0x2, [{[@dev={0xac, 0x14, 0x14, 0x1c}], 0xd77e}]}, @lsrr={0x83, 0xb, 0x0, [@loopback, @loopback]}, @ra={0x94, 0x6, 0x4}, @noop, @ra={0x94, 0x6, 0x101}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2, 0x0, 0x5, [{[@remote], 0x8}, {[@broadcast], 0x80}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x151e}, {[@remote], 0x2}, {[], 0x5}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x108}}, {{&(0x7f0000001b80)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001bc0)="b0b53aa56c62255a848800d538341df592e9456c88bdf28fe911a7fe66af078732b86c5b84409ede94ca53a572a3d1e81fcf36d0e010ec94ab4eb1fe", 0x3c}, {&(0x7f0000001c00)="b14885853363128d224fb31925b254ae8b82bd0d688ecc0b03f3ddbd9346d4b3370090e17020547ad459087c697750938ce477fe730452435096dbf8f6c897816d751c21c951f5a1daaf09d54a99fabd5ea912a81a27dd2c0259233d5b4c9d9fdb12960397e110df286c56d5a9c6728ab1", 0x71}, {&(0x7f0000001c80)="3bbf7b3146d42aa900cd7c9a4bf18b2129f2283be491b303c272729a183aab0924b64fd4da77131d5a15fc309a7257c0a2e18a8d096d9029d65b8d8153177ba7e662323eea0cfbfb34f5f1c70b005c7142cdffbf2b8c2a71fdce80239561ab9529cf8515f6247adbc06f7b7dded589f1e28406f4c6fe72b941d01b6a65be3b763906980db87d02b73d20f7874b5e2f2533a1580be428aa983d57ec", 0x9b}, {&(0x7f0000001d40)="fdb80c86d844f5adf7f46f280dedc9a5f1c00fc81fe96fae77d569c9a98910425a0d7437f203bb48505e671f2ec40d20983a3e4e35344a37", 0x38}, {&(0x7f0000001d80)="19236b99d64874e63d3066bbef9ad2c63b91c323099c283558e7165a94d754f97d7d02ee98c2f2162c8d32387ce1b26ba57aa8c75f4318bcb9994259bfc70065d4cf81b808143d62aeeaa3f46d82574054605e777e71ce8f48fcd9a7a5075da7056efbcbca057a621fb483f0522d958446b38746501902d86fd093d8a551811fff298f7a45a5c2d530bf4dc14695872b20f9d763f39426a2cbdde0f9fe738fc78a3117270e", 0xa5}, {&(0x7f0000001e40)="6a4e2beb7f5bb7682d9a15f697619ef4ad9e185751cec66acd9a785d26b7691716a14a492e3b86264c", 0x29}, {&(0x7f0000001e80)="7e73a225", 0x4}, {&(0x7f0000001ec0)="c97dadcd2da446027fb2ea5d48cdbbafd38055763c19d031bbc9afb692b5d5d198859bf5d00bf116e4dc57681a4f3acadf99", 0x32}], 0x8, &(0x7f0000002200)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x40, [@rand_addr=0x7, @multicast2, @rand_addr=0x1ac2, @broadcast, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @end, @rr={0x7, 0xb, 0x5c5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0xe8}}, {{&(0x7f0000002300)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002340)="a93113f6afed2c723e480027ec8925534d03bc5c95a578ba97f93717d6ccd674a03954a770c68ab0139d72ab84a25743596e3ca82124d808a4cce14fc281ad453a9746578436eff73fe8bd2ac28e4f9a3dd916c8933d7514018a0a735b1ef38a31263b7433520db1d76802b03ebfffae6379e89107b3c237a126cd", 0x7b}, {&(0x7f00000023c0)="99810dbb34455741f85c8cee6a066d62aadc9f606b5880462725799c0552434720be565dd7ec68ef133f49111ac0be0ab5edcf090982fd35c8a3b35be4dd83d0930a1fdbdf274693e2d154e4c9e8a5385ad1f9947cd69f98c4930ba90f5a96fad62e03b4251f1d527d9443c97c9fa05f1162cc8aac5afc329083dd8c02d9cb465c5e6ac4d313c087968ff931811138e8aac5112e77c77df63e467417b7d1bac52e76d46c02e5eb0feb1d7c6c29f66598126bfccb5a4d7fd4b91fd6b668508b7ea0cad320f86ebf49329883ce372f7aad0109fd", 0xd3}, {&(0x7f00000024c0)="6c7acd519534955b431adf1e61a8a6b040f1632c7e19a1abbda44d2f1058736b9e38d08154fdd7aee2073dad7b911d2e948665ac94eaf48886be53eff749d50576130aa7131ea33fd706e845d26f6c5c6e65227e8d94eb3f1d22e109a1df3c61c11d0e6fbc210ae4137479bfad5423f39f4316dfa86a5c48c88c08e575baaa10dd49125c04674f704a3278531d2350b4dc2cd7224928b80c43702f8decccb17b5c1428a772d321cc65f45d532fbdc4be1903bdb60fd3f977d7fe113fc01509775dcee9652c55a481ef282fd29c6d26482ccde92b9c366b59e821c87dc824089c", 0xe0}, {&(0x7f00000025c0)="52ec3169959a440c5cc3f669155e90e4b5d8b3a808", 0x15}], 0x4}}, {{&(0x7f0000002640)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002980)=[{&(0x7f0000002680)="871329aa3a109974ce99ec0c99965b81e4686d2c221e043c56b9abfa25b53078789419ee686400e33128e8e41ec7a8", 0x2f}, {&(0x7f00000026c0)="4b961bb8393f526c8f09797639b60a34048e863ea1593c660a4a8fd04966ce27a1251ee838ff99e47924099807465e10ad122fdd5470b4cfcfe5", 0x3a}, {&(0x7f0000002700)="49a41322dd3995e52ba6627bb7067541471c620d16a1a9ff0151d5a69f4a6f6ebdd2f40f17b4887cd1fa045150bf4e7bfb53642e86ebc3b81a6b705471b88c93dfd71ae12d5c3840c2f3e1a77012f4b17c476b09301ba03c500b3f9f3e4af53d4ab949f929661843c6e0f160f4d5ab900253be50cb31ed4325efd701581b69d10af5aba6d8e76f506548ee13c242db8c744f6541f6816c8ca53ad0d8c2337cf2bb1731d83ad9b2d8166b0de061235168154613df42992403f04b42d728664fab95108b0015bac2b27fb8eb48bf9a861733", 0xd1}, {&(0x7f0000002800)="1fb71426", 0x4}, {&(0x7f0000002840)="0413d7b1a6b4640b3d01314b1e0ed309b7a07e252b8d81ad4603cec59979f0fc10f73dab44c4ebac3fbe6ba248f2a9855023e2ae6db451e1c09e6e56c37ab20b0e10a1fbfdc7067051055f76ae76155b7cb9beeeaf45c3ba3ae18720e4eb361d83dfe5aa8e981e356ed06527257a3779df1092c371a65451da8e81802bdf060ac14fdb6f3d", 0x85}, {&(0x7f0000002900)="507feac5b019991e9ca4a69965887c329d174db6cd20f2b714aa1d8db8d472834c3c97e3699f39177f732b3d3536fe52ffd596ac2e696905a523953b52647260a4020b8ae4e97424350417d8fde2e346", 0x50}], 0x6}}], 0x6, 0x4000008) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:16 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) 00:28:16 executing program 1: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4202}], 0x1, &(0x7f0000000340)={0x77359400}, 0x0, 0x0) 00:28:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) [ 655.697530][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:28:16 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:16 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:16 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) [ 656.090771][ T5819] __ntfs_warning: 29 callbacks suppressed [ 656.090792][ T5819] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:28:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) [ 656.212858][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:28:17 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:17 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) [ 656.295578][ T5819] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. [ 656.316078][ T5819] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 00:28:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) [ 656.529572][ T5819] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:28:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) [ 656.651503][ T5819] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. [ 656.696139][ T5819] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 00:28:17 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r2}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c0, r3, 0x216, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x180000000000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff00}]}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4048}, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000003c0)={0x38, 0x6, 0x0, {0x4, 0x0, 0xf, 0x0, 'broadcast-link\x00'}}, 0x38) 00:28:17 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) 00:28:17 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:17 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:17 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) [ 656.951561][ T6171] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:28:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:17 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:18 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:18 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:18 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) [ 657.249324][ T6171] ntfs: (device loop4): parse_options(): NLS character set i not found. Using previous one utf8. [ 657.284198][ T6171] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. [ 657.360033][ T6171] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 00:28:18 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:18 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x700003, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$VT_RELDISP(r3, 0x5605) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x4, @rand_addr="4a8f912258f8bda442e7e7d414d79dec"}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x7, @mcast2}], 0x58) 00:28:18 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) 00:28:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:18 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:18 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:18 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) 00:28:18 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0b") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:18 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done], 0xe7, 0x0, &(0x7f0000000140)="450852f5cf3175945397a5fc82a5dacfb6bd7143bba82bf51c44840ed94fef2c9a62d4fd04d76c49d5f5f3c4856e39490dd47f6be69241010ae92b3d7d8007d6d6214ac14219050cec4a67d8b95a4cc948f226fc713e5331538723617adfa2ae00c70b6c604216e7f54bd32e9320a8d3668d1e3ce143520415aa0a692588c10ae94af5a369041f23979e20b1136c8bc044d10241eb9da0e4adcbe19048546d11d99e528ce907916ae26f7d4d1a38f3414634c4c72481308a5dddfc54271762df76585df9c0464d5b23bd138d2a506ee5577e8aad4a7b3e9f07a570ba0443e2190c4572d9bf263d"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) ppoll(&(0x7f0000000180)=[{r4}, {r4}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5f0cca5bc9c91616}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r5 = getegid() mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x8, &(0x7f0000000900)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@hash='hash'}, {@hash='hash'}, {@obj_role={'obj_role', 0x3d, '!\x00'}}, {@audit='audit'}, {@pcr={'pcr', 0x3d, 0x24}}, {@fsname={'fsname', 0x3d, ')eth0%em0vboxnet0)+@systemeth0'}}, {@obj_user={'obj_user', 0x3d, 'em1vboxnet1securitymd5sum'}}, {@appraise='appraise'}]}}) fchown(r2, r3, r5) 00:28:18 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201010000000000000000fffffffffff50002000000000000faff00"], 0x20}}, 0x0) 00:28:18 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:18 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:18 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:19 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x71692e220614d1fb, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/78, 0x4e) 00:28:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x0) 00:28:19 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0b") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:19 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:19 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x0) 00:28:19 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:19 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:19 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0, 0x0) 00:28:19 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0b") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x0) 00:28:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 00:28:19 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:19 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:19 executing program 1: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300), 0x20000000000003a9, &(0x7f0000000340), 0x0, 0x358) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r1}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x29a) getdents64(r1, &(0x7f0000000000)=""/103, 0x67) 00:28:19 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:19 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47b") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 00:28:19 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:20 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x181}, "80265a27a609a649", "5a9f82b8d91cf102f9eacf686262e5a177b62936a8cfa68d0a6f63deff14e7cd", "35139ed1", "4254fa728b54309e"}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5}, {r5}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000180)=0x6, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4, r1}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:20 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\xc0', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 00:28:20 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:20 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:20 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47b") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 00:28:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:20 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x4, &(0x7f0000000380)=[{}, {}, {}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}, {r3}, {}], 0x3, &(0x7f00000001c0), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000008806000018020000a8030000000100001802000000000000f0050000f0050000f0050000f0050000f005000005000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/80], @ANYBLOB="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"/1672], 0x6e8) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x80280) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000200)=""/230) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x26ea, 0x1, 0x2000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000d00)) 00:28:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 00:28:20 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47b") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:20 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:20 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:20 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000002) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, &(0x7f00000001c0)) r7 = socket(0x10, 0x80002, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000080)={r9}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000240)={r9, 0xdff}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r9, @in6={{0xa, 0x4e20, 0x800, @empty, 0xfffffffffffffff8}}, 0xfffffffffffffff9, 0x4, 0x10001, 0x0, 0x54}, 0x98) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 00:28:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:20 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf0") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:20 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'vxcan1\x00', 0x3}) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000300)=[{r1}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[]}}, 0x0) 00:28:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:21 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:21 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf0") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:21 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:21 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = request_key(0x0, 0x0, &(0x7f00000000c0)='procproc\x00', r2) add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, r3) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000000)='vmnet1:ppp0\x00', &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 00:28:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[]}}, 0x0) 00:28:21 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf0") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:21 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) 00:28:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[]}}, 0x0) 00:28:21 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f00000001c0)=""/1) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl(r7, 0x5, &(0x7f0000000140)="bfee8b3bc37b5ada2982f077f34e3ae1df6cc44269c9ec057426cd2cfd8fa38dcd68e16a7b4500b81e6d2ca01cbb7e5398bb344f8bad9c80caa89c71f2b7a82fcd4e9bee62d9") ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000380)={0x15f4, 0x52b0, 0xa, 0x3, 0x6, [{0x0, 0x0, 0x400, 0x0, 0x0, 0x80}, {0x40, 0x3, 0x1}, {0xffff, 0x8, 0x1, 0x0, 0x0, 0x100}, {0x3, 0xffffffffffff1aa4, 0x7, 0x0, 0x0, 0x2080}, {0x0, 0x9, 0x9, 0x0, 0x0, 0x3c04}, {0x5, 0x6, 0xd123, 0x0, 0x0, 0x2104}]}) tkill(0xffffffffffffffff, 0x3b) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x1088}, {r11, 0x2000}, {r12, 0x4000}], 0x3, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={0x7fffffff}, 0x8) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}, {r3, 0x253}, {r3, 0x20}, {r4, 0x20}, {r5, 0x1408}, {r9, 0x108}, {r8, 0x9e18}], 0x7, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0xffffffffffffffe8) 00:28:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) 00:28:21 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:21 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xdd, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000240)=0x78) dup2(r0, r1) 00:28:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB]}}, 0x0) [ 661.091161][ T7343] kasan: CONFIG_KASAN_INLINE enabled [ 661.104601][ T7343] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 661.112809][ T7343] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 661.120965][ T7343] CPU: 1 PID: 7343 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 661.129963][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.140288][ T7343] RIP: 0010:xsk_poll+0x95/0x540 [ 661.145139][ T7343] Code: 80 3c 02 00 0f 85 70 04 00 00 4c 8b a3 88 04 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 96 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 bf 03 00 00 [ 661.164745][ T7343] RSP: 0018:ffff888068cff850 EFLAGS: 00010207 [ 661.170826][ T7343] RAX: dffffc0000000000 RBX: ffff8880a142e000 RCX: ffffc9000816e000 [ 661.178783][ T7343] RDX: 0000000000000012 RSI: ffffffff859b6684 RDI: 0000000000000096 [ 661.186733][ T7343] RBP: ffff888068cff880 R08: ffff8880a1574500 R09: ffffed1014285c49 [ 661.194817][ T7343] R10: ffffed1014285c48 R11: ffff8880a142e247 R12: 0000000000000000 [ 661.203915][ T7343] R13: 0000000000000304 R14: ffff8880a1957540 R15: ffff8880a660c5a0 [ 661.211886][ T7343] FS: 00007f7eef154700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 661.220885][ T7343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.227457][ T7343] CR2: 00007fe3657c8330 CR3: 0000000091a2f000 CR4: 00000000001406e0 [ 661.235412][ T7343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 661.243366][ T7343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 661.251315][ T7343] Call Trace: [ 661.254604][ T7343] ? xsk_setsockopt+0x680/0x680 [ 661.259490][ T7343] sock_poll+0x15e/0x480 [ 661.263716][ T7343] ? __sock_recv_wifi_status+0x1d0/0x1d0 [ 661.269328][ T7343] do_sys_poll+0x7c2/0xde0 [ 661.273726][ T7343] ? compat_core_sys_select+0x770/0x770 [ 661.279252][ T7343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.285471][ T7343] ? futex_wait_queue_me+0x3cc/0x590 [ 661.290733][ T7343] ? handle_futex_death.part.0+0x250/0x250 [ 661.296536][ T7343] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 661.302431][ T7343] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 661.308135][ T7343] ? futex_wait+0x482/0x5d0 [ 661.312624][ T7343] ? futex_wait_setup+0x390/0x390 [ 661.317645][ T7343] ? refcount_dec_and_test_checked+0x1b/0x20 [ 661.323617][ T7343] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 661.329841][ T7343] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 661.335541][ T7343] ? poll_initwait+0x180/0x180 [ 661.340305][ T7343] ? set_fd_set.part.0+0x70/0x70 [ 661.345223][ T7343] ? set_fd_set.part.0+0x70/0x70 [ 661.350225][ T7343] ? set_fd_set.part.0+0x70/0x70 [ 661.355142][ T7343] ? __might_fault+0x12b/0x1e0 [ 661.359887][ T7343] ? __set_current_blocked+0xd1/0x110 [ 661.365261][ T7343] ? find_held_lock+0x35/0x130 [ 661.370035][ T7343] ? __set_current_blocked+0xd1/0x110 [ 661.375410][ T7343] ? lock_downgrade+0x920/0x920 [ 661.380252][ T7343] ? _raw_spin_unlock_irq+0x28/0x90 [ 661.385440][ T7343] ? __set_current_blocked+0xd1/0x110 [ 661.390800][ T7343] ? _raw_spin_unlock_irq+0x28/0x90 [ 661.395982][ T7343] ? lockdep_hardirqs_on+0x418/0x5d0 [ 661.401259][ T7343] ? trace_hardirqs_on+0x67/0x240 [ 661.406266][ T7343] ? __kasan_check_read+0x11/0x20 [ 661.411279][ T7343] ? _raw_spin_unlock_irq+0x5e/0x90 [ 661.416457][ T7343] ? __set_current_blocked+0xd6/0x110 [ 661.421810][ T7343] ? set_user_sigmask+0x166/0x1e0 [ 661.426811][ T7343] ? sigprocmask+0x2b0/0x2b0 [ 661.431383][ T7343] __x64_sys_ppoll+0x259/0x310 [ 661.436127][ T7343] ? __ia32_sys_poll+0x470/0x470 [ 661.441048][ T7343] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 661.446485][ T7343] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.452531][ T7343] ? do_syscall_64+0x26/0x760 [ 661.457188][ T7343] ? lockdep_hardirqs_on+0x418/0x5d0 [ 661.462461][ T7343] ? trace_hardirqs_on+0x67/0x240 [ 661.467481][ T7343] do_syscall_64+0xfa/0x760 [ 661.471964][ T7343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.477833][ T7343] RIP: 0033:0x4598e9 [ 661.481707][ T7343] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.503283][ T7343] RSP: 002b:00007f7eef153c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 661.511674][ T7343] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004598e9 [ 661.519623][ T7343] RDX: 0000000020000240 RSI: 0000000000000003 RDI: 0000000020000200 [ 661.527576][ T7343] RBP: 000000000075bf20 R08: 0000000000000008 R09: 0000000000000000 [ 661.535523][ T7343] R10: 0000000020000280 R11: 0000000000000246 R12: 00007f7eef1546d4 [ 661.543475][ T7343] R13: 00000000004c679f R14: 00000000004db8f8 R15: 00000000ffffffff [ 661.551427][ T7343] Modules linked in: [ 661.565499][ T3892] kobject: 'loop5' (000000008102a401): kobject_uevent_env [ 661.579595][ T7343] ---[ end trace b67dbee1980d9cae ]--- 00:28:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) [ 661.582294][ T3892] kobject: 'loop5' (000000008102a401): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 661.585483][ T7343] RIP: 0010:xsk_poll+0x95/0x540 [ 661.600470][ T8916] kobject: 'loop0' (000000005904c5d2): kobject_uevent_env [ 661.607963][ T8916] kobject: 'loop0' (000000005904c5d2): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 661.619901][ T7343] Code: 80 3c 02 00 0f 85 70 04 00 00 4c 8b a3 88 04 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 96 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 bf 03 00 00 [ 661.653687][ T3892] kobject: 'loop3' (000000003ec88fda): kobject_uevent_env [ 661.663372][ T7334] kobject: 'loop4' (000000001e368fea): kobject_uevent_env [ 661.670931][ T7343] RSP: 0018:ffff888068cff850 EFLAGS: 00010207 [ 661.677074][ T7343] RAX: dffffc0000000000 RBX: ffff8880a142e000 RCX: ffffc9000816e000 [ 661.681688][ T7334] kobject: 'loop4' (000000001e368fea): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 661.686709][ T7343] RDX: 0000000000000012 RSI: ffffffff859b6684 RDI: 0000000000000096 00:28:22 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB]}}, 0x0) [ 661.717338][ T3892] kobject: 'loop3' (000000003ec88fda): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 661.747191][ T7343] RBP: ffff888068cff880 R08: ffff8880a1574500 R09: ffffed1014285c49 [ 661.765131][ T3892] kobject: 'loop2' (000000007b6b1711): kobject_uevent_env [ 661.776405][ T3892] kobject: 'loop2' (000000007b6b1711): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 661.787567][ T7343] R10: ffffed1014285c48 R11: ffff8880a142e247 R12: 0000000000000000 00:28:22 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31a00b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:28:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB]}}, 0x0) 00:28:22 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000000004,utf8,nls=i']) [ 661.811041][ T3892] kobject: 'loop3' (000000003ec88fda): kobject_uevent_env [ 661.818819][ T7343] R13: 0000000000000304 R14: ffff8880a1957540 R15: ffff8880a660c5a0 [ 661.835991][ T3892] kobject: 'loop3' (000000003ec88fda): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 661.855797][ T7460] kobject: 'loop0' (000000005904c5d2): kobject_uevent_env 00:28:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@empty}, 0x20) [ 661.872660][ T7343] FS: 00007f7eef154700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 661.880277][ T3892] kobject: 'loop2' (000000007b6b1711): kobject_uevent_env [ 661.883018][ T7460] kobject: 'loop0' (000000005904c5d2): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 661.899955][ T7343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.905011][ T3892] kobject: 'loop2' (000000007b6b1711): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 661.912017][ T7343] CR2: 000055555657e9b8 CR3: 0000000091a2f000 CR4: 00000000001406f0 [ 661.944365][ T7343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 661.959683][ T7343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 661.968457][ T7343] Kernel panic - not syncing: Fatal exception [ 661.976009][ T7343] Kernel Offset: disabled [ 661.980331][ T7343] Rebooting in 86400 seconds..