0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) accept4$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e, 0x0) 00:14:01 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) prctl$getreaper(0x25, &(0x7f0000000500)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}}}, &(0x7f0000000480)=0xe8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x3}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={r4, 0x5, 0x1}, &(0x7f0000000600)=0x8) r5 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r5, 0x40086602, &(0x7f00000000c0)=ANY=[]) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x2000400) lseek(r5, 0x0, 0x0) bind$packet(r2, &(0x7f00000004c0)={0x11, 0x17, r3, 0x1, 0xfff, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r7, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) recvmmsg(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/89, 0x59}], 0x2, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)) 00:14:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x2002) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") dup3(r0, r1, 0x0) 00:14:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") write$binfmt_misc(r1, &(0x7f0000001500)=ANY=[], 0x4cba) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/4096, 0x1003}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 00:14:01 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f00000033c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/197, 0xc5}], 0x1}}, {{&(0x7f0000004ac0)=@hci, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006cc0)=""/33, 0x21}], 0x1, &(0x7f0000006d80)=""/157, 0x9d}}], 0x2, 0x40010002, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0xe1) sendto$inet6(r0, &(0x7f0000000000)="84", 0x1, 0x0, 0x0, 0x0) 00:14:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") write$binfmt_misc(r1, &(0x7f0000001500)=ANY=[], 0x4cba) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/4096, 0x1003}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 00:14:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x2002) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") dup3(r0, r1, 0x0) 00:14:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") write$binfmt_misc(r1, &(0x7f0000001500)=ANY=[], 0x4cba) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/4096, 0x1003}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 00:14:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x2002) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") dup3(r0, r1, 0x0) 00:14:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x2002) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") dup3(r0, r1, 0x0) 00:14:02 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) accept4$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e, 0x0) 00:14:04 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 00:14:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000180)={{0x10b, 0x0, 0x1, 0x1e5}, "130679b50bbc618731392ba2"}, 0x2c) 00:14:04 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c8523") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f00000003c0)=[0x0]}}], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 00:14:04 executing program 4: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@commit={'commit', 0x3d, [0x2d]}, 0x2c}]}) 00:14:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000056ff8)='./file0\x00', 0x0) mknod(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x0) mount(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='hpfs\x00', 0x23, &(0x7f0000000280)) openat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x80040, 0x0) 00:14:04 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r2}) 00:14:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x3}, 0x13) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 00:14:04 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-3way)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/175, 0xaf}], 0x1, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) [ 78.070204] sg_write: data in/out 449/2 bytes for SCSI command 0xb-- guessing data in; [ 78.070204] program syz-executor3 not setting count and/or reply_len properly [ 78.099575] binder: 7206:7212 got transaction with invalid offset (0, min 0 max 0) or object. [ 78.113859] sg_write: data in/out 449/2 bytes for SCSI command 0xb-- guessing data in; [ 78.113859] program syz-executor3 not setting count and/or reply_len properly [ 78.117494] gfs2: commit mount option requires a positive numeric argument [ 78.136522] gfs2: can't parse mount arguments 00:14:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xfffffffffffffffe) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000077000/0x2000)=nil, 0x2000) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 00:14:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, &(0x7f0000000000)=0x2, 0x4) [ 78.161913] binder: 7206:7212 transaction failed 29201/-22, size 0-8 line 3030 00:14:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000440)) 00:14:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x3}, 0x13) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 78.207130] binder: 7206:7212 got transaction with unaligned buffers size, 9093 [ 78.219497] binder: 7206:7212 transaction failed 29201/-22, size 0-0 line 3012 [ 78.235667] binder: BINDER_SET_CONTEXT_MGR already set 00:14:04 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, r1, {0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1}, 0x0) [ 78.271385] gfs2: commit mount option requires a positive numeric argument [ 78.278498] gfs2: can't parse mount arguments [ 78.293303] binder: 7206:7227 ioctl 40046207 0 returned -16 00:14:04 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0ec0e9aa57930aea8e8a"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x3}, 0x13) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 00:14:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = timerfd_create(0x0, 0x0) r2 = dup2(r1, r1) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000240)={{0x0, r3+30000000}, {0x0, 0x989680}}, &(0x7f0000000280)) timerfd_gettime(r2, &(0x7f0000000100)) [ 78.339574] binder_alloc: 7206: binder_alloc_buf, no vma [ 78.345181] binder: 7206:7212 transaction failed 29189/-3, size 0-8 line 2967 [ 78.345242] binder_alloc: 7206: binder_alloc_buf, no vma [ 78.358148] binder: 7206:7247 transaction failed 29189/-3, size 0-0 line 2967 00:14:04 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300090468fe000081000000c9ffff3f03000000450001070000003719001a000400020007e91ee400538a274d69a26cdf12f24006", 0x39}], 0x1) 00:14:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8) 00:14:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=@nodiscard='nodiscard') 00:14:04 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000100)=""/3, 0xf2}) 00:14:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x3}, 0x13) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 00:14:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x39}}) close(r2) close(r1) 00:14:04 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000000)={0x1c, 0x28, 0x10000000000005, 0x0, 0x0, {0x1}, [@generic="7b6c6e6603"]}, 0x1c}, 0x1}, 0x0) 00:14:04 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f000035d000), &(0x7f00002f4f93)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_nanosleep(0x8, 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200000b, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 78.745750] XFS (loop5): Invalid superblock magic number [ 78.775356] XFS (loop5): Invalid superblock magic number 00:14:05 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x32, &(0x7f0000001b00), 0x0, &(0x7f0000000080)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x88}]}) 00:14:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write(r1, &(0x7f0000000300), 0x0) 00:14:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) 00:14:05 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0ec0e9aa57930aea8e8a"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:05 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xfffffffffffffffc, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x2, 0x8}}}}}}, &(0x7f0000775000)) 00:14:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=@nodiscard='nodiscard') 00:14:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write(r1, &(0x7f0000000300), 0x0) 00:14:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) 00:14:05 executing program 7: r0 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r1 = dup(r0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r1) ioctl$int_in(r3, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r3, 0xa, 0x12) openat$uinput(0xffffffffffffff9c, &(0x7f0000001080)='/dev/uinput\x00', 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) tkill(r2, 0x16) [ 79.178467] REISERFS warning (device loop0): super-6514 reiserfs_parse_options: unknown quota format specified. [ 79.201584] XFS (loop5): Invalid superblock magic number 00:14:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=@nodiscard='nodiscard') [ 79.277196] REISERFS warning (device loop0): super-6514 reiserfs_parse_options: unknown quota format specified. 00:14:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write(r1, &(0x7f0000000300), 0x0) 00:14:05 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0ec0e9aa57930aea8e8a"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f5ffff73d1070") request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725669643a4465", 0x0) [ 79.415623] XFS (loop5): Invalid superblock magic number 00:14:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$fiemap(r2, 0x40086602, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x8) 00:14:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x88}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000180)}, 0x18) 00:14:05 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f000035d000), &(0x7f00002f4f93)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_nanosleep(0x8, 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200000b, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 00:14:05 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) 00:14:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write(r1, &(0x7f0000000300), 0x0) 00:14:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=@nodiscard='nodiscard') 00:14:05 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0ec0e9aa57930aea8e8a"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000280)=ANY=[]], 0x10) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 00:14:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept(r0, &(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) sendto$inet6(r1, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) [ 79.658281] XFS (loop5): Invalid superblock magic number 00:14:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) 00:14:06 executing program 5: syz_emit_ethernet(0x12, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [{[], {0x8100, 0xffff}}], {@generic={0x8906}}}, &(0x7f0000000140)) 00:14:06 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x0, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) 00:14:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000280)=ANY=[]], 0x10) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 00:14:06 executing program 6: set_mempolicy(0x1, &(0x7f0000000140), 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket$nl_crypto(0x10, 0x3, 0x15) 00:14:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000013002d54036205001a000000e600001000e0c9000200000000000000000000000000000000000000000000000000"], 0x38}, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) 00:14:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) [ 80.522678] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:14:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f00000003c0)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade402525c03f838fb6e006002c962d916c000000000000003400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc2b5bbc156c2a1976a0f57350aeb077c8e7b6add33568313c06740b2847df11fc45e0ec4a26d4662cbc7336eb57808181c5a5d502dccd35a8a83fe6e00ad7ba5ae2e76eb8aabc3f4d990bc4a9caa55a817596a907c1f39a", 0x130) 00:14:06 executing program 6: set_mempolicy(0x1, &(0x7f0000000140), 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket$nl_crypto(0x10, 0x3, 0x15) 00:14:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) 00:14:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000280)=ANY=[]], 0x10) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 00:14:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x2}]}, 0x18}, 0x1}, 0x0) 00:14:06 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f000035d000), &(0x7f00002f4f93)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_nanosleep(0x8, 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200000b, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 00:14:07 executing program 6: set_mempolicy(0x1, &(0x7f0000000140), 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket$nl_crypto(0x10, 0x3, 0x15) 00:14:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0x40045565, &(0x7f0000000380)) 00:14:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) 00:14:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000280)=ANY=[]], 0x10) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 00:14:07 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) lseek(r2, 0x0, 0x4) close(r0) 00:14:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2400000020002553075f01650272fc02800000200010fdffda678b6883430112b34387d1", 0x24) 00:14:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffffc, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)) 00:14:07 executing program 6: set_mempolicy(0x1, &(0x7f0000000140), 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket$nl_crypto(0x10, 0x3, 0x15) 00:14:07 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x800, 0x4) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x3, r1}, 0x10) 00:14:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0xffffffffffffffff, 0x0) 00:14:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) [ 81.373301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 00:14:07 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000180)={"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"}) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r0, 0x0, 0x0, 0x8) fallocate(r0, 0x3, 0x5e00, 0x2cbd) sync_file_range(r0, 0x2002, 0x0, 0x2) 00:14:07 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ifb0\x00', {0x2}}) dup2(r0, r1) 00:14:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='rdma.max\x00', 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="e7c58b873468b170a0cb5fd4ec5682e31f3c091ab8d8f10eb5899db40405d282126b15e049ba5327e8bbb95ccbc17c79a23a32e4b7a7b0483be49e263cff886f1209141998f6418bcb4c64778df48bb5a22f07ec10eae74248c6ad3a718b056ae494a88503628260b71f82cfc5682eaca4c192e98026df0669972ff7fdb2703fb444858e338618a39e4e1d877c586194bf62fd2a1581e851f713677227951ec2411279559024320685582094", 0xac}], 0x1) 00:14:07 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f000035d000), &(0x7f00002f4f93)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_nanosleep(0x8, 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200000b, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 00:14:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x379, &(0x7f00000015c0), 0x0, &(0x7f0000000040)=@grpid='grpid') 00:14:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 00:14:08 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) 00:14:08 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ifb0\x00', {0x2}}) dup2(r0, r1) 00:14:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/mcfilter6\x00') lseek(r0, 0x0, 0x4) [ 81.686403] XFS (loop2): Invalid superblock magic number [ 81.818602] XFS (loop2): Invalid superblock magic number 00:14:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 00:14:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r1 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mq_notify(r1, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) dup3(r0, r1, 0x0) 00:14:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxz\n'], 0x4) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 00:14:08 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket(0x1e, 0x200000000000001, 0x0) dup3(r1, r2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)) 00:14:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$rds(r0, &(0x7f0000006fc8)={&(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000003fb8)}, 0x0) 00:14:08 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ifb0\x00', {0x2}}) dup2(r0, r1) 00:14:08 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfd87) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000580)={0x0, 0x4, 0x1}) 00:14:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmmsg$alg(r1, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="3280", 0x2}, {&(0x7f0000000540)="817226d0c77d89f7d8f9c7b615021292d52063f35f45d9cf378eed90b0cd4eed89970baf1c5bb5e541aad3ec1d3050027e77bac6a5a79168f1d9f1baee839baa860e9bed2265089f700fe6ca5ee090b8511f8866be31a4429ce0682de548d61d8d36296bb3ee0d886294efba18aa85c960623bdfbbb0e6700329c4b713ec2be380b6e55a593e2a9749cd6448010a461108b4c16f306f42a9abb0b936c9d0d7691d805b7ccc9c6105f259fe389dc88af2ddc5397a4f", 0xb5}], 0x2, &(0x7f00000006c0)}, {0x0, 0x0, &(0x7f0000001bc0), 0x0, 0x0, 0x0, 0x400c0}], 0x2, 0x0) [ 81.943981] device veth0_to_bridge entered promiscuous mode 00:14:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r0, 0x0) 00:14:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$rds(r0, &(0x7f0000006fc8)={&(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000003fb8)}, 0x0) [ 82.041393] device veth0_to_bridge left promiscuous mode 00:14:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x8000008004500b, &(0x7f0000000000)) 00:14:08 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x1000000000000002, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006740)=[{&(0x7f0000006580)=@file={0x0, '/\x00'}, 0x6e, &(0x7f00000066c0), 0x0, &(0x7f0000006700)}], 0x1, 0x0) writev(r1, &(0x7f0000006700), 0x1000000000000027) 00:14:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="6e65742f736e6d703600cb7f0f02d90fb27319998f72e57d4d0fb87e4bb6c7f54754d30ef05d9915b45728c7717b8baf7a") sendfile(r0, r0, &(0x7f00000000c0)=0x10000000, 0x2) 00:14:08 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ifb0\x00', {0x2}}) dup2(r0, r1) 00:14:08 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000000)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0xa3020, 0x0) lchown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 00:14:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$rds(r0, &(0x7f0000006fc8)={&(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000003fb8)}, 0x0) 00:14:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") utimensat(0xffffffffffffffff, &(0x7f0000000040)='/\x00', &(0x7f0000000080)={{0x0, 0x3ffffffe}}, 0x0) 00:14:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r1, 0x201, 0x0, 0x0, {0x1}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6}}}]}}]}, 0x60}, 0x1}, 0x0) 00:14:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r2, 0x0, &(0x7f00000002c0)) io_submit(r2, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x121}]) 00:14:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003d00)=""/121, 0x7c}], 0x1, &(0x7f0000003dc0)=""/16, 0x10}}, {{&(0x7f0000003e00)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e80)=""/190, 0xfffffd99}], 0x1}}], 0x2, 0x0, &(0x7f00000040c0)={0x0, 0x989680}) 00:14:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$rds(r0, &(0x7f0000006fc8)={&(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000003fb8)}, 0x0) 00:14:08 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCFLSH(r2, 0x541b, 0x708000) [ 82.474560] netlink: 'syz-executor4': attribute type 3 has an invalid length. 00:14:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 00:14:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000000280)}) 00:14:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clock_getres(0xfffffefffffffffa, &(0x7f0000000080)) 00:14:08 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 00:14:08 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="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", 0xfc) 00:14:09 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x4002, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000700), &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000400)) umount2(&(0x7f00000000c0)='./file0\x00', 0x1000000000000003) 00:14:09 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fffffff}], 0x1) semtimedop(r0, &(0x7f0000033816)=[{}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f00000000c0)=""/82) 00:14:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c9, &(0x7f00000000c0)) 00:14:09 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x15, &(0x7f0000000080)={0x0, 0x0, 0x9}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x1d8) [ 82.682810] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. [ 82.706179] binder: 7681:7682 BC_FREE_BUFFER u0000000020001000 matched unreturned buffer 00:14:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_gfeatures={0x3}}) 00:14:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d03]}) 00:14:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) [ 82.762294] binder: send failed reply for transaction 15 to 7681:7682 [ 82.773236] binder: undelivered TRANSACTION_COMPLETE [ 82.778440] binder: undelivered TRANSACTION_ERROR: 29189 00:14:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c9, &(0x7f00000000c0)) 00:14:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = getpgrp(0x0) prlimit64(r1, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 00:14:09 executing program 7: r0 = socket$inet(0x10, 0x3, 0x4) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000120007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:14:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) lseek(r0, 0x0, 0x7) 00:14:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d03]}) 00:14:09 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d03]}) 00:14:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c9, &(0x7f00000000c0)) 00:14:09 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 00:14:09 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x46, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c9, &(0x7f00000000c0)) [ 83.614325] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 83.614325] The task syz-executor3 (7757) triggered the difference, watch for misbehavior. 00:14:10 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 00:14:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="d84f844e4e909936730a0ee733279670", 0x10}]) 00:14:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d03]}) 00:14:10 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d03]}) 00:14:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc00c55ca, &(0x7f0000000380)) 00:14:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x46, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='setgroups\x00') read$eventfd(r0, &(0x7f0000000040), 0x8) sendfile(r0, r0, &(0x7f0000000000), 0x8000) 00:14:10 executing program 5: clock_adjtime(0x0, &(0x7f00000001c0)={0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}) 00:14:10 executing program 5: mlock(&(0x7f0000214000/0x5000)=nil, 0xfffffffffffffec9) 00:14:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc00c55ca, &(0x7f0000000380)) 00:14:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x46, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:10 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0x3ff, 0x10000000000009}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) [ 83.833006] RDS: rds_bind could not find a transport for 224.0.0.2, load rds_tcp or rds_rdma? 00:14:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000007b00)=[{{&(0x7f0000001e40)=@can={0x1d}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, &(0x7f0000002200)}}], 0x1, 0x40040) 00:14:10 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendto(r0, &(0x7f0000000500)='\\', 0x1, 0x0, &(0x7f00000000c0)=@generic={0xa, "ce52ad4548f98701e8b83e67eec675eb6449f442bcebff055db46786e6f45e02df804947ed942fddf5e334c1c05a832854edf4445d545ce8e51aa2389496131c0b9afbdd80c18512d377e01b68705784a7f4d886244bc9363ffedba8599ca553c3aa334f4b7caa1d2dfdf4813d6954b8ba620317cf2c77610015ceeee6a1"}, 0x80) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/142, 0x8e}}], 0x1, 0x0, &(0x7f0000002300)) 00:14:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x209f37dc6804629b, &(0x7f0000000000), &(0x7f0000e32000), &(0x7f0000000040), &(0x7f0000000000)) 00:14:10 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d03]}) 00:14:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d03]}) 00:14:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc00c55ca, &(0x7f0000000380)) 00:14:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r1, 0x10f, 0x7f, &(0x7f0000000000)="76e927ce", 0x4) 00:14:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x46, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000007b00)=[{{&(0x7f0000001e40)=@can={0x1d}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, &(0x7f0000002200)}}], 0x1, 0x40040) 00:14:10 executing program 5: r0 = semget$private(0x0, 0xa, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) [ 84.107574] Trying to set illegal importance in message 00:14:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc00c55ca, &(0x7f0000000380)) 00:14:10 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x11, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xffffff85}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 00:14:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 00:14:10 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x0, 0x7fffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'nr0\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x0, 0x0, &(0x7f00000000c0), 0x33e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:14:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 00:14:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000007b00)=[{{&(0x7f0000001e40)=@can={0x1d}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, &(0x7f0000002200)}}], 0x1, 0x40040) 00:14:10 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000040), 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 00:14:10 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f0000000080)}, 0x0) 00:14:10 executing program 7: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8001) fallocate(r0, 0x0, 0x0, 0x3fffffe) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="1b", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x4, 0x6}) 00:14:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(twofish)\x00'}, 0x58) 00:14:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r4, 0x0, 0x1}) 00:14:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000007b00)=[{{&(0x7f0000001e40)=@can={0x1d}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, &(0x7f0000002200)}}], 0x1, 0x40040) 00:14:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000073, 0x1]}) [ 84.487968] kvm: pic: level sensitive irq not supported [ 84.495369] kvm: pic: level sensitive irq not supported 00:14:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000006c0), &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 00:14:10 executing program 7: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8001) fallocate(r0, 0x0, 0x0, 0x3fffffe) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="1b", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x4, 0x6}) [ 84.532958] kvm: pic: level sensitive irq not supported [ 84.560230] kvm: pic: level sensitive irq not supported [ 84.595215] kvm: pic: level sensitive irq not supported [ 84.625305] kvm: pic: level sensitive irq not supported [ 84.641808] kvm: pic: level sensitive irq not supported [ 84.664008] kvm: pic: level sensitive irq not supported 00:14:11 executing program 5: r0 = semget$private(0x0, 0xa, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) 00:14:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x11) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 00:14:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000680)='./file0\x00', 0x0) r1 = inotify_init1(0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x80000002) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r3) 00:14:11 executing program 7: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8001) fallocate(r0, 0x0, 0x0, 0x3fffffe) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="1b", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x4, 0x6}) 00:14:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 00:14:11 executing program 0: r0 = inotify_init1(0x0) r1 = getpgid(0x0) fcntl$setown(r0, 0x8, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0xf5, &(0x7f0000002300), &(0x7f0000000180)=""/245}, 0x28) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000080)=[{&(0x7f0000001300)=""/4096, 0xa2d53b58}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x215, 0x0) 00:14:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x8, 0x4, 0x80000000004, 0x8000000007}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x3c9, &(0x7f00000000c0)}, 0xb) 00:14:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2ca75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d964e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb4316cceb5bae136654e58499da7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470a8") fcntl$setstatus(r0, 0x4, 0x4000) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x0) preadv(r0, &(0x7f00000001c0), 0xe9, 0x0) 00:14:11 executing program 7: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8001) fallocate(r0, 0x0, 0x0, 0x3fffffe) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="1b", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x4, 0x6}) 00:14:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x2000, &(0x7f0000000080)) 00:14:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x11) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 00:14:11 executing program 1: r0 = socket(0x2, 0x3, 0x3) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14}, r2}, 0xc) 00:14:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890b, &(0x7f00000002c0)={"6966623002000000006b2700", @ifru_names='vlan0\x00'}) 00:14:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x11) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 00:14:11 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$KVM_GET_REG_LIST(r0, 0x400452c8, &(0x7f0000000600)=ANY=[@ANYBLOB="00c3f875ac3c09c8e9e0b3959b017eda806e000002"]) 00:14:11 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) [ 84.695419] kvm: pic: level sensitive irq not supported [ 85.451707] syz-executor1 (7958) used greatest stack depth: 16104 bytes left 00:14:12 executing program 5: r0 = semget$private(0x0, 0xa, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) 00:14:12 executing program 6: r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x61b, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 00:14:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000200)) 00:14:12 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000013ff4)={@rand_addr, @rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x8, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 'team_slave_0\x00'}) dup3(r1, r2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 00:14:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x11) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 00:14:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)) write$sndseq(r1, &(0x7f0000000200)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30) 00:14:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000030000000000000000000000", 0x10}]) 00:14:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x7d, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x98) close(r2) close(r1) 00:14:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) 00:14:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) 00:14:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080), &(0x7f0000000140)=0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[]}) close(r1) 00:14:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:14:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x14, 0x6, 0x6, 0x800000001}, 0x14}, 0x1}, 0x0) 00:14:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, @in=@dev={0xac, 0x14, 0x14}, {@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {{@in=@loopback=0x7f000001, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x9effffff}, [@tmpl={0x44, 0x5, [{{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x32}, 0x0, @in6}]}]}, 0x16c}, 0x1}, 0x0) 00:14:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:14:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:14:13 executing program 5: r0 = semget$private(0x0, 0xa, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) 00:14:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x277, 0xc0000081]}) 00:14:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x10000001) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)) ioctl$TCFLSH(r0, 0x540b, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 00:14:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) unlink(&(0x7f0000000180)='./file0/file0\x00') write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 00:14:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) 00:14:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:14:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f660070") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) open$dir(&(0x7f0000000200)='./file0\x00', 0x185840, 0x0) tkill(r1, 0x15) open$dir(&(0x7f0000000540)='./file0\x00', 0x27e, 0x0) 00:14:13 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3)="441f08e30700000000000000fe36cef3e26def23000200000011000013", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 00:14:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) 00:14:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080), &(0x7f0000000140)=0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[]}) close(r1) 00:14:13 executing program 2: socketpair(0x1d, 0x0, 0x2, &(0x7f0000000100)) 00:14:13 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000008940)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"ff030f00d34892babf7b806e000200", 0x4012}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x9, [@empty, @link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) 00:14:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 00:14:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) 00:14:13 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000001c0)}, 0x10) [ 87.155915] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 87.163997] FAT-fs (loop7): Filesystem has been set read-only 00:14:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f760070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(r1, 0x1, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 00:14:14 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000280)) readahead(0xffffffffffffffff, 0x0, 0x0) 00:14:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffff84, 0x0, &(0x7f00004ee64e)}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000040)}, 0x7}}], 0x0, 0xfdfd, &(0x7f00000000c0)}) [ 87.726423] binder: 8084:8086 got transaction with unaligned buffers size, 7 [ 87.740875] binder: 8084:8086 transaction failed 29201/-22, size 0-0 line 3012 [ 87.766943] binder: send failed reply for transaction 17 to 8084:8086 [ 87.773771] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.779346] binder: undelivered TRANSACTION_ERROR: 29189 00:14:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x10000001) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)) ioctl$TCFLSH(r0, 0x540b, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 00:14:14 executing program 3: r0 = socket(0x2000000011, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000040)="957a88ca", 0x4, 0x0, &(0x7f0000000080)={0xa, 0x400020008100, 0x6}, 0x1c) 00:14:14 executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000002c0)="295ee13130d7b9b1671070") socket$inet_smc(0x2b, 0x1, 0x0) 00:14:14 executing program 5: r0 = mq_open(&(0x7f000004b000)='em0lo\x00', 0xc2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x4}) ftruncate(r0, 0x80040000) 00:14:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read(r0, &(0x7f00000002c0)=""/184, 0xffffff4d) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0) read(r0, &(0x7f0000000080)=""/117, 0x75) 00:14:14 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000e5000)=0x100000002) dup3(r1, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f0000004140)=[{{&(0x7f0000000480)=@hci, 0x80, &(0x7f0000000600)}}, {{&(0x7f0000003d80)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000004040)=""/220, 0xdc}}], 0x2, 0x0, &(0x7f0000004200)={0x0, 0x989680}) 00:14:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffff84, 0x0, &(0x7f00004ee64e)}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000040)}, 0x7}}], 0x0, 0xfdfd, &(0x7f00000000c0)}) 00:14:14 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080), &(0x7f0000000140)=0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[]}) close(r1) 00:14:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00003c1000), 0x10) 00:14:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x13, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, "73797a300000000000000000000000000000000000000000000000000000000000000000000000000000008000", &(0x7f0000000000), 0x0, [], [0x4]}) 00:14:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bpf$OBJ_PIN_MAP(0x11, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00'}, 0x10) [ 87.897293] binder: 8102:8107 got transaction with unaligned buffers size, 7 [ 87.933911] binder: 8102:8107 transaction failed 29201/-22, size 0-0 line 3012 00:14:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000006c0)="6e6f646573e6", 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0xa3, 0xffffffff, 0x3f, 0x5, 0x2, 0x7, 0x5, 0xff, 0x80, 0x9}, 0xb) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:14:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, [0x0, 0x3f1]}) 00:14:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffff84, 0x0, &(0x7f00004ee64e)}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000040)}, 0x7}}], 0x0, 0xfdfd, &(0x7f00000000c0)}) 00:14:14 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001a40)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x0, 0x0, "17cbccbb67e71a4002f87559beaee543c2f2a596955b205fdad5b338af557b2ffaa7d43c6b42c02e8035355750c475d61fcce9368bb514414258001c763522"}, 0x60, &(0x7f0000001c40), 0x0, &(0x7f0000001c80)}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001a40)={&(0x7f00000019c0)='./file0\x00'}, 0x10) 00:14:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x13, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, "73797a300000000000000000000000000000000000000000000000000000000000000000000000000000008000", &(0x7f0000000000), 0x0, [], [0x4]}) [ 88.081947] binder: send failed reply for transaction 20 to 8102:8107 [ 88.095910] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.101521] binder: undelivered TRANSACTION_ERROR: 29189 [ 88.184006] binder: 8141:8143 got transaction with unaligned buffers size, 7 [ 88.215664] binder: 8141:8143 transaction failed 29201/-22, size 0-0 line 3012 [ 88.296087] binder: send failed reply for transaction 23 to 8141:8143 [ 88.305620] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.311148] binder: undelivered TRANSACTION_ERROR: 29189 00:14:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x10000001) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)) ioctl$TCFLSH(r0, 0x540b, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 00:14:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty, 0x9}, 0x1c) 00:14:15 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)) 00:14:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x13, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, "73797a300000000000000000000000000000000000000000000000000000000000000000000000000000008000", &(0x7f0000000000), 0x0, [], [0x4]}) 00:14:15 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 00:14:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) dup3(r1, r0, 0x0) 00:14:15 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffff84, 0x0, &(0x7f00004ee64e)}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000040)}, 0x7}}], 0x0, 0xfdfd, &(0x7f00000000c0)}) [ 88.866054] binder: 8165:8170 got transaction with unaligned buffers size, 7 [ 88.883094] binder: 8165:8170 transaction failed 29201/-22, size 0-0 line 3012 00:14:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080), &(0x7f0000000140)=0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[]}) close(r1) 00:14:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x13, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, "73797a300000000000000000000000000000000000000000000000000000000000000000000000000000008000", &(0x7f0000000000), 0x0, [], [0x4]}) 00:14:15 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfc}, r1}}, 0x30) 00:14:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1, 0x0) pwritev(r2, &(0x7f00000000c0), 0x10000000000000b0, 0x0) 00:14:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000400)="be", 0x1, 0x0) 00:14:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0x0) 00:14:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}) 00:14:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') [ 89.019409] binder: send failed reply for transaction 26 to 8165:8170 [ 89.047361] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.052913] binder: undelivered TRANSACTION_ERROR: 29189 00:14:15 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffc5e) close(r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r1, 0x15) 00:14:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x10000001) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)) ioctl$TCFLSH(r0, 0x540b, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 00:14:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clock_adjtime(0xb000000, &(0x7f0000000200)) 00:14:16 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000040)) 00:14:16 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) write(r0, &(0x7f0000000040)="a8", 0x1) lseek(r0, 0x0, 0x3) 00:14:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 00:14:16 executing program 6: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000ff8)={&(0x7f0000000ff8), 0x8}) 00:14:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000001280)=0xfffffffffffff000, 0x4) 00:14:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe1a6a8f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef08007289432c2203039b0f706cd7911300000800000000003131995a"}) 00:14:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 00:14:16 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(r1, r1, r1) setfsuid(0x0) 00:14:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x27, 0xaff, 0x0, 0x0, {0x2}, [@nested={0xc, 0x1, [@typed={0x8, 0x1, @binary}]}]}, 0x1fd}, 0x1}, 0x0) 00:14:16 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000000880)=@ipx, 0x80, &(0x7f0000000b80)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, &(0x7f0000000c40)=""/99, 0x63}}], 0x1, 0x0, &(0x7f0000004fc0)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 00:14:16 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae78) 00:14:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x8, &(0x7f0000000300)=""/136) 00:14:16 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x30, 0x14}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000040)) 00:14:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 00:14:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0094898f0401"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:17 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000affff8)=0xffffffffffffffff) dup2(r0, r2) 00:14:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000020000e20000000008000000009c20ee930f7874"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:17 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@loopback={0x0, 0x1}}, 0x14) 00:14:17 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1011, r2, 0x0) shmdt(r1) 00:14:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0x4) 00:14:17 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish-generic)\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$llc(r2, &(0x7f0000000080)="57860e17f91a8bf2", 0x8, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 00:14:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$notify(r0, 0x402, 0x1) 00:14:17 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f0000000040)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) clone(0x1b11b20000, &(0x7f0000000000), &(0x7f0000000500), &(0x7f00000002c0), &(0x7f0000000440)) 00:14:17 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1011, r2, 0x0) shmdt(r1) 00:14:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x829d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)={0xffffffff}) 00:14:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x2f, &(0x7f0000000140), 0x4) 00:14:17 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=&(0x7f0000000140)={0x0, 'veth0\x00'}}}) 00:14:17 executing program 4: sched_setaffinity(0x0, 0xfffffffffffffd8b, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000016c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)="2f70726f632f737900080000742f697076342f76732f73ec6f7070795f74637008", 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)={[{@nfs_nostale_ro='nfs=nostale_ro', 0x2c}, {@debug='debug', 0x2c}]}) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000240)='./file0/file1\x00', 0x7, 0x1, &(0x7f00000028c0)=[{&(0x7f0000000680)="775828081d872a486d5d292b8de3f690efac302366e34ccaeb8dcd84b9c41e9e4924db96186a83d2466c9a64ab8c7c523445de3708cb5de6f629be86466139d0f45ab929f3916430f11b3e0a3b552adfac92fa160dea4cefe5d1af6900d9a6039d9a69f93cd669459ad6805e75ec135c02190df189ac3f6125cd20e72e2b70871ed86e0b866818bbcfc1376f26f65342af588462c26908ffd5623e25cbfd159e925c36f96cd574d35e423b17be7d3d4a2cfec54a841c9e8874b44151899c30426ad3b5c1c07d1f9c069be64bdc6ebec6450b2d92f9b800857004cfd954dd2ea8df6f30bcc984da5abd1149b619cf6f559d3eee6297eccb733fba9d4edfa78acd89a77495b3fe7c4ddb1bb949b8110f1794834b091b4f645d1337b850f263144df522a66d3ba6b1bc19a59573fb22817b29f2cc21805224073f00a96aa1dbe89286e4ac272d95da4fba6d4b7e617d1d89da1dfe450f2af4b9c265d78fea497358ae8410cd8ea301c467799f52dcfc825f5b0f8efe7456712f887f2346d8fd5534de68bb9706638f27013c54eb5baf2fa60870548522cc1863d8a394af2a2c7b1d34cfa348ffc1c1e5a0860cdc6e7cfb8998ac0fd4b3e568df00c84837096c890abdafbcbc389d7d1df5e675fedcd3144a8f7b7f3ba76fe1d1f5743ae241af1c197f43a2d6bed6d866b408274214543bc324ad4da39e816ecec9237d7169f018894d8bbb7a61d6a91313f1570e83bcbc157e41c491d248ec3a038ba2f90ea85841dd1323534dcd4de32e723fdeb44dbbc86ad3e8d40d4b613a0fc5a5d4f7ed3e32339a675e4b32466f8053160f0e5575192f751a344eac55f0ab49b9923995f995e202261ccd3a736116ec906573e0d96304dea877b1da6dec5134fd5816fb9bcc8336a6a769f728b89b22e4ced3544f8979bc9fc462644a8650c0c39b4d947f2401c299481787fd097e17aed005550b28af2fe6b0324bb0a6b750ef0cb51480982401a54bab1d2b02b58127bd231cc98c23caa1466978fea2eb15cea32a4d5b3222fe8605a4bf2ab0922de461d894f1cb7103a56540c6d5adc9f32ef3402af3ce205aa6ba791254cd10043a3beea63a458713d53f96005f1ec75542e0abb4fe27e83303840ef2e4f2d6ead67f67cc6f9e4c0aa51c0c4d53bde8fe4c93bbe2f69b389b90b258e8a61f4b587cbea46642db7021fdfe4b17a6862a1ea1f6b69823fec1a30bcd32caf9310c659372a348ac8d182d0b426b31978799cf3c83c9872ecf85ab4be41d63978791e6a8f87b9776c4bf4f5826fa8dfe68b8458c85aabce7d66e26e4cd593cb405f39c3e24196b1e5942ff07a9720b40c06f56a6991978adbaadbffd7454330f182057a2cb083873dca8b30019a21c4cb382d9c8ffbb7951a7f4df61a7a9f8a000df4001295259f464a27684a9d2bc23035427dc0e8e54b2269b144ca42701ac7633d5cf9c703bb48b7b2f2e5a9fe1f15596593b44a877b0f7f444d00edc141e55053c531fb4c0fe8ea2676faaf3f0c3da6711cd172e83e6eee1efe163f2e4b408c6104061e8f7a61a48853f2f33c7b76f42c8c9e5afbdf090662c9c5ed5f52bb977812c25b372aea1408535dd161f05fcbcaf5ea11bfb8a89a13b815810b915c6fad8adf0d1845099a36e7f59307f9da64c36bb9fe6b9caaa5f26aea45940fd7fbbcf549bdb1fd6174c885a3279af2d5f4ead2e77b91200005b691bd4e3e66c57acffbc1979f3dbb1985537ae4ec120604c1db0b9c6a405f7134e5a6911cbd4e8d566a89c540a02ca6493a4c40cf47ff1c0a3dc4fbed17df5263cbe9b30d0c6a11b03f7e2639a7d625581c57ef0d7a863c622e185b1f0d4d88c207bd977cbe3a7d7bd175f617103d4c2958a3a86dbb7096ad4e07d6d0ff3218c296d136a1ea155074b72a6ac204f58f28654212ac7927dfbf503818bdcc6c675ee40b8418895c8737d04b78cea0278a43c6c325f3513f30fba62d8d9b19996d5430944cffa12dce7932ec66e8a99d69446588da66377fec4466c69d3c71f88353420d742d69ee8fec9f5600628953bcc5c25f9bcffc6279d5dc60b33fe1e97bb57568dfc72e03ac5e11fd2c066a0182e67ab87067b6d0526e88385a1a8c3605de4395411e548b247f4162b513d69c4476c7554f710338d2e62eb53583be170f14860fe00c0f9728dffc8f5badc2bc0f52ee531a6719035f8c19c105a11542a2252f619b2fff0c8ba69eeeabe24cc7d8b8d3a1df6c47e66819fbdd2d8b219f8b4243d343327db97496cfe32d76173969810d240d08d21f57de45a00fb5e46ea6d3e2b7b23d73ec553cb9273bc3f6741f6a349e09933de2b21afc2ad2f3ce2f7bd754a48477d8a193062da1698d8403cfe45eefd3493d479edb4ab5d4954787ac575aa4a715a6c3d0e05a755607ae2670e7463549ff946e1b1c7afa51ef7b9fc6868bbfbefe7b93ea8ca82797de1a05f1cf0346cac026f9de924833acd4af04154afbfbc401b4167ded4d95409f14166cfdc3e6ad3ae8b95e90394fce51ce8c8ebf610ce95f48fef5c82fdc6732e522df94c7adaad2e20471fbc768108badd87291002c91812c93c35b4db160436c3ed7f590144dbd3603ce66a23b58ec31cdfcce6f74ce9caad54cc293b12dddb7d7d8b58e84929b2189c3a25bbbc0455579ad257ab0310962e3df974c6be9a78c09c6c33bd1b53cb3a05e8355143649118f462717dc1ab7ddbb5e9380f231e3311a48d48afd124fe87f4ed10e047258cf9cd656b59581bd5e9dcc45f5b577d99ad6a011a97d51203d8683311873331274058564e2ca5dc34c1ba5fb67f3b8f21705e38d49a1b3002dac8f80ba25c2b177876a325350467bfde573118eaf1c467218488ac3d661fb71906ae4a3dad1c297a769befb4814072978a5fde639b257b57b42510f0cdcd5c1b2c4d228e31c492c50d8450d9774d8e68e5293f8e37e8a9d30ceed59809448518f025b8397cbec79720d2b9ad122a2485a731fc9675f2f787634b413aee5c1c57dbb7b77d934dbe4c6ec5ec56e9092225a59c021b759930154cc8b8885274a0cc27fe958521cfefa2e2ef624d6f1b4393f56ed71f0f68300ea4819c8f738529e35c54a70be8d6382bc5c9ca7de3f80095d161ec43b7a9992291de37ac29e53dcb66c01f6056b6c4841aa92d95bbac50c92c33c5854372986937fca02ec6d8ba60e36a2263ae7871182dd3831ce299ba1c0b2bd2213b346b5476bb912369983c38cb0cdc7534463ce2e7fa32f7aec08cf5280c55a09e27fe9188ebfe43537a875449520e848193df78bf1ce10cdfb4879ac4f6d09c0c1364f1e1feb9bd8679bc2c5109ac795c82d8ea28bcae91d82486edf6c4ff0c436e002d66fc102380c1b6ba6eaac6f97b91dac073595c10d0e2eb0cb35eb47ef0c2a0eb46ba40c70417296a45621384243077b73e5dca82a0643ddd01dbdaac895792dc213bf0a728427b807a60928caed38410da8a79e8783e327eb08690b9e8c453b5b71db114a695109dcff71ca9470c0033f5e8893abcc0147ac4db86ddfbce7760f04d6649e986e755b2618409e9d58b8dcba87961d943b4704a1c794582e18916a675835441e020af0a1b0b1a47c72d38b9e215ea3e3f8118fd2b6734f2cdf3a7e40191080ab299f4293a9389d1c66856e8d617a320883c41b300d14913a2033eb194b7fc3ce28f4f93cf992cc7238cda950733be244558145d69f49e3ec4a35c73d5f914b1903e8c9b4102ac286ce877c855b19164f25941194d0e621ff6e98fe6834929de2cfe185ad6ece6428287ae709694b814927f0f9384f14a6ccd0483a513f5d3c6267d2e03b915576a50eeb3aedbe903d24dc822b276f6077fa55be75c1cc5674595950d3567032407a610c27ba4749b1ec9bab639d213924278224dfbae71dbaf5c8c3b795a60a8acea705a50539bd6642d1addc4898094711ae42f0e6838ede7032710c5f127621bba0c4edf71f3664c4175f210f65ec3c3e1eabe16f18e3ecf7c0be8d81c8cbdebb7510e5011974cb55b7cc628efbfd7fb692f9f538805dd7cdae920acd66480c185bb301234b19996f6fe9a7a66f1d46132780396272a9d56607d242039de28e4", 0xb5c}], 0x0, &(0x7f0000002980)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 00:14:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000000100)) close(r0) 00:14:17 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = socket$netlink(0x10, 0x3, 0x80000000004) listen(r0, 0x0) write(r2, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb01001001ffa40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 00:14:17 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1011, r2, 0x0) shmdt(r1) [ 91.209387] FAT-fs (loop4): bogus number of reserved sectors [ 91.215373] FAT-fs (loop4): Can't find a valid FAT filesystem [ 91.302897] hfs: can't find a HFS filesystem on dev loop4 [ 91.322968] hrtimer: interrupt took 30963 ns [ 91.359694] FAT-fs (loop4): bogus number of reserved sectors [ 91.365602] FAT-fs (loop4): Can't find a valid FAT filesystem [ 91.385808] hfs: can't find a HFS filesystem on dev loop4 00:14:18 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000affff8)=0xffffffffffffffff) dup2(r0, r2) 00:14:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x1d, &(0x7f0000000080), 0x4) 00:14:18 executing program 7: socketpair(0xf, 0x0, 0x0, &(0x7f00000000c0)) 00:14:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) dup3(r0, r1, 0x0) 00:14:18 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000200)) setrlimit(0x8, &(0x7f00000a3ff0)) mlockall(0x2) 00:14:18 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1011, r2, 0x0) shmdt(r1) 00:14:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 00:14:18 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/34, 0x22, 0x0) 00:14:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x84000008912, &(0x7f00000001c0)="295ee1311f16f48f491070") syz_emit_ethernet(0x42, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [{[], {0x8100}}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)={0x0, 0x2, [0x0, 0xee2]}) 00:14:18 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) dup2(r2, r1) 00:14:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 00:14:18 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) 00:14:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:14:18 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x82307202, &(0x7f0000000040)={0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'veth1_to_bridge\x00'}) 00:14:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="da"], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 00:14:18 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8955, &(0x7f0000000000)={'lo\x00@\x00'}) 00:14:18 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x82307202, &(0x7f0000000040)={0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'veth1_to_bridge\x00'}) 00:14:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="da"], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 00:14:18 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x4, &(0x7f0000013ff4)={@multicast2=0xe0000002, @rand_addr, @multicast2=0xe0000002}, 0xa) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) dup3(r1, r2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 00:14:18 executing program 6: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) 00:14:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/32, 0xf}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/123, 0x7b}, 0x0) 00:14:18 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000affff8)=0xffffffffffffffff) dup2(r0, r2) 00:14:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 00:14:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = dup2(r0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x300, [0x20000300, 0x0, 0x0, 0x20000330, 0x200005d0], 0x0, &(0x7f0000000000), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x0, 0x0, 'ifb0\x00', 'bond0\x00', 'team0\x00', 'dummy0\x00', @random="b83bc7a667d3", [], @random="a976f250ac9e", [], 0x100, 0x100, 0x138, [@quota={'quota\x00', 0x18}, @helper={'helper\x00', 0x28, {{0x0, 'sane-20000\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}, {{{0xd, 0x0, 0x0, 'bridge0\x00', 'bcsh0\x00', 'tunl0\x00', 'veth1_to_bond\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xe8, 0x138}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a3d4689908cefc2cbb67bc3821747a2c4dad01da389b6aa20a11adb78a93b9a8d0be2fa4e6ae1a61ab821ccd8a86db3806b52e5c189f9e6515710ff5c6d4a7da"}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x378) 00:14:19 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x82307202, &(0x7f0000000040)={0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'veth1_to_bridge\x00'}) 00:14:19 executing program 2: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) 00:14:19 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3, 0x880) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x5b5f, 0x1, 0x1, r0}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='.yz1\x00', 0x1ff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000340)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000300)={[0x31]}, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x7) [ 92.759579] xt_helper: cannot load conntrack support for proto=7 00:14:19 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0) munmap(&(0x7f00001c1000/0x1000)=nil, 0x1000) 00:14:19 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000380)}}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) getrlimit(0x0, &(0x7f0000000080)) 00:14:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="da"], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 00:14:19 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x82307202, &(0x7f0000000040)={0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'veth1_to_bridge\x00'}) 00:14:19 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x2) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0xffffff60) 00:14:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@multicast2=0xe0000002}, {}, {}, 0x0, 0x6e6bb4}}, [@mark={0xc, 0x15}]}, 0xcc}, 0x1}, 0x0) 00:14:19 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000affff8)=0xffffffffffffffff) dup2(r0, r2) 00:14:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="2957e1311f16f477671070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 00:14:19 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x2) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0xffffff60) 00:14:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="da"], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 00:14:19 executing program 4: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x2000000800004c39) sendfile(r0, r0, &(0x7f0000000200), 0x80003ff9) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 00:14:19 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) clone(0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000003c0)) 00:14:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='loginuid\x00') sendfile(r0, r0, &(0x7f0000000000), 0x8000) 00:14:19 executing program 7: unshare(0x2000400) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/149, 0x95) 00:14:19 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x2) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0xffffff60) 00:14:19 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syz_tun\x00', 0x1002}) 00:14:20 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x2) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0xffffff60) 00:14:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x277}]}) 00:14:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='loginuid\x00') sendfile(r0, r0, &(0x7f0000000000), 0x8000) 00:14:20 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) exit(0x0) 00:14:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x40096101, 0x707000) 00:14:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000021, 0x0, 0x80ffff}]}) [ 93.818952] QAT: Device 0 not found 00:14:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0x40}, {0x100000006}]}, 0x10) sendmmsg(r0, &(0x7f0000009540)=[{{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000001840)}}], 0x1, 0x0) 00:14:20 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r2 = dup2(r0, r1) read(r2, &(0x7f00004b8fab)=""/85, 0x55) 00:14:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x4, &(0x7f0000013ff4)={@multicast2=0xe0000002, @rand_addr, @multicast2=0xe0000002}, 0xa) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0xa, &(0x7f0000000000)={0x303, 0x33}, 0x4) dup3(r1, r2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 00:14:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='loginuid\x00') sendfile(r0, r0, &(0x7f0000000000), 0x8000) 00:14:20 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="000100000008000066000000c9030000ec00ff7f00000000010000000000e99acf52c9b24700000000010000000000006e5fbe5abf95ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@sb={'sb', 0x3d, [0x36, 0x31, 0x39, 0x3e, 0x0, 0x35, 0x37, 0x31, 0x3d, 0x35]}, 0x2c}, {@commit={'commit', 0x3d, [0x7f, 0x37, 0x0, 0x35]}, 0x2c}]}) [ 94.580651] EXT4-fs: Invalid sb specification: sb=619>,errors=continue [ 94.587996] EXT4-fs (loop4): Unrecognized mount option "sb=619>" or missing value [ 94.602759] EXT4-fs: Invalid sb specification: sb=619>,errors=continue [ 94.610566] EXT4-fs (loop4): Unrecognized mount option "sb=619>" or missing value 00:14:21 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='loginuid\x00') sendfile(r0, r0, &(0x7f0000000000), 0x8000) 00:14:21 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") clone(0x50802100, &(0x7f00000036c0), &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)) 00:14:21 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7001, &(0x7f0000001340)) 00:14:21 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000)) 00:14:21 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) clone(0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000003c0)) 00:14:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295fe1311f16f477671070") r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000100), 0x1e0) 00:14:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) connect(r1, &(0x7f0000ed9fe4)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000831000)={0x6, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) sendto$inet6(r1, &(0x7f0000cf4fa3), 0x0, 0x0, &(0x7f00009c1000)={0xa, 0x4e21}, 0x1c) dup3(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000fb6ffc)=0x1, 0x4) [ 94.761089] IPVS: ftp: loaded support on port[0] = 21 00:14:21 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000090affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 94.886265] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 94.917966] IPVS: ftp: loaded support on port[0] = 21 00:14:21 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140), 0x3) 00:14:21 executing program 0: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4847, 0xfffffffffffff001}) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) mlock2(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) 00:14:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x3c}, @in=@multicast1=0xe0000001, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8, 0x16}]}, 0xf8}, 0x1}, 0x0) 00:14:21 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0x0, 0x8000}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 00:14:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) connect(r1, &(0x7f0000ed9fe4)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000831000)={0x6, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) sendto$inet6(r1, &(0x7f0000cf4fa3), 0x0, 0x0, &(0x7f00009c1000)={0xa, 0x4e21}, 0x1c) dup3(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000fb6ffc)=0x1, 0x4) 00:14:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x21, &(0x7f0000000000), 0x3) 00:14:21 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f00000002c0)='bpf\x00', 0x0, &(0x7f0000000280)) chdir(&(0x7f0000000780)='./file0\x00') syz_fuse_mount(&(0x7f0000000440)="2ee566696c653000", 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:21 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000000040)) 00:14:21 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 00:14:22 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") clone(0x50802100, &(0x7f00000036c0), &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)) 00:14:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) connect(r1, &(0x7f0000ed9fe4)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000831000)={0x6, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) sendto$inet6(r1, &(0x7f0000cf4fa3), 0x0, 0x0, &(0x7f00009c1000)={0xa, 0x4e21}, 0x1c) dup3(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000fb6ffc)=0x1, 0x4) 00:14:22 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x4142, &(0x7f0000000040)) 00:14:22 executing program 6: unshare(0x20000000) clone(0x1fffd, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000280)) 00:14:22 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 00:14:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="00010002007c000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal', 0x2c}, {@delalloc='delalloc', 0x2c}]}) 00:14:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x2c, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4, 0x12}, @IFLA_MASTER={0x8, 0xa}]}, 0x2c}, 0x1}, 0x0) 00:14:22 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) clone(0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000003c0)) 00:14:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) dup3(r1, r0, 0x0) [ 96.633122] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 96.643063] EXT4-fs (loop1): can't mount with both data=journal and delalloc 00:14:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-224-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="15ae93dae8e8dc67ea91aac7ed6f7bdbce9655c348f49b4f175a2aca927f7dfe72b4d4e320a480b4388f23e17ab186aae8c1f7fa1c4515c5d481698d26ee54a643984279b21d90d0c08996c8ad6437f7ae239719695115029a9f39b0a595628563fe40bfc47ec9b2a3f8600056381ed73d2a6d9675fb82a87f3aa653285fd7cf63d41ed902a8a19de217d48d3b186a06d5", 0x91) 00:14:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) connect(r1, &(0x7f0000ed9fe4)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000831000)={0x6, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) sendto$inet6(r1, &(0x7f0000cf4fa3), 0x0, 0x0, &(0x7f00009c1000)={0xa, 0x4e21}, 0x1c) dup3(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000fb6ffc)=0x1, 0x4) 00:14:23 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3fffffff80}) [ 96.694291] IPVS: ftp: loaded support on port[0] = 21 00:14:23 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) [ 96.747716] EXT4-fs (loop1): can't mount with both data=journal and delalloc 00:14:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) dup3(r1, r0, 0x0) 00:14:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="00010002007c000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal', 0x2c}, {@delalloc='delalloc', 0x2c}]}) 00:14:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='#! ./file0'], 0xa) mknod(&(0x7f0000000040)='./file0\x00', 0xffb7206c3ba788ba, 0x0) execveat(r1, &(0x7f0000000080)='\x00', &(0x7f0000000300), &(0x7f00000003c0), 0x1000) [ 96.944061] EXT4-fs (loop1): can't mount with both data=journal and delalloc 00:14:23 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") clone(0x50802100, &(0x7f00000036c0), &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)) 00:14:23 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000008000)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1a, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000e7ff8)=0x1) 00:14:23 executing program 7: ioprio_set$uid(0x0, 0x0, 0x0) 00:14:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x1c}, 0x1}, 0x0) 00:14:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) dup3(r1, r0, 0x0) 00:14:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="00010002007c000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal', 0x2c}, {@delalloc='delalloc', 0x2c}]}) [ 97.147289] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 97.162711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 97.185788] IPVS: ftp: loaded support on port[0] = 21 00:14:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="00010002007c000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal', 0x2c}, {@delalloc='delalloc', 0x2c}]}) [ 97.317578] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 97.467552] ion_buffer_destroy: buffer still mapped in the kernel 00:14:23 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) clone(0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000003c0)) 00:14:23 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000240)=""/79) 00:14:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0xf0ffffffffffff}, [@NDA_LLADDR={0xa, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}]}, 0x28}, 0x1}, 0x0) 00:14:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) dup3(r1, r0, 0x0) 00:14:23 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000000c0)=[{&(0x7f00000015c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001980)='|', 0x1}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) 00:14:23 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, [], 0x1}}, 0x1c) getsockname$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000080)=0x1c) 00:14:23 executing program 1: r0 = socket$inet6(0xa, 0x1800000000003, 0x1) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c50400aeb9952989929b8903a4", 0x10) sendmsg$rds(r2, &(0x7f0000002200)={&(0x7f00000000c0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000ec0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000002080)}, 0x0) 00:14:23 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") clone(0x50802100, &(0x7f00000036c0), &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)) 00:14:24 executing program 5: exit(0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/99) readahead(r0, 0x0, 0x0) [ 97.631959] veth0_to_bond: FDB only supports static addresses [ 97.659881] IPVS: ftp: loaded support on port[0] = 21 00:14:24 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x34) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 00:14:24 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000000c0)=[{&(0x7f00000015c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001980)='|', 0x1}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) 00:14:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xfc) write$cgroup_pid(r2, &(0x7f0000000080), 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 00:14:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newneigh={0x34, 0x1c, 0x623, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x8}, [@NDA_LLADDR={0xc, 0x2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @NDA_DST_MAC={0xc, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x34}, 0x1}, 0x0) 00:14:24 executing program 7: syz_emit_ethernet(0x41, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "dcd50f", 0xb, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x800e], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, ':Jw'}}}}}}, &(0x7f0000000340)) 00:14:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="ee67727eb44dadf904bc948611c1d88799f6a496c0a29913233e16013d9eb25c3e08f2f53beecbf406eb736e41b52d1a72834dddf0e50aba616ff2c7a2e169cf516daa333075e1c094ce79eaf9d14572a901d83f9affab0f5d8a1900db18f7b98d4f905900d48919126d1ca35935347bd4d026987879f09cb519b295c506d5a83b04c42233353cd1b114097d245ea7cb1ec77364a6c38dd4d8291a9c65499a6b84e6", 0xa2}], 0x1, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:24 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000000c0)=[{&(0x7f00000015c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001980)='|', 0x1}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) 00:14:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000080)="d9ff0fa2d9f20f880d002e0f0866b9800000c00f326635004000000f300fc71926360f0f15b70f01be00b8640f00dd", 0x2f}], 0x1, 0x5d, &(0x7f0000000580), 0x1b8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'veth1_to_bond\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:24 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000000c0)=[{&(0x7f00000015c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001980)='|', 0x1}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) 00:14:24 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt(r0, 0x9, 0x5, &(0x7f00000001c0)=""/224, &(0x7f0000000040)=0xe0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r3, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) dup2(r1, r3) tkill(r2, 0x1000000000016) 00:14:24 executing program 4: futex(&(0x7f0000000ffc), 0x5, 0x0, &(0x7f0000000100), &(0x7f00000acffd), 0x0) 00:14:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xfc) write$cgroup_pid(r2, &(0x7f0000000080), 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 00:14:24 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe) eventfd(0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100), &(0x7f0000000140)=0x8) listen(r0, 0x0) shutdown(r0, 0x0) 00:14:24 executing program 2: r0 = syz_fuseblk_mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0) write$fuse(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000020000000000000000000000010000000000000000000000000000000100000000000000"], 0x28) 00:14:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) setsockopt(r0, 0x10e, 0x3, &(0x7f0000fc9000), 0x1a) 00:14:25 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0}) nanosleep(&(0x7f00000000c0)={r0}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x2, &(0x7f0000266000/0x4000)=nil) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 00:14:25 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') sendfile(r0, r1, &(0x7f0000000280)=0x29, 0x2000000004) 00:14:25 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, [0x0]}, 0x2c}]}) 00:14:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xfc) write$cgroup_pid(r2, &(0x7f0000000080), 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 00:14:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x2, &(0x7f0000000140)={0x0, @in6={{0xa, 0xff0f, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x8) close(r2) close(r1) 00:14:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff81, 0x0, 0x0, 0x0, [0x14, 0x80ffffff], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 00:14:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000014c0)='cpuacct.usage\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)='0', 0x1}], 0x1, 0x0) 00:14:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000100000409004bddd9de91beebeebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5b326d7a071fb3533f1fb1ce3") ioctl$KVM_IOEVENTFD(r0, 0x40086610, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) [ 99.482861] ntfs: (device loop3): parse_options(): The uid option requires an argument. 00:14:25 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x4}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 99.552765] ntfs: (device loop3): parse_options(): The uid option requires an argument. [ 99.585182] EXT4-fs warning (device sda1): ext4_resize_fs:1916: can't read last block, resize aborted 00:14:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xd}}) 00:14:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xfc) write$cgroup_pid(r2, &(0x7f0000000080), 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 00:14:26 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt(r0, 0x9, 0x5, &(0x7f00000001c0)=""/224, &(0x7f0000000040)=0xe0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r3, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) dup2(r1, r3) tkill(r2, 0x1000000000016) 00:14:26 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000000)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0xa3020, 0x0) 00:14:26 executing program 6: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") close(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180)) close(r0) 00:14:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, "a8", "d45fef"}}}}}}, &(0x7f0000000180)) 00:14:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$int_out(r0, 0x80804531, &(0x7f0000000000)) 00:14:27 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0}) nanosleep(&(0x7f00000000c0)={r0}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x2, &(0x7f0000266000/0x4000)=nil) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 00:14:27 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt(r0, 0x9, 0x5, &(0x7f00000001c0)=""/224, &(0x7f0000000040)=0xe0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r3, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) dup2(r1, r3) tkill(r2, 0x1000000000016) 00:14:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x914, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffdce, &(0x7f00000000c0)}) 00:14:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0xb93}], 0x1, 0x0) 00:14:27 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='-0', 0x2) [ 100.805522] md: Autodetecting RAID arrays. [ 100.815757] md: autorun ... [ 100.818779] md: ... autorun DONE. [ 101.869693] IPVS: ftp: loaded support on port[0] = 21 [ 102.188232] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.194600] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.201749] device bridge_slave_0 entered promiscuous mode [ 102.225054] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.231407] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.238550] device bridge_slave_1 entered promiscuous mode [ 102.263103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.286230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.348882] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.373730] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.472820] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 102.479903] team0: Port device team_slave_0 added [ 102.501865] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 102.509902] team0: Port device team_slave_1 added [ 102.532791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.557286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.581940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.606455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.812625] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.819069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.825669] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.832057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.575737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.649129] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 103.723920] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 103.730207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.737784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.809278] 8021q: adding VLAN 0 to HW filter on device team0 00:14:30 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000001800)=[{&(0x7f0000000280), 0x0, 0x2}, {&(0x7f0000000440)="d650c283e291b2d15c176941c81ea49f594142487a25cd0ff34d60d39f10baa0e26a05466563c14151464a611ede84226f1fed3a52dca17b905c9f71bbc6dd2ed5092705b6af7b621f219266b1472de182f7d7035d17c29f4752755219edaf10da3dc316b179126fc8bdd8dfb1e5473760cf3d45bb7c9f22367f330b1f265f00f10fb20739f67de7f389b23d3078920abb73b37cb857f907d6d78d042890189fb88767cc4880911d1e7f63ce8796f3c1faa359b01f17f19daad865301f074a948e05e3", 0xc3, 0x6}, {&(0x7f0000001540)="7247f36bfce9283cdf58a1c5df61b588b4837ffa11f21b3cd7baac1485a65f51c5f00c78e67cd75dee17ff67174c83194b4ec1f3d085ee80943bd511fb38c3da39b4319e1be0afb9f8f870292a615dfef78ad02df23462dabd342b165aaadaaf2d4a755ad0c04af1ad531f65881a7ba8bc5852a21a2b855d22b7e711bd48761dfd68c53128a2d5140db6d1daa8bfc2d2bcdcc3b502b7e99860348c67c0f3772219310ab493d3767a33759b62adbf68433205cf24108b6e435fb26cc1afcad0d503bc703d53e84adef23345cbffc6c1f4c1a99a438791c2c598db606be1adbb0cd2f10ff76f202991efb1f90c0e984edcde3b8c51321b", 0xf6, 0x1}, {&(0x7f0000001740)="506a63e94f8298da42754c8ded5dfb347b2b03a3954b0892e53de5911dd1848081cf56d27687eed13729a51eab1a35eb3b6017affae0638865defae76eae0ee5f4218f5d31cd4a5e68f6e085c97cc13b38d41f645a32fddedd436e31160f268bf50584fb121ffa2ba19f9d99ebe28bfc7aeb6dc54032f027abddfbef148f173fd8a4ff2c77760fee33c03c146868fce2913ef8", 0x93, 0xfffffffffffffe01}], 0x800000, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp775'}, 0x2c}, {@quota='quota', 0x2c}]}) mmap(&(0x7f000050b000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4000000000) 00:14:30 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, r1}) 00:14:30 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0xda0}) 00:14:30 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='-0', 0x2) 00:14:30 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = dup(r0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x201000, 0xfffffffffffffc73) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000011000/0x3000)=nil, 0x20011000}) 00:14:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x18, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) 00:14:30 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt(r0, 0x9, 0x5, &(0x7f00000001c0)=""/224, &(0x7f0000000040)=0xe0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r3, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) dup2(r1, r3) tkill(r2, 0x1000000000016) 00:14:30 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0}) nanosleep(&(0x7f00000000c0)={r0}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x2, &(0x7f0000266000/0x4000)=nil) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 00:14:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x14, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) 00:14:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 00:14:30 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='-0', 0x2) 00:14:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet6(0xa, 0x1000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@fragment, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000001040)=""/4096, &(0x7f0000000000)=0x8e) 00:14:30 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0xda0}) 00:14:30 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='-0', 0x2) 00:14:30 executing program 6: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f0000000400)='./file0\x00', 0x4000, 0x0, r0, 0x0, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:14:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000200)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_lifetime={0x4, 0x3, 0x9}]}, 0xa0}, 0x1}, 0x0) 00:14:30 executing program 1: clone(0x8000000000200, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000040)='./file0\x00', 0x800000000001040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000340)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000340)) open$dir(&(0x7f0000000080)='./file0\x00', 0x200000282, 0x0) 00:14:30 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg(r0, &(0x7f0000003900)={&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f00000038c0)=[{&(0x7f00000037c0)="16710103000000000000443501f1a26a", 0x10}], 0x1, &(0x7f0000000000)}, 0x0) 00:14:30 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) sendto(r0, &(0x7f00000000c0), 0x0, 0x800, &(0x7f00000010c0)=@nfc={0x27}, 0x80) 00:14:31 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x2}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/250, 0x1}], 0xdf, 0x0) 00:14:31 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0xda0}) [ 104.630506] raw_sendmsg: syz-executor3 forgot to set AF_INET. Fix it! 00:14:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000280)='./file0/file0\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0/file0\x00'}, 0x10) 00:14:31 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000000c0)="1b0000003a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) 00:14:31 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0}) nanosleep(&(0x7f00000000c0)={r0}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x2, &(0x7f0000266000/0x4000)=nil) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 00:14:31 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0xda0}) 00:14:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") setrlimit(0x0, &(0x7f0000000080)) prlimit64(0x0, 0x0, &(0x7f0000000040), &(0x7f00009c4ff0)) 00:14:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='0x2', 0x3) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f00000000c0)=""/88) 00:14:31 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae00) 00:14:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000)=0x2, 0x4) 00:14:31 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003480)={{{@in=@dev, @in=@remote}}, {{@in=@local}}}, &(0x7f0000003580)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000003b40)={&(0x7f00000037c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000000340)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@local}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_mreqsrc(r0, 0x10d, 0x2, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000005980)=0xc) 00:14:31 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000040)) 00:14:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@rand_addr, @dev={0xac, 0x14, 0x14}, 0x0, 0x2}, 0x10) 00:14:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002271, &(0x7f0000000000)) 00:14:31 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) 00:14:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="0f91209a006800009f00360f56a500800000640f06c4c271a96f0766baf80cb839354a8aef66bafc0cb0d4ee660f3882b990a2e80c0f20e035800000000f22e0c744240000000000c744240200000000c7442406000000000f011424f3dcab00000000", 0x63}], 0x1, 0x24, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 105.756562] IPVS: ftp: loaded support on port[0] = 21 00:14:32 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000001080)={@link_local={0x1, 0x80, 0xc2}, @random="063d3b650453", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x67, 0x0, @empty, @rand_addr}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, 0x0) 00:14:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000b4de0700e136e30d2dc3660e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/92, 0x5c}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) 00:14:32 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/30, 0x1e, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) 00:14:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000002c0)) fcntl$setstatus(r0, 0x4, 0x2000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000b94000)=""/246) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x8001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b3226a0000e8bae0077381c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9663e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd6", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4, @broadcast=0xffffffff}, 0x10) [ 106.418695] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:14:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000b4de0700e136e30d2dc3660e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/92, 0x5c}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) 00:14:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000080)=""/140}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000180)="01", &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 00:14:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f00000002c0), 0x4) 00:14:32 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00002c1000)={0x70000005}) [ 107.294424] device bridge_slave_1 left promiscuous mode [ 107.300810] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.318316] device bridge_slave_0 left promiscuous mode [ 107.323797] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.399646] team0 (unregistering): Port device team_slave_1 removed [ 109.409958] team0 (unregistering): Port device team_slave_0 removed [ 109.422411] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 109.441398] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 109.468784] bond0 (unregistering): Released all slaves [ 109.814174] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.820599] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.828547] device bridge_slave_0 entered promiscuous mode [ 109.863542] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.869981] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.877768] device bridge_slave_1 entered promiscuous mode [ 109.915657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 109.952132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 110.057331] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 110.096141] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 110.259821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.267654] team0: Port device team_slave_0 added [ 110.302629] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.309971] team0: Port device team_slave_1 added [ 110.346482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.385557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.424198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.463983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.820333] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.826746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.833397] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.840389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.847943] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.520542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.649934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.725312] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 111.804053] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.810223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.817841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.889486] 8021q: adding VLAN 0 to HW filter on device team0 00:14:38 executing program 7: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x101d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000092f868f9974cc79100000000870000000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x9, 0x10000003, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) syz_open_dev$adsp(&(0x7f00000012c0)='/dev/adsp#\x00', 0x0, 0x501080) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = socket$inet6(0xa, 0x1000400000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r6 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000040)={'team0\x00', 0xc201}) keyctl$search(0xa, r3, &(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, r4) ioctl(r2, 0x3, &(0x7f0000000340)="99c94476dd37ed594eeaeb6a7ae04b399337c71b90dc3ad288cb17547931d7d1e20af5f983d2c2dd1cebb4e67e43f8f9bf1a4fe49d120f9e0e8a740e75424902bf4b7eba6afa6a1a94ccda04beed7a1f1ac45abe1ee57f0dc46fc8c5ab164f314053401226e6fa0016f04a02739186105d594210e770a595dd63953ed095f5528c55fd9af6266023cf74b2e8cda62be6d62b8a7d4ef5bbcff4e64cb767a49c5e1bf4bc3f01a43796b19836073fe9feb971a708b71134918817f00ea810b7bf7a666d0f7dc96f188073df518060d48c8f360214300e646ea9") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x4a48b125e13656b}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) r8 = semget(0x3, 0x3, 0x400) semctl$IPC_STAT(r8, 0x0, 0x2, &(0x7f0000000200)=""/38) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f0000000040)) 00:14:38 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sync_file_range(0xffffffffffffffff, 0x2, 0xffffffffffff7fff, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file1', [{0x20, 'eth1vmnet1%'}], 0xa}, 0x396) write$binfmt_elf64(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write$tun(r1, &(0x7f0000000100)={@val, @void, @llc={@llc={0x0, 0x0, "cd"}}}, 0x7) 00:14:38 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, &(0x7f00000002c0), 0x0, 0xffffffffffffffff, 0x80ffff}) 00:14:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000b4de0700e136e30d2dc3660e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/92, 0x5c}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) 00:14:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x80045400, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) 00:14:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000100)='|', 0x1, 0x0, &(0x7f0000be1000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 00:14:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r0, 0x80047210, &(0x7f0000001540)) 00:14:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:14:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000080)=""/36, 0x24) 00:14:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 00:14:38 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n'], 0x1) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 00:14:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:14:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000b4de0700e136e30d2dc3660e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/92, 0x5c}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) 00:14:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$kcm(0x29, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) dup3(r1, r2, 0x0) 00:14:39 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x60020d) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) pread64(r0, &(0x7f0000000000)=""/103, 0x20000067, 0x0) 00:14:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x40247007, &(0x7f0000000140)) [ 112.995268] Â: renamed from team0 00:14:39 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") 00:14:39 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001480)={[{@subvolrootid={'subvolrootid', 0x3d, [0x32]}, 0x2c}, {@subvolid={'subvolid', 0x3d, '\'vmnet0%wlan0'}, 0x2c}]}) 00:14:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}}, 0x108) close(r2) close(r1) 00:14:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key(&(0x7f0000000240)='.dead\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000400)="f998a34c992d0013436968959dcdade3e821e654a4cb358255611c81804c67782f134994177eb1c5d7ec38d711f44db127ed17383ad7da8f4a9d6d76ce4d8acfb6df67e5dd8e55edd4091493408782119bdc64f282e652a4192cc871c9929f41f56bf15d749f3d8193c6495b6264f6c6f5c533a6746c53b3ff3e3d106321fe8b55ce1ca99981e659fc5f25c9b33faf7aac9a4a1659dc3e0606645e79f52adee3bb84d3f51f66f1595d2e39ac3988f7b0abdf26c1ff4fe4953a148eda8b795d0e03a4473c17dd16b2c28d8309781613b9cc66eb3d", 0xd4, 0xfffffffffffffff8) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="4e024a65a83f8e1ebb1e7325aa5cedcf5b3cc0c7e7bc7ce8fbb6e74a0b517d65c796a757ebf3250ecc68f2895ba0bd3fa50796e80f04", 0x36, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 113.114889] BTRFS: 'subvolrootid' mount option is deprecated and has no effect [ 113.158778] BTRFS: 'subvolrootid' mount option is deprecated and has no effect 00:14:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x80045400, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) 00:14:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000100)='|', 0x1, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$unix(r0, &(0x7f00006da000)=@file={0x0, './file0\x00'}, 0xa) 00:14:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x227e, 0x500000000000000) 00:14:39 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") 00:14:39 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") 00:14:39 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0000000000000000000000ff603bcfb6f10bafbdbd9e4f585bb792037c") ioctl$int_out(r0, 0xc0984124, &(0x7f0000000040)) 00:14:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:14:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) ioctl(r0, 0xc0884113, &(0x7f0000001f64)) 00:14:39 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") 00:14:39 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$kcm(0x29, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) dup3(r1, r2, 0x0) 00:14:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x54, 0x2, [{0x21, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x94}, 0x1}, 0x0) 00:14:39 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") 00:14:39 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r1, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x14) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2b, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000080)) 00:14:39 executing program 0: r0 = socket$inet6(0xa, 0x400000002, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x10f9}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 113.595477] netlink: 36 bytes leftover after parsing attributes in process `syz-executor1'. [ 113.622059] netlink: 29 bytes leftover after parsing attributes in process `syz-executor1'. 00:14:40 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") getsockopt$inet6_buf(r0, 0x29, 0xb, &(0x7f0000000080)=""/100, &(0x7f0000000140)=0x64) 00:14:40 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") 00:14:40 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x80045400, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) 00:14:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(echainiv(aegis128l))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) 00:14:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x2000400) fcntl$getown(r0, 0x2) 00:14:40 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x4) getsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000080), &(0x7f00000000c0)=0x3) 00:14:40 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") 00:14:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") close(r0) 00:14:40 executing program 5: r0 = shmat(0x0, &(0x7f0000007000/0x1000)=nil, 0x100000000004002) clone(0x0, &(0x7f00000042c0), &(0x7f00000041c0), &(0x7f0000004200), &(0x7f0000004240)) io_setup(0xf500, &(0x7f0000000100)) shmdt(r0) 00:14:40 executing program 1: getpid() pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) creat(&(0x7f00000000c0)='./file1\x00', 0x0) dup2(r0, r1) 00:14:40 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@gid={'gid', 0x3d, [0x38]}, 0x2c}]}) [ 114.284496] hfsplus: unable to find HFS+ superblock [ 114.318119] hfsplus: unable to find HFS+ superblock 00:14:40 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r3, &(0x7f0000008300)=[{{&(0x7f0000004a80)=@rc, 0x80, &(0x7f0000007f00), 0x0, &(0x7f0000007f80)=""/229, 0xe5}}, {{0x0, 0x0, &(0x7f00000081c0), 0x0, &(0x7f0000008200)=""/222, 0xde}}], 0x2, 0x0, &(0x7f0000008440)={0x0, 0x989680}) 00:14:40 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$kcm(0x29, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) dup3(r1, r2, 0x0) 00:14:40 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@nfc_llcp, 0xfffffffffffffee3, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/11, 0xb}], 0x1, &(0x7f0000000100)=""/193, 0xc1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x1bd, 0x0) 00:14:40 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") tkill(r1, 0x1000000000016) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='y'], 0x1) 00:14:40 executing program 0: prctl$getreaper(0x2f, &(0x7f0000000000)) 00:14:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x3) 00:14:40 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) 00:14:41 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x80045400, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) 00:14:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0x4008af30, 0x0) 00:14:41 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') read(r0, &(0x7f0000000080)=""/124, 0x7c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) read(r0, &(0x7f0000000180)=""/230, 0x36e) 00:14:41 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x9) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x41, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000480)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000500)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000600)=0xe8) getpeername$packet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000680)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000880)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x120, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000010}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x31, 0x119, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}, 0x1}, 0x0) 00:14:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100), 0x4) 00:14:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r1, 0xdb, "2fa23e", "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"}}, 0x110) 00:14:41 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') read(r0, &(0x7f0000000080)=""/124, 0x7c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) read(r0, &(0x7f0000000180)=""/230, 0x36e) [ 115.086244] netlink: get zone limit has 4 unknown bytes 00:14:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)={0x0, 0x9}) write(r2, &(0x7f0000000040)='~C\n', 0x3) 00:14:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000100)=[{0x0, 0xc39b, 0x1800}], 0x1) 00:14:41 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') read(r0, &(0x7f0000000080)=""/124, 0x7c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) read(r0, &(0x7f0000000180)=""/230, 0x36e) 00:14:41 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$kcm(0x29, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) dup3(r1, r2, 0x0) 00:14:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000040)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000400)=""/185, 0x80000000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) 00:14:41 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x100000001}}], 0x0, 0x0, &(0x7f00000007c0)}) 00:14:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x30) 00:14:41 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') read(r0, &(0x7f0000000080)=""/124, 0x7c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) read(r0, &(0x7f0000000180)=""/230, 0x36e) 00:14:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x90, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') [ 115.492999] binder: 9906:9907 transaction failed 29201/-28, size 0-0 line 2967 [ 115.527492] binder_alloc: binder_alloc_mmap_handler: 9906 20001000-20004000 already mapped failed -16 [ 115.551187] binder: BINDER_SET_CONTEXT_MGR already set [ 115.568426] binder: 9906:9907 ioctl 40046207 0 returned -16 [ 115.586455] binder_alloc: 9906: binder_alloc_buf, no vma [ 115.592218] binder: 9906:9925 transaction failed 29189/-3, size 0-0 line 2967 [ 115.620906] binder: undelivered TRANSACTION_ERROR: 29189 [ 115.626828] binder: undelivered TRANSACTION_ERROR: 29201 00:14:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3b03996ff05abb1e8b1c24b50898d8f", 0x10}]) 00:14:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6_sctp(0xa, 0x100000000000005, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), 0x4) getsockname(r1, &(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80) 00:14:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4040aea0, &(0x7f0000000140)={0x2}) 00:14:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x7000, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) 00:14:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 00:14:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x108) 00:14:42 executing program 2: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team0\x00', 0xc201}) 00:14:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000100)) 00:14:42 executing program 5: r0 = socket(0x400800000000011, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000daffffffffffffd000", 0x20100f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 00:14:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x108) [ 115.991162] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.019454] 8021q: adding VLAN 0 to HW filter on device team0 00:14:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x5381, &(0x7f0000000000)) 00:14:42 executing program 2: mmap(&(0x7f0000008000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 00:14:42 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x5421, 0x20702ffe) 00:14:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000100)) 00:14:42 executing program 0: prctl$seccomp(0x21, 0x1, &(0x7f00005d295e)={0x0, &(0x7f0000ab9000)}) prctl$void(0x22) 00:14:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x2}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 00:14:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x108) 00:14:42 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_elf32(r1, &(0x7f0000001000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/92, 0x200002dc}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 00:14:42 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 00:14:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000280)) 00:14:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='mountstats\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="4cd4d394cb3c9f695ae515eff31cc50a53b945a51964f0df30e63409", 0x1c) sendfile(r2, r1, &(0x7f000025d000), 0x734) 00:14:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0x40000000000a, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c0700bf012cf66f") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCSETSF(r2, 0x5432, &(0x7f0000000000)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 00:14:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000100)) 00:14:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x108) 00:14:43 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0xe, &(0x7f0000018000)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x8c) 00:14:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000100)) 00:14:43 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x7, @scatter={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f00000004c0)="abc0b501df7e354ee21a0e461d4074b3fe6860227fcd663b2149358c2a2c9bfb41", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 00:14:43 executing program 5: r0 = socket$inet6(0xa, 0x1200000000000802, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) 00:14:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000ce9d26de000009593a5e0e4e41000000000002"]) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 00:14:43 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) [ 116.827823] sd 0:0:1:0: [sg0] tag#600 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 116.836639] sd 0:0:1:0: [sg0] tag#600 CDB: opcode=0xab, sa=0x0 [ 116.842688] sd 0:0:1:0: [sg0] tag#600 CDB[00]: ab c0 b5 01 df 7e 35 4e e2 1a 0e 46 1d 40 74 b3 [ 116.851495] sd 0:0:1:0: [sg0] tag#600 CDB[10]: fe 68 60 22 7f cd 66 3b 21 49 35 8c 2a 2c 9b fb [ 116.860311] sd 0:0:1:0: [sg0] tag#600 CDB[20]: 41 00:14:43 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 00:14:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ftruncate(0xffffffffffffffff, 0x400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a40), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) 00:14:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0xffffffffffffffff, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 00:14:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000007700)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000076c0)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0xe}]}, 0x28}, 0x1}, 0x0) 00:14:43 executing program 2: r0 = socket(0x100000000000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000180)={{0x7fffffff, 0x100000000000b}}) 00:14:43 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3ef) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 00:14:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) dup3(r1, r2, 0x0) 00:14:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/135) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) tkill(r2, 0x1004000000016) 00:14:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(r0, 0x1268, &(0x7f0000000040)) 00:14:44 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) 00:14:44 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000000c0)="b9800000c00f3235008000000f30b9b8080000b8c897c43eba000000000f30f2420f330f090f00e466b83b010f00d00f20d835080000000f22d8b9800000c00f3235001000000f30660f6138c403295e7bf027", 0x53}], 0x1, 0x0, &(0x7f0000000200), 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000), 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:14:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:44 executing program 7: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f4, &(0x7f00000001c0)={'sit0\x00', @ifru_data=&(0x7f0000000000)="00b4ae9fca19fba868f03158de8d12d04ed14126c514de7b02ade828cb2a0180"}) 00:14:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x40000000fb) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 00:14:44 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000240)={@multicast1=0xe0000001, @multicast2=0xe0000002}, 0x8) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2=0xe0000002, @multicast1=0xe0000001}, 0x8) [ 117.971269] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:14:44 executing program 7: syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef8100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000f7ffffff2c000000000000889311812e0ab5b267c2f1865f8d2fe7d034d0bcef109894eee2f347990169a89b7980fe367655f63c2f607c0baed6a7694416ac1297b4e2c617f6862a3c59bbb62715ca5e5508c2296afc6879a92faa97f0812973942f88ed2f92d3413b84492f3a81cac3c6f370bc814e60", 0xd0, 0x400}], 0x0, &(0x7f0000000000)) [ 118.171506] EXT4-fs (loop7): filesystem is read-only [ 118.176935] EXT4-fs (loop7): Number of reserved GDT blocks insanely large: 24654 00:14:44 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) read(r1, &(0x7f0000000140)=""/117, 0x75) 00:14:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x20000003) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000001240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)) close(r1) r2 = accept4(r0, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6gretap0\x00', 0x10) recvfrom$inet(r2, &(0x7f0000000200)=""/12, 0xc, 0x0, 0x0, 0x0) [ 118.618844] EXT4-fs (loop7): filesystem is read-only [ 118.624204] EXT4-fs (loop7): Number of reserved GDT blocks insanely large: 24654 00:14:45 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 118.773152] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:14:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x3) 00:14:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getrandom(&(0x7f0000001740)=""/40, 0x102ca, 0x0) 00:14:45 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0xbdb30158900a1e0b}, 0x10) 00:14:45 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) 00:14:45 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="383a300dd1930765b5e3e4c0a5d72bb27168c96663cf5b9c82fab520"], 0x1c) 00:14:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getroute={0x1c, 0x1a, 0x201, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0) 00:14:45 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) read(r1, &(0x7f0000000140)=""/117, 0x75) 00:14:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef8100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000f7ffffff2c000000000000889311812e0ab5b267c2f1865f8d2fe7d034d0bcef109894eee2f347990169a89b7980fe367655f63c2f607c0baed6a7694416ac1297b4e2c617f6862a3c59bbb62715ca5e5508c2296afc6879a92faa97f0812973942f88ed2f92d3413b84492f3a81cac3c6f370bc814e60", 0xd0, 0x400}], 0x0, &(0x7f0000000000)) 00:14:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 00:14:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:45 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setpipe(r1, 0x407, 0x0) write$sndseq(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"62dd50589e5fc28c058f5cab"}}], 0x30) dup2(r0, r2) 00:14:45 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001640)=""/37, 0x25}}], 0x1, 0x0, &(0x7f0000004080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) 00:14:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0f30"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:45 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) read(r1, &(0x7f0000000140)=""/117, 0x75) [ 119.537154] EXT4-fs (loop7): filesystem is read-only [ 119.542400] EXT4-fs (loop7): Number of reserved GDT blocks insanely large: 24654 00:14:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef8100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000f7ffffff2c000000000000889311812e0ab5b267c2f1865f8d2fe7d034d0bcef109894eee2f347990169a89b7980fe367655f63c2f607c0baed6a7694416ac1297b4e2c617f6862a3c59bbb62715ca5e5508c2296afc6879a92faa97f0812973942f88ed2f92d3413b84492f3a81cac3c6f370bc814e60", 0xd0, 0x400}], 0x0, &(0x7f0000000000)) 00:14:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 00:14:46 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 00:14:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) listen(r0, 0x87) accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000000040)=0xd) [ 119.684764] EXT4-fs (loop7): filesystem is read-only [ 119.690057] EXT4-fs (loop7): Number of reserved GDT blocks insanely large: 24654 00:14:46 executing program 7: syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef8100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000f7ffffff2c000000000000889311812e0ab5b267c2f1865f8d2fe7d034d0bcef109894eee2f347990169a89b7980fe367655f63c2f607c0baed6a7694416ac1297b4e2c617f6862a3c59bbb62715ca5e5508c2296afc6879a92faa97f0812973942f88ed2f92d3413b84492f3a81cac3c6f370bc814e60", 0xd0, 0x400}], 0x0, &(0x7f0000000000)) 00:14:46 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) read(r1, &(0x7f0000000140)=""/117, 0x75) 00:14:46 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) 00:14:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 119.857461] EXT4-fs (loop7): filesystem is read-only [ 119.862650] binder_alloc: binder_alloc_mmap_handler: 10232 20000000-20002000 already mapped failed -16 [ 119.872179] EXT4-fs (loop7): Number of reserved GDT blocks insanely large: 24654 00:14:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000000180)='T'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)}) 00:14:46 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000001540)='/dev/snd/seq\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001340)=""/150, 0x96}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000044000)) close(r0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 00:14:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{}, {}, {}, {0x0, 0x11f004, 0x0, 0x0, 0x7fffffff, 0xc, 0x2, 0x2, 0x0, 0x0, 0x6d50}, {0x2004, 0x0, 0xf, 0x9, 0x6, 0x2}, {0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x0, 0x81}, {0x0, 0x3000, 0xd, 0x5, 0x7ff, 0x0, 0x0, 0x0, 0xc8}, {0x0, 0x16000, 0xf}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118"}], 0x1, 0xfee64b5def490aec, &(0x7f0000000340), 0x100000000000024d) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x14) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:14:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x400000000000141, 0x0, 0x0) 00:14:46 executing program 7: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x28, 0x24, 0x217, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @pid}]}, @typed={0x8, 0x0, @fd}]}, 0x46}, 0x1}, 0x0) 00:14:46 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x40042408, &(0x7f0000000040)) close(r1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:14:46 executing program 7: keyctl$set_reqkey_keyring(0x3, 0xffffffffffffffff) [ 120.448624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 00:14:46 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x11, r1) 00:14:46 executing program 7: perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000180)=""/30, &(0x7f0000000000)=0x1e) 00:14:46 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 00:14:47 executing program 1: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4c0000001200ff09fffefd956fa283b724a6007400000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6d78c2b2ca654a6613b6aabf35d0f1cbc882b07", 0x4c}], 0x1}, 0x0) 00:14:47 executing program 7: syz_mount_image$gfs2(&(0x7f0000000440)='gfs2\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f00000004c0)="3a04fac584dd70cc5a60190f758c30c4ee5a5f86a79f6d91c549c4088ed86116c9cc6fad487303665bc1e9340dae09c98d1e44123ea7d6380e3e07658118b20f08399f45d2", 0x45}], 0x0, &(0x7f0000000c00)=ANY=[]) syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='uid=']) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000500)) [ 120.712594] syz-executor1 (10275) used greatest stack depth: 14904 bytes left [ 120.752462] gfs2: not a GFS2 filesystem 00:14:47 executing program 1: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4c0000001200ff09fffefd956fa283b724a6007400000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6d78c2b2ca654a6613b6aabf35d0f1cbc882b07", 0x4c}], 0x1}, 0x0) [ 120.770623] jfs: Unrecognized mount option "uid=Ò" or missing value [ 120.787807] tmpfs: Bad value 'Ò' for mount option 'uid' [ 120.797683] gfs2: not a GFS2 filesystem [ 120.815576] tmpfs: Bad value 'Ò' for mount option 'uid' 00:14:47 executing program 6: msgget(0x3, 0x0) msgget$private(0x0, 0x0) msgget(0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) msgget$private(0x0, 0x0) msgget(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000580)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@llc={0x4, {@llc={0x0, 0x0, "af"}}}}}, &(0x7f0000000040)) msgget(0xffffffffffffffff, 0x0) msgctl$MSG_STAT(0x0, 0xd, &(0x7f0000000680)=""/65) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000380)) syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000540)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) [ 120.828483] jfs: Unrecognized mount option "uid=Ò" or missing value 00:14:47 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0xf0, &(0x7f0000000000), 0x19) [ 120.889160] binder: BINDER_SET_CONTEXT_MGR already set [ 120.896692] binder: 10241:10296 ioctl 40046207 0 returned -16 00:14:47 executing program 2: r0 = getpid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000580)={0xaa}) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x6) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2), 0xffffffee) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) dup2(r1, r3) 00:14:47 executing program 1: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4c0000001200ff09fffefd956fa283b724a6007400000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6d78c2b2ca654a6613b6aabf35d0f1cbc882b07", 0x4c}], 0x1}, 0x0) 00:14:47 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r0, &(0x7f00009fc000), 0x5fa, 0x8000, &(0x7f0000357000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") sendto$inet(r0, &(0x7f0000000040)="b2e88a", 0x3, 0x0, &(0x7f0000000140)={0x2}, 0x10) [ 121.020735] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:14:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=@allocsize={'allocsize', 0x3d, [0x39, 0x6d]}) 00:14:47 executing program 4: r0 = socket$inet6(0xa, 0x2000000806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 00:14:47 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00007a1ff6)='fdinfo/4\x00') sendfile(r0, r1, &(0x7f00004db000)=0x6000000, 0xff) 00:14:47 executing program 1: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4c0000001200ff09fffefd956fa283b724a6007400000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6d78c2b2ca654a6613b6aabf35d0f1cbc882b07", 0x4c}], 0x1}, 0x0) 00:14:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000000)=0x10) read$eventfd(r1, &(0x7f0000000040), 0x8) 00:14:47 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x34, r0, 0x604bb4a2b40374d5, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}]}, 0x34}, 0x1}, 0x0) 00:14:47 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0x23de4e66}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 00:14:47 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 00:14:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303}, @increfs={0x40406300}], 0x0, 0x0, &(0x7f0000000200)}) 00:14:47 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setrlimit(0x7, &(0x7f0000a9cff8)) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r1, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) 00:14:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000021]}) 00:14:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xa}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 00:14:47 executing program 6: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) [ 121.573260] binder: 10367:10368 BC_FREE_BUFFER u0000000000000000 no match [ 121.614537] binder: 10367:10368 transaction failed 29189/-22, size 0-0 line 2852 [ 121.647795] capability: warning: `syz-executor7' uses deprecated v2 capabilities in a way that may be insecure [ 121.688412] binder: undelivered TRANSACTION_ERROR: 29189 00:14:48 executing program 2: r0 = socket(0x400800000000011, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"69666230000800ffffffffffff00", 0x201013}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 00:14:48 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1, 0x10000}) 00:14:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303}, @increfs={0x40406300}], 0x0, 0x0, &(0x7f0000000200)}) 00:14:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x8100, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="399844b4d6ac1a59cc3afa6ab6b5087f88a8", 0x12}], 0x1, &(0x7f0000dda000)}], 0x1, 0x0) 00:14:48 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f00000100c0)=[{{&(0x7f0000009900)=@hci, 0x80, &(0x7f000000bc00), 0x0, &(0x7f000000bc80)=""/115, 0x73}}], 0x1, 0x0, &(0x7f0000010380)) shutdown(r0, 0x0) 00:14:48 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d564c90c6000000000000000000000000", 0x18) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001580)={&(0x7f0000001480)={0x10}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) recvfrom$inet6(r2, &(0x7f0000001640)=""/32, 0x20, 0x0, &(0x7f0000001680)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x709000) 00:14:48 executing program 7: syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='ntfs\x00', 0x0, 0x0) 00:14:48 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f00000000c0)=0x68) [ 121.876101] binder: 10396:10398 BC_FREE_BUFFER u0000000000000000 no match [ 121.887763] ntfs: (device loop199): ntfs_fill_super(): Unable to determine device size. [ 121.897988] binder: 10396:10398 transaction failed 29189/-22, size 0-0 line 2852 00:14:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000004e0007241dfffd946fa2830020090a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:14:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303}, @increfs={0x40406300}], 0x0, 0x0, &(0x7f0000000200)}) [ 121.969370] binder: undelivered TRANSACTION_ERROR: 29189 [ 122.013753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 122.030876] binder: 10419:10420 BC_FREE_BUFFER u0000000000000000 no match [ 122.048134] binder: 10419:10420 transaction failed 29189/-22, size 0-0 line 2852 [ 122.101973] binder: undelivered TRANSACTION_ERROR: 29189 00:14:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303}, @increfs={0x40406300}], 0x0, 0x0, &(0x7f0000000200)}) 00:14:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="f1", 0x1, 0x480d0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) 00:14:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x5, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 00:14:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x200000000000001e, &(0x7f0000000040)}, 0x4) 00:14:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) eventfd(0x10007) 00:14:48 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, r1) setresuid(r1, r1, 0x0) [ 122.362369] binder: 10431:10435 BC_FREE_BUFFER u0000000000000000 no match [ 122.397978] binder: 10431:10435 transaction failed 29189/-22, size 0-0 line 2852 [ 122.471536] binder: undelivered TRANSACTION_ERROR: 29189 00:14:49 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x2000001, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40106309}], 0x0, 0x0, &(0x7f00000000c0)}) 00:14:49 executing program 5: syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) dup2(r0, r1) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 00:14:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f00000100c0)=[{{&(0x7f0000009900)=@hci, 0x80, &(0x7f000000bc00), 0x0, &(0x7f000000bc80)=""/115, 0x73}}], 0x1, 0x0, &(0x7f0000010380)) shutdown(r0, 0x0) 00:14:49 executing program 6: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, 0x0, r0) 00:14:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip_vti0\x00', 0x10) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x624) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x652, 0x4) sendto$inet(r0, &(0x7f0000000380)="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", 0x505, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0x10) 00:14:49 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x57}, [], {0x95}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x46f, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x48) [ 123.169194] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:14:49 executing program 7: syz_read_part_table(0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 00:14:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) dup2(r0, r1) 00:14:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000000240), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x200000d8) 00:14:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)=@ioapic={0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x0, 0xffffffffffffffff}) [ 123.276435] binder: 10461:10463 BC_ACQUIRE_DONE u0000000000000000 no match 00:14:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x14) [ 123.344883] binder: 10461:10470 unknown command 0 [ 123.350647] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 123.360414] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 123.360721] binder: 10461:10470 ioctl c0306201 20a20000 returned -22 [ 123.366419] loop7: p1 p2 p3 p4 00:14:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") semctl$GETALL(0x0, 0x0, 0x13, &(0x7f0000000400)=""/9) 00:14:49 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmmsg(r0, &(0x7f0000005480), 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/195, 0xc3}], 0x1, &(0x7f00000011c0)=""/192, 0xc0}}, {{&(0x7f0000001280)=@pppol2tp, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001600)=""/167, 0xa7}], 0x1, &(0x7f0000001740)=""/140, 0x8c}}], 0x2, 0x40010101, &(0x7f0000001880)={0x0, 0x1c9c380}) [ 123.406688] loop7: p2 size 100 extends beyond EOD, truncated [ 123.440828] loop7: p3 start 201 is beyond EOD, truncated [ 123.446421] loop7: p4 start 301 is beyond EOD, truncated 00:14:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000380)=""/4096, 0x35) migrate_pages(r0, 0x200, &(0x7f0000000140), &(0x7f0000000300)=0x3) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1b, 0x3, @thr={&(0x7f0000001380), &(0x7f0000000200)}}) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000002380)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x5, 0x40}, 0x3ff}, 0xa) 00:14:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040)=0x1000000, 0x4) 00:14:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") semctl$GETALL(0x0, 0x0, 0x13, &(0x7f0000000400)=""/9) 00:14:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./.ile1\x00', 0x0) [ 123.700154] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 123.709539] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 123.715528] loop7: p1 p2 p3 p4 [ 123.731409] loop7: p2 size 100 extends beyond EOD, truncated [ 123.745626] loop7: p3 start 201 is beyond EOD, truncated [ 123.751228] loop7: p4 start 301 is beyond EOD, truncated 00:14:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") semctl$GETALL(0x0, 0x0, 0x13, &(0x7f0000000400)=""/9) 00:14:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./f-0e0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x800, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 00:14:50 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 00:14:50 executing program 5: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) 00:14:50 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/93, 0x5d, 0x7}, 0x5a}], 0x1, 0x100, &(0x7f0000000680)={0x77359400}) sendto$llc(r0, &(0x7f0000000340)="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", 0x11d, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 00:14:50 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)='\\trusted+posix_acl_access/keyring\x00', 0x22, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000240)='\\trusted+posix_acl_access/keyring\x00', 0x22, 0x0) 00:14:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f00000100c0)=[{{&(0x7f0000009900)=@hci, 0x80, &(0x7f000000bc00), 0x0, &(0x7f000000bc80)=""/115, 0x73}}], 0x1, 0x0, &(0x7f0000010380)) shutdown(r0, 0x0) 00:14:50 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000a07fff)) 00:14:50 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x41032, 0xffffffffffffffff, 0x0) 00:14:50 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xa}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) 00:14:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") semctl$GETALL(0x0, 0x0, 0x13, &(0x7f0000000400)=""/9) 00:14:50 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4004af07, 0x800000) 00:14:50 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f000048b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ca9000/0x1000)=nil, 0x1002, 0x2000d, 0x2051, r0, 0x80000000) 00:14:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x9}, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="850000002f00000027000000000022009500000000000000"], &(0x7f0000000000)="f4206cd55d3174fccd51d063ca3dda5cbf5a01cc7ea92c43b604ffc53727d2d60f55ddeb757cf36a8457125ab48bcbcce4011a423df186cc8d8e6e9a66b1a0a6035a2fc0578cf5aad8b3a24a9c646a37eb26c6212ffc9658f152194b880765d169d550beb059984a10c2", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) dup2(r1, r0) 00:14:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="0f4a7db426670f01c466ba2100b0f0eec4c2b9090348b800800000000000000f23d00f21f835300000060f23f8c401fd50e1c4e279a98f5a0000000f01b7fc000000450f3566460f388298759514e3", 0x4f}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000080)={0x90, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0x90}, 0x1}, 0x0) 00:14:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x80047453, &(0x7f0000000000)) 00:14:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="c9", 0x1}], 0x1, &(0x7f0000000400)}, 0x0) recvmsg$kcm(r0, &(0x7f0000003540)={&(0x7f0000003340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000033c0)=""/230, 0xe6}], 0x1, &(0x7f0000003500)=""/9, 0x9}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003580)={0x3, 0x2, &(0x7f0000000040)=@raw=[@exit={0x95}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x59, &(0x7f0000000380)=""/89, 0x0, 0x0, [], r2}, 0x48) 00:14:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cmdline\x00') exit(0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 00:14:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000640)="9c7e22f8475f291e4b214e9ecd218046c2be2fbcabf324c17308087de6469e87617a7dc669abac5bd1067ba76b3fe936e72e3a07e71870ef81418900ca4d87e4e588efbcc38dff03400624f7848c919626962e136983e21a5e80dca8b3bde7173aedd168be4090306a9510a54bffa08d9403ea5d728883704e04b3ef5f82fe7fe99f8968cf125bf9bca3f1c7ceef744c9df62adb450251f9dff00a38246c02c18b178c65c7e816c71b0839c6667ae8d2d4f2f47c31e9194e2b679f70cc604571", 0xc0, r2) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a}, &(0x7f0000000000)="b3", 0x1, r4) keyctl$update(0x2, r5, &(0x7f0000000480)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4", 0x48) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r3, r5}, &(0x7f0000000300)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f00000002c0)={'crc32c-generic\x00'}}) [ 124.427584] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 124.435054] netlink: 'syz-executor5': attribute type 3 has an invalid length. 00:14:51 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/93, 0x5d, 0x7}, 0x5a}], 0x1, 0x100, &(0x7f0000000680)={0x77359400}) sendto$llc(r0, &(0x7f0000000340)="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", 0x11d, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 00:14:51 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)) 00:14:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ffffffff82f4dd6f515b9aad52af35285c860709ce151e788f9eae9b03790126", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x304, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000012c0)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000001240)=""/87, 0x57}, 0x0) 00:14:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}}, &(0x7f0000000340)=0xb0) 00:14:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x28, 0xe}]}, 0x50}, 0x1}, 0x0) 00:14:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="551091eb3abacdc704d38beb0a77ec50034aea6903644c9c8ecb284ffcc50cd9067c8c1dc7e4ca38e8fc4ce8d753718814216fa1b7c61c101102d3c95121111d1769b7f0eca862e023033e6a254b3367", @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16=r1]], @ANYPTR64=&(0x7f0000001bc0)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYPTR=&(0x7f0000001a00)=ANY=[@ANYPTR64, @ANYPTR64, @ANYPTR64], @ANYPTR64, @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYRES64, @ANYPTR]], @ANYBLOB], 0x60) ftruncate(r0, 0x800) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000300)=""/225, 0xe1, &(0x7f0000000000)=""/8}}, 0x68) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 00:14:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f00000100c0)=[{{&(0x7f0000009900)=@hci, 0x80, &(0x7f000000bc00), 0x0, &(0x7f000000bc80)=""/115, 0x73}}], 0x1, 0x0, &(0x7f0000010380)) shutdown(r0, 0x0) 00:14:51 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f00000000c0), 0xf3) [ 125.002149] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 125.021930] FAT-fs (loop7): Directory bread(block 128) failed 00:14:51 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x27, 0x1, 0x0, 0x0, {0x12}, [@nested={0xc, 0x77, [@typed={0x8, 0x0, @u32}, @generic]}]}, 0x20}, 0x1}, 0x0) [ 125.056680] FAT-fs (loop7): Directory bread(block 129) failed [ 125.083842] FAT-fs (loop7): Directory bread(block 130) failed 00:14:51 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f00000000c0), 0xf3) [ 125.097308] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 125.114153] FAT-fs (loop7): Directory bread(block 131) failed [ 125.122488] FAT-fs (loop7): Directory bread(block 132) failed [ 125.128977] FAT-fs (loop7): Directory bread(block 133) failed [ 125.147154] FAT-fs (loop7): Directory bread(block 134) failed [ 125.156516] FAT-fs (loop7): Directory bread(block 135) failed 00:14:51 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netstat\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 00:14:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492499f, 0xc0) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1800000000003, 0x1) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") close(r1) close(r0) 00:14:51 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f00000000c0), 0xf3) 00:14:51 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x2000, 0x4) close(r1) [ 125.185928] FAT-fs (loop7): Directory bread(block 136) failed [ 125.200759] FAT-fs (loop7): Directory bread(block 137) failed [ 125.261865] attempt to access beyond end of device [ 125.267186] loop7: rw=2049, want=310, limit=128 [ 125.272165] Buffer I/O error on dev loop7, logical block 309, lost async page write [ 125.314132] attempt to access beyond end of device [ 125.319216] loop7: rw=2049, want=311, limit=128 [ 125.323946] Buffer I/O error on dev loop7, logical block 310, lost async page write [ 125.334125] attempt to access beyond end of device [ 125.339161] loop7: rw=2049, want=312, limit=128 [ 125.343887] Buffer I/O error on dev loop7, logical block 311, lost async page write [ 125.358849] attempt to access beyond end of device [ 125.363955] loop7: rw=2049, want=313, limit=128 [ 125.368693] Buffer I/O error on dev loop7, logical block 312, lost async page write [ 125.386308] attempt to access beyond end of device [ 125.391381] loop7: rw=2049, want=326, limit=128 [ 125.396104] Buffer I/O error on dev loop7, logical block 325, lost async page write [ 125.407138] attempt to access beyond end of device [ 125.412381] loop7: rw=0, want=326, limit=128 [ 125.427526] attempt to access beyond end of device [ 125.432621] loop7: rw=2049, want=330, limit=128 [ 125.437339] Buffer I/O error on dev loop7, logical block 329, lost async page write [ 125.445353] attempt to access beyond end of device [ 125.450404] loop7: rw=0, want=330, limit=128 00:14:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$inet(r1, &(0x7f0000000b00)=""/188, 0xbc, 0x0, &(0x7f0000000bc0)={0x2, 0x0, @multicast2=0xe0000002}, 0x700000) 00:14:51 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f00000000c0), 0xf3) 00:14:52 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/93, 0x5d, 0x7}, 0x5a}], 0x1, 0x100, &(0x7f0000000680)={0x77359400}) sendto$llc(r0, &(0x7f0000000340)="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", 0x11d, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 00:14:52 executing program 4: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$kcm(0x2, 0x6, 0x0) getsockopt$bt_hci(r1, 0x10d, 0x2, &(0x7f0000000200)=""/86, &(0x7f00000001c0)=0x56) 00:14:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) 00:14:52 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") get_mempolicy(&(0x7f0000000080), &(0x7f00003e8000), 0x401, &(0x7f0000336000/0x3000)=nil, 0x3) 00:14:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x2000004000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)="2e54c34205f4d6d7a7bc105c16d8b5c4fcb07a80c5c45fdf53917c856310813702c0be6718d3c19deb9c7e16a0478d6881a10c0bf6698a941f6976c0d15e450c3ad484ed47c78636de0f31808092e26577a358e3ae2a19768f557741d05befdaab8502c425d4ef99c88da77ab7bc4e428db37386edd7fcb63b44d067038ad481731dc7aae1874f4591bbfa2b77799e47cbb1cf1bba0a6d5947bf95e0a391b5183340d63cf8f0bd5b1975c546ccf45ea57f9dac9b706dcb2ca6a789dae9ecd1188c5c", 0xc2}, {&(0x7f0000000380)}, {&(0x7f0000000580)="5435f296505d1fa1ac9be5e8c38860", 0xf}, {&(0x7f0000000680)="cd", 0x1}, {&(0x7f0000000880)}], 0x5, &(0x7f0000000000)}, 0x8000) recvmsg(r2, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x70, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 00:14:52 executing program 1: mkdir(&(0x7f0000001300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x40460, &(0x7f00000012c0)={[{@mode={'mode', 0x3d, [0x35]}, 0x2c}]}) 00:14:52 executing program 3: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f0000000300)=@barrier='barrier') [ 125.905736] devpts: called with bogus options 00:14:52 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00002a7ffc)=0x4000000011) ioctl$GIO_SCRNMAP(r0, 0x8924, &(0x7f0000000000)=""/216) [ 125.943498] XFS (loop3): barrier option is deprecated, ignoring. 00:14:52 executing program 1: mkdir(&(0x7f0000001300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x40460, &(0x7f00000012c0)={[{@mode={'mode', 0x3d, [0x35]}, 0x2c}]}) 00:14:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000240007031dfffd946f61830020200a0009000000ff1c8568f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) [ 126.060300] XFS (loop3): Invalid superblock magic number 00:14:52 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1c) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom$inet(r0, &(0x7f00000002c0)=""/248, 0x7b, 0x0, 0x0, 0x0) [ 126.114543] XFS (loop3): barrier option is deprecated, ignoring. 00:14:52 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents64(r0, &(0x7f0000000100)=""/66, 0x28b) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 00:14:52 executing program 1: mkdir(&(0x7f0000001300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x40460, &(0x7f00000012c0)={[{@mode={'mode', 0x3d, [0x35]}, 0x2c}]}) 00:14:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000100008000000000000000000007"]) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [0xc0010141]}) [ 126.198091] XFS (loop3): Invalid superblock magic number 00:14:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 00:14:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)) 00:14:53 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/93, 0x5d, 0x7}, 0x5a}], 0x1, 0x100, &(0x7f0000000680)={0x77359400}) sendto$llc(r0, &(0x7f0000000340)="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", 0x11d, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 00:14:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000380)) 00:14:53 executing program 1: mkdir(&(0x7f0000001300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x40460, &(0x7f00000012c0)={[{@mode={'mode', 0x3d, [0x35]}, 0x2c}]}) 00:14:53 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents64(r0, &(0x7f0000000100)=""/66, 0x28b) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 00:14:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000004c0)) 00:14:53 executing program 7: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x401, 0x0, &(0x7f00000002c0), 0x0, 0x0) 00:14:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)) 00:14:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = dup(r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7f}) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) [ 126.897860] MINIX-fs: unable to read superblock 00:14:53 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x20}) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 00:14:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)) [ 126.997972] MINIX-fs: unable to read superblock 00:14:53 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents64(r0, &(0x7f0000000100)=""/66, 0x28b) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 00:14:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000001880)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/229) 00:14:53 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[], 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000001c0)) close(r2) close(r0) 00:14:53 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xc1}) write$sndseq(r1, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)) 00:14:53 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents64(r0, &(0x7f0000000100)=""/66, 0x28b) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 00:14:53 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300), 0x8) 00:14:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x200000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000004640)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000004600)={&(0x7f0000003d00)={0x188, 0x0, 0x0, 0x0, 0x0, {0x3}, [{{0x8, 0x1}, {0x16c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}]}}]}, 0x188}, 0x1}, 0x0) recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000240)=@hci, 0x80, &(0x7f00000049c0), 0x0, &(0x7f0000004a40)=""/241, 0xf1}}], 0x1, 0x10002, &(0x7f0000000200)={0x77359400}) 00:14:53 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000001100)=""/182, 0xb6) getdents(r1, &(0x7f0000000180)=""/186, 0xba) 00:14:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="41dbf7b8010000000f01d90f01cbb9100400000f3266ba420066edc4225d2e4cfb00f3410f11fc640f21f50f01f8470f30", 0x31}], 0x1, 0x77, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="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", 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000002c0)) 00:14:54 executing program 6: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0)=@kern={0x10}, 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="1000007f0ad21853315b6402b153"], 0x1}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)=0x1) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 00:14:54 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000080)="2e2f66696c65302f662e6c6530f0", 0x40003ffd, 0x0) open(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x8042, 0x0) 00:14:54 executing program 0: waitid(0x1, 0x0, 0x0, 0x8, 0x0) 00:14:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 00:14:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 00:14:54 executing program 6: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) r1 = gettid() r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 00:14:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000001880)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/229) 00:14:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000002c0)}}], 0x2, 0x0) 00:14:54 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[], 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000001c0)) close(r2) close(r0) 00:14:54 executing program 0: syz_fuseblk_mount(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 00:14:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8c}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 00:14:54 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xc1}) write$sndseq(r1, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:54 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0xf, 0x4) [ 128.370362] attempt to access beyond end of device [ 128.375622] loop7: rw=1, want=5841, limit=112 00:14:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r1, 0x89fd, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names='bond0\x00'}) 00:14:54 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000400)={0x0, 0x0}) prlimit64(r3, 0x0, 0x0, 0x0) 00:14:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x3fffa, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 00:14:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) 00:14:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) 00:14:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x4bd0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 00:14:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) 00:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000040)) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 00:14:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) [ 129.085510] attempt to access beyond end of device [ 129.090798] loop5: rw=2049, want=130, limit=112 [ 129.095542] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 129.117558] attempt to access beyond end of device [ 129.122647] loop5: rw=2049, want=131, limit=112 [ 129.127472] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 129.161446] attempt to access beyond end of device [ 129.166581] loop5: rw=2049, want=132, limit=112 [ 129.171316] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 129.180212] attempt to access beyond end of device [ 129.185324] loop5: rw=2049, want=133, limit=112 [ 129.190041] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 129.206891] attempt to access beyond end of device [ 129.211983] loop5: rw=2049, want=142, limit=112 [ 129.217535] attempt to access beyond end of device [ 129.222670] loop5: rw=2049, want=143, limit=112 [ 129.227920] attempt to access beyond end of device [ 129.232991] loop5: rw=2049, want=144, limit=112 [ 129.238664] attempt to access beyond end of device [ 129.243726] loop5: rw=2049, want=145, limit=112 [ 129.249332] attempt to access beyond end of device [ 129.254371] loop5: rw=2049, want=167, limit=112 [ 129.264974] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 129.273078] FAT-fs (loop5): Filesystem has been set read-only 00:14:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000c97ff8)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000001c0)={0x0, r2}) 00:14:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000001880)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/229) 00:14:55 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xc1}) write$sndseq(r1, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x4bd0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 00:14:55 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[], 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000001c0)) close(r2) close(r0) 00:14:55 executing program 6: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) r1 = gettid() r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 00:14:55 executing program 2: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="2f5a00002800000009000000840900007a74e1f825560800000004"]) r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0xc0c0583b, &(0x7f0000000000)) 00:14:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0xff00}, [], {0x95}}, &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096}, 0x48) [ 129.418890] attempt to access beyond end of device [ 129.423919] loop7: rw=1, want=114, limit=112 [ 129.444169] attempt to access beyond end of device [ 129.449200] loop7: rw=1, want=115, limit=112 [ 129.474503] attempt to access beyond end of device [ 129.479552] loop7: rw=1, want=116, limit=112 [ 129.479563] attempt to access beyond end of device [ 129.489148] loop5: rw=2049, want=130, limit=112 [ 129.494851] attempt to access beyond end of device [ 129.494944] attempt to access beyond end of device [ 129.500040] loop5: rw=2049, want=131, limit=112 [ 129.504985] loop7: rw=1, want=117, limit=112 [ 129.510356] attempt to access beyond end of device [ 129.519080] loop5: rw=2049, want=132, limit=112 [ 129.537846] attempt to access beyond end of device [ 129.542904] loop5: rw=2049, want=133, limit=112 [ 129.554759] IPVS: ftp: loaded support on port[0] = 21 [ 129.559403] attempt to access beyond end of device [ 129.562126] attempt to access beyond end of device [ 129.564980] loop7: rw=1, want=130, limit=112 [ 129.569897] loop5: rw=2049, want=142, limit=112 [ 129.578283] attempt to access beyond end of device 00:14:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000020000)={0x14, 0x18, 0x401, 0x0, 0x0, {0x1d, 0x2, 0xf}}, 0x14}, 0x1}, 0x0) [ 129.584145] loop7: rw=1, want=131, limit=112 [ 129.589196] attempt to access beyond end of device [ 129.594280] loop7: rw=1, want=132, limit=112 [ 129.599525] attempt to access beyond end of device [ 129.604590] loop7: rw=1, want=133, limit=112 [ 129.605957] attempt to access beyond end of device [ 129.614059] loop5: rw=2049, want=143, limit=112 00:14:56 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x20, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') creat(&(0x7f0000000000)='./file1\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) [ 129.637928] attempt to access beyond end of device [ 129.638142] attempt to access beyond end of device [ 129.642942] loop5: rw=2049, want=144, limit=112 [ 129.652616] loop7: rw=1, want=4237, limit=112 [ 129.654705] attempt to access beyond end of device [ 129.662138] loop5: rw=2049, want=145, limit=112 [ 129.669419] attempt to access beyond end of device [ 129.674437] loop5: rw=2049, want=167, limit=112 [ 129.691350] attempt to access beyond end of device [ 129.696385] loop7: rw=1, want=6949, limit=112 [ 129.717606] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 129.725547] FAT-fs (loop5): Filesystem has been set read-only 00:14:56 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x20, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') creat(&(0x7f0000000000)='./file1\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 00:14:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x4bd0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 00:14:56 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x20, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') creat(&(0x7f0000000000)='./file1\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 00:14:56 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x20, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') creat(&(0x7f0000000000)='./file1\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) [ 129.983971] attempt to access beyond end of device [ 129.989063] loop5: rw=2049, want=114, limit=112 [ 130.015346] attempt to access beyond end of device [ 130.020424] loop5: rw=2049, want=115, limit=112 [ 130.036072] attempt to access beyond end of device [ 130.041157] loop5: rw=2049, want=116, limit=112 [ 130.074904] attempt to access beyond end of device [ 130.079949] loop5: rw=2049, want=117, limit=112 00:14:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x9, &(0x7f0000000080), &(0x7f0000000040)=0x1) 00:14:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a}) [ 130.101963] attempt to access beyond end of device [ 130.107064] loop5: rw=2049, want=130, limit=112 [ 130.138456] attempt to access beyond end of device [ 130.143553] loop5: rw=2049, want=131, limit=112 [ 130.169287] attempt to access beyond end of device [ 130.174346] loop5: rw=2049, want=132, limit=112 [ 130.190051] attempt to access beyond end of device [ 130.195088] loop5: rw=2049, want=133, limit=112 [ 130.218592] attempt to access beyond end of device [ 130.223643] loop5: rw=2049, want=163, limit=112 [ 130.280322] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 130.288239] FAT-fs (loop5): Filesystem has been set read-only [ 130.694725] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.701187] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.708628] device bridge_slave_0 entered promiscuous mode [ 130.751512] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.757919] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.765230] device bridge_slave_1 entered promiscuous mode [ 130.800145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.834752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.939190] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.972491] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.983165] attempt to access beyond end of device [ 130.988233] loop7: rw=1, want=114, limit=112 [ 130.992711] buffer_io_error: 28 callbacks suppressed [ 130.992721] Buffer I/O error on dev loop7, logical block 113, lost async page write [ 131.005673] attempt to access beyond end of device [ 131.010645] loop7: rw=1, want=115, limit=112 [ 131.015086] Buffer I/O error on dev loop7, logical block 114, lost async page write [ 131.023806] attempt to access beyond end of device [ 131.028877] loop7: rw=1, want=116, limit=112 [ 131.033324] Buffer I/O error on dev loop7, logical block 115, lost async page write [ 131.044345] attempt to access beyond end of device [ 131.049451] loop7: rw=1, want=117, limit=112 [ 131.054419] Buffer I/O error on dev loop7, logical block 116, lost async page write [ 131.062353] attempt to access beyond end of device [ 131.067347] loop7: rw=1, want=130, limit=112 [ 131.071809] Buffer I/O error on dev loop7, logical block 129, lost async page write [ 131.080507] attempt to access beyond end of device [ 131.085486] loop7: rw=1, want=131, limit=112 [ 131.089940] Buffer I/O error on dev loop7, logical block 130, lost async page write [ 131.097836] attempt to access beyond end of device [ 131.102815] loop7: rw=1, want=132, limit=112 [ 131.107248] Buffer I/O error on dev loop7, logical block 131, lost async page write [ 131.115369] attempt to access beyond end of device [ 131.120345] loop7: rw=1, want=133, limit=112 [ 131.124790] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 131.137874] attempt to access beyond end of device [ 131.142846] loop7: rw=1, want=4237, limit=112 [ 131.151064] attempt to access beyond end of device [ 131.156039] loop7: rw=1, want=5829, limit=112 [ 131.172365] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.180764] team0: Port device team_slave_0 added [ 131.214125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 131.221513] team0: Port device team_slave_1 added [ 131.245236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.270572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.295272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.319855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.526888] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.533534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.540171] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.546523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.292261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.373575] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 132.451049] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 132.457321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.464944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.536151] 8021q: adding VLAN 0 to HW filter on device team0 00:14:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001540), 0x8, 0x0) 00:14:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x8004, 0x800000000001a, 0x0, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000026c000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="450f01cf66ba4300b04dee660f38338f0f000000c744240000000100c744240200000000c7442406000000000f0114240fd18f10ba94c83e466d41f466b8bc008ee8f30f0159e60f01bb07000000", 0x4e}], 0x1, 0x0, &(0x7f0000000180), 0x0) 00:14:59 executing program 2: r0 = memfd_create(&(0x7f00000000c0)=',cpuset\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000240)) 00:14:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x4bd0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 00:14:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[], 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000001c0)) close(r2) close(r0) 00:14:59 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xc1}) write$sndseq(r1, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 00:14:59 executing program 6: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) r1 = gettid() r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 00:14:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000001880)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/229) 00:14:59 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa}}, 0x0, 0x9, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8da1fcc6aabfb6f858e89070f966ea60a292a6a0c5e8000cea23baaeb2875a386d7b0e8210eca"}, 0xd8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 00:14:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001540), 0x8, 0x0) [ 133.089947] attempt to access beyond end of device [ 133.095055] loop5: rw=2049, want=130, limit=112 [ 133.099769] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 133.112880] attempt to access beyond end of device [ 133.117974] loop5: rw=2049, want=131, limit=112 [ 133.122777] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 133.131371] attempt to access beyond end of device 00:14:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384-avx)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="3a53e5bb2ebd3ee709b9618b36ddea4cee4b261c8c2c7e36aa572b5a928ec0e7ee40e11e2e188e5bfecc8fe376f7fef57cd6a7f001974c6b8925689693ee5ec332e25901911d84349c8f440f3ad4ac46d709eb74449ade36a436685f52a017731f23a02c8ec1dcf138b16372fe3f60438c65a337c31c280f85358e0be588b6710a", 0x81) [ 133.136485] loop5: rw=2049, want=132, limit=112 [ 133.150800] attempt to access beyond end of device [ 133.156079] loop5: rw=2049, want=133, limit=112 [ 133.165225] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.167982] attempt to access beyond end of device [ 133.188116] loop5: rw=2049, want=142, limit=112 [ 133.194415] attempt to access beyond end of device [ 133.199568] loop5: rw=2049, want=143, limit=112 [ 133.205664] attempt to access beyond end of device [ 133.210725] loop5: rw=2049, want=144, limit=112 [ 133.216677] attempt to access beyond end of device [ 133.221741] loop5: rw=2049, want=145, limit=112 [ 133.234791] attempt to access beyond end of device 00:14:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001540), 0x8, 0x0) [ 133.239849] loop5: rw=2049, want=167, limit=112 00:14:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f20d86635080000000f22d866b9120400000f320f01dfbaf80c66b8b0f20d8166efbafc0c66b80400000066ef0f20d86635200000000f22d86600ef66b8810000000f23c00f21f8663500000f000f23f8b82d010f00d0f08246f4000f07", 0x5e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001540), 0x8, 0x0) [ 133.311562] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 133.319545] FAT-fs (loop5): Filesystem has been set read-only 00:14:59 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216) 00:14:59 executing program 5: pipe2(&(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) 00:14:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$unlink(0x4, r1, 0xfffffffffffffffd) 00:14:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) recvfrom(r2, &(0x7f0000000640)=""/174, 0xae, 0x0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x709000) 00:14:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x7, &(0x7f0000000100), 0x0) 00:14:59 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216) 00:15:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x400000001, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), 0x4) 00:15:00 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216) 00:15:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) recvfrom(r2, &(0x7f0000000640)=""/174, 0xae, 0x0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x709000) 00:15:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xa) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:00 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216) 00:15:00 executing program 6: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) r1 = gettid() r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 00:15:00 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) truncate(&(0x7f0000000240)='./file0\x00', 0xe0ff) 00:15:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000000040), 0x0) [ 133.957878] attempt to access beyond end of device [ 133.962885] loop7: rw=1, want=130, limit=112 [ 133.987159] attempt to access beyond end of device [ 133.992692] loop7: rw=1, want=131, limit=112 00:15:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) recvfrom(r2, &(0x7f0000000640)=""/174, 0xae, 0x0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x709000) [ 134.024422] attempt to access beyond end of device [ 134.029896] loop7: rw=1, want=132, limit=112 [ 134.045817] attempt to access beyond end of device [ 134.050885] loop7: rw=1, want=133, limit=112 [ 134.067914] attempt to access beyond end of device 00:15:00 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 00:15:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000300)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:15:00 executing program 5: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @quote={{}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@time={0x0, 0x1c9c380}}}}], 0xffffff52) 00:15:00 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216) [ 134.073205] loop7: rw=1, want=142, limit=112 [ 134.080198] attempt to access beyond end of device [ 134.085303] loop7: rw=1, want=143, limit=112 [ 134.090274] attempt to access beyond end of device [ 134.095253] loop7: rw=1, want=144, limit=112 00:15:00 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216) [ 134.134794] device veth0_to_bridge entered promiscuous mode [ 134.148314] attempt to access beyond end of device [ 134.153356] loop7: rw=1, want=145, limit=112 00:15:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) recvfrom(r2, &(0x7f0000000640)=""/174, 0xae, 0x0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x709000) [ 134.187351] device veth0_to_bridge left promiscuous mode [ 134.202275] device veth0_to_bridge entered promiscuous mode [ 134.208520] device veth0_to_bridge left promiscuous mode 00:15:00 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216) 00:15:00 executing program 4: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000900)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control\x00') r2 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./control\x00', 0x0, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680), 0x0, 0x5b66c17c}], 0x0, &(0x7f0000000400)={[{@gid={'gid', 0x3d, [0x39]}, 0x2c}, {@fmask={'fmask', 0x3d, [0x31]}, 0x2c}]}) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") close(r0) 00:15:00 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./control/file2\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)=ANY=[]) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') umount2(&(0x7f0000000040)='./control/file1\x00', 0x0) close(r0) [ 134.293273] attempt to access beyond end of device [ 134.298341] loop7: rw=1, want=4241, limit=112 00:15:00 executing program 1: mmap(&(0x7f00000a1000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 00:15:00 executing program 2: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xe}, 0x2c) [ 134.349821] attempt to access beyond end of device [ 134.354873] loop7: rw=1, want=8337, limit=112 00:15:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000cc0)='iso9660\x00', &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001280)={[{@cruft='cruft', 0x2c}]}) [ 134.419206] attempt to access beyond end of device [ 134.424336] loop7: rw=1, want=12433, limit=112 [ 134.484780] attempt to access beyond end of device [ 134.489917] loop7: rw=1, want=16161, limit=112 [ 134.556322] ISOFS: Unable to identify CD-ROM format. [ 134.592523] ISOFS: Unable to identify CD-ROM format. 00:15:01 executing program 7: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000000), &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x300) 00:15:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa400295c) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 00:15:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xe803, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000080)={[{@usefree='usefree', 0x2c}]}) 00:15:01 executing program 2: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)) 00:15:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000cc0)='iso9660\x00', &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001280)={[{@cruft='cruft', 0x2c}]}) 00:15:01 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f00000001c0)="bf70726f6373656c696e757800", 0xd, 0x0) dup2(r1, r0) 00:15:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0xb93}], 0x1, 0x200000000000000) 00:15:01 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 134.846257] xt_time: invalid argument - start or stop time greater than 23:59:59 00:15:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000230000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xc0, &(0x7f0000000080)="c9ecf37c9d000000000000000000", &(0x7f0000000280)=""/192}, 0x28) [ 134.903774] ISOFS: Unable to identify CD-ROM format. [ 134.953096] ISOFS: Unable to identify CD-ROM format. 00:15:01 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000080)) read(r0, &(0x7f0000000140)=""/4, 0x4) 00:15:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x17, r1, 0x0, &(0x7f00000002c0)='\x00') [ 135.110398] ISOFS: Unable to identify CD-ROM format. [ 135.275799] ntfs: (device loop4): parse_options(): Unrecognized mount option . 00:15:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000340)="295ee131a4cef477671070") mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000040)=0xf2, 0x81, 0x3) 00:15:01 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./control/file2\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)=ANY=[]) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') umount2(&(0x7f0000000040)='./control/file1\x00', 0x0) close(r0) 00:15:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000cc0)='iso9660\x00', &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001280)={[{@cruft='cruft', 0x2c}]}) 00:15:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 00:15:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_read_part_table(0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000540)="9c5b1f191c0ffd8ec2bd99c337e7a0b0d796f05f164aa1edb4327d658f879152ad117306b8d51fd172a62bc05cf90f342697c53c9bf9794d193fc8165f0733fad483779e1307ac1e89af9012cebdde82e599632937b52770d71130d8738c39f1cd0a62bef197bc7f5dd46596635ecf23f3bfc701a4000ab127cd8bc09079b8d935bf8dd72019694b7039d1b6e8e42980fb023d6bcece394a5a7a09934d0ed71faf8b16011f360679021fa39aa397e9fcd4cd6a0ac8595ac951681a2061ccdee77843cbd0e040b88e44ffb41f57dc84aadc6f63cba4eb786bbf41674f99e1f61802e5541a482109f14336a3326159", 0xee, 0x100}]) 00:15:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000230000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xc0, &(0x7f0000000080)="c9ecf37c9d000000000000000000", &(0x7f0000000280)=""/192}, 0x28) [ 135.332182] ntfs: (device loop4): parse_options(): Unrecognized mount option . [ 135.426228] Dev loop2: unable to read RDB block 1 [ 135.429412] ISOFS: Unable to identify CD-ROM format. [ 135.431191] loop2: AHDI p2 p4 [ 135.431203] loop2: partition table partially beyond EOD, truncated 00:15:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x400000000f3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0xffad) 00:15:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000230000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xc0, &(0x7f0000000080)="c9ecf37c9d000000000000000000", &(0x7f0000000280)=""/192}, 0x28) [ 135.466573] loop2: p2 start 2020327233 is beyond EOD, truncated 00:15:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000cc0)='iso9660\x00', &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001280)={[{@cruft='cruft', 0x2c}]}) 00:15:01 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb7", 0xc}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)="0ef8a9bb", 0x4}], 0x1, &(0x7f0000000380)}, 0x0) [ 135.527596] Dev loop2: unable to read RDB block 1 [ 135.532630] loop2: AHDI p2 p4 [ 135.535967] loop2: partition table partially beyond EOD, truncated [ 135.566522] loop2: p2 start 2020327233 is beyond EOD, truncated [ 135.700171] ISOFS: Unable to identify CD-ROM format. 00:15:02 executing program 6: r0 = eventfd2(0x0, 0x0) flistxattr(r0, &(0x7f0000000000), 0x0) 00:15:02 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x11]}, 0x2c) 00:15:02 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7f) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000580)}}, {{&(0x7f0000000100)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000000000000010000000000d2a6"], 0x14}}], 0x2, 0x0) 00:15:02 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000001000)=0x33b) 00:15:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000230000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xc0, &(0x7f0000000080)="c9ecf37c9d000000000000000000", &(0x7f0000000280)=""/192}, 0x28) 00:15:02 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) 00:15:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 00:15:02 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) 00:15:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0x4) 00:15:02 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./control/file2\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)=ANY=[]) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') umount2(&(0x7f0000000040)='./control/file1\x00', 0x0) close(r0) 00:15:02 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r2}, 0x10) setsockopt(r0, 0x100000000000065, 0x1, &(0x7f0000000080)="29e565b4b4cb7a9335a7a317e84f604c3214d3e3992f583352f340a45d37d55a405c7b79daf36674efc27bd365842b772a161c3ce9fa17f2", 0x38) 00:15:02 executing program 6: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r0, 0x0, 0x800, 0xffff) fallocate(r0, 0x3, 0x5e00, 0x2cbd) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sync_file_range(r0, 0x2002, 0x0, 0x2) 00:15:02 executing program 7: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) 00:15:02 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") unshare(0x20400) r3 = dup2(r1, r0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/54) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x400448cc, &(0x7f00000000c0)={@hyper}) 00:15:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') sendfile(r1, r2, &(0x7f0000000040)=0x52, 0x80000002) 00:15:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000400bcf9304d"]]) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) open_by_handle_at(r1, &(0x7f00000000c0)={0x8, 0x1}, 0x0) 00:15:02 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) 00:15:02 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105511, &(0x7f0000000040)={0x7}) 00:15:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)="1dbfb9596c94f49780388b97450b3e2675dc81870047943b2ed2bf99a9b768c42bc055be87d12d9f30f4d7f33e1b136d6450c664a46e0ac5eaf8dd7b1d138d0d11"}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @loopback}, &(0x7f00000001c0)=0x36e) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f00000003c0)=""/128}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000001c0), &(0x7f00000000c0)=""/50}, 0x18) 00:15:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xffffffffffffff3f, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000116ff8)=0x39) shutdown(r0, 0x1) 00:15:02 executing program 0: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="cfb83aecec31c741a629da7b6ee04318d91fdded", 0x14}]) 00:15:02 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000000f000/0x4000)=nil, 0x4000}, 0x1}) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x1) r2 = memfd_create(&(0x7f0000000180)="2df188a80ba116a8db8ba30f436c4e8dae0e32772865c0b60fb6bfc4f11c05e8970122dc649f8aff519c90197f30329b26d2680f21b038521045", 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r2, 0xffffffffffffffff, 0x4) close(r0) 00:15:02 executing program 1: r0 = syz_fuseblk_mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0) write$fuse(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, @fuse_notify_delete_out={0x1}}, 0x28) 00:15:02 executing program 6: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) 00:15:02 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) 00:15:03 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./control/file2\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)=ANY=[]) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') umount2(&(0x7f0000000040)='./control/file1\x00', 0x0) close(r0) 00:15:03 executing program 5: r0 = socket(0x400800000000011, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000002c0)="025cc83d6d345f8f760070") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 00:15:03 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80605414, &(0x7f0000000340)=""/4096) 00:15:03 executing program 1: r0 = syz_fuseblk_mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0) write$fuse(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, @fuse_notify_delete_out={0x1}}, 0x28) 00:15:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f660070") r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) ioprio_set$uid(0x3, r2, 0x0) 00:15:03 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000f96000)={0x9}, 0xfe53) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") close(r0) 00:15:03 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x4e21}, r2}}, 0x30) 00:15:03 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x139f}], 0x1, &(0x7f0000fb3fa9)=""/87, 0xfffffffffffffce7}, 0x0) 00:15:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 00:15:03 executing program 7: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x80000000001, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000000c0), 0x4) 00:15:03 executing program 7: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f00000012c0)=@pqnoenforce='pqnoenforce') 00:15:04 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001000), 0x89, 0x0, &(0x7f0000000000), &(0x7f0000000180), 0x2) 00:15:04 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 00:15:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 00:15:04 executing program 0: prctl$setmm(0x23, 0x7, &(0x7f0000ffc000/0x1000)=nil) prctl$setmm(0x23, 0x6, &(0x7f0000ffc000/0x2000)=nil) prctl$setmm(0x23, 0x4, &(0x7f0000ffb000/0x2000)=nil) prctl$setmm(0x23, 0x3, &(0x7f0000ff9000/0x4000)=nil) [ 137.781727] XFS (loop7): Invalid superblock magic number 00:15:04 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') exit(0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x47) [ 137.864330] XFS (loop7): Invalid superblock magic number 00:15:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 00:15:04 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 00:15:04 executing program 7: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1fffe, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000200)={0xffffffffffffff9c}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000240), 0x4) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000000002, 0x0) write(r1, &(0x7f0000000300)="d8", 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0xffffffffffffff9c, 0x2, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) sendfile(r1, r0, &(0x7f0000000140), 0x12000) [ 139.144536] IPVS: ftp: loaded support on port[0] = 21 [ 139.585474] device bridge_slave_1 left promiscuous mode [ 139.591212] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.606348] device bridge_slave_0 left promiscuous mode [ 139.611960] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.627701] team0 (unregistering): Port device team_slave_1 removed [ 141.638409] team0 (unregistering): Port device team_slave_0 removed [ 141.647987] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 141.667333] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 141.693643] bond0 (unregistering): Released all slaves [ 142.131522] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.137994] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.145493] device bridge_slave_0 entered promiscuous mode [ 142.180929] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.187328] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.194739] device bridge_slave_1 entered promiscuous mode [ 142.229602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.266364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.371014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.409745] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.571918] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.579664] team0: Port device team_slave_0 added [ 142.615242] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.622980] team0: Port device team_slave_1 added [ 142.671657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.711546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.747181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.754372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.762947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.789222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.796363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.807355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.135460] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.141848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.148487] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.154839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.162309] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.712182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.913411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.992758] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.064990] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.071180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.078738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.146762] 8021q: adding VLAN 0 to HW filter on device team0 00:15:10 executing program 1: r0 = syz_fuseblk_mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0) write$fuse(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, @fuse_notify_delete_out={0x1}}, 0x28) 00:15:10 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x7fffffff}, {0x2}}) 00:15:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) r3 = dup3(r1, r2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000400), &(0x7f0000000440)=0x40) 00:15:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 00:15:10 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001600)={{{@in=@dev={0xac, 0x14, 0x14}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0xff}, 0x0, @in6}}, 0xe8) 00:15:10 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 00:15:10 executing program 0: unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x10, 0x5, 0x2}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 00:15:10 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000700)="597f0000", 0x4, 0x4001, 0x0, 0x0) recvmsg(r0, &(0x7f0000000cc0)={&(0x7f0000000940)=@can, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/221, 0xdd}, {&(0x7f0000000ac0)=""/72, 0x48}, {&(0x7f0000000b40)=""/170, 0xaa}, {&(0x7f0000000c00)=""/34, 0x22}], 0x4, &(0x7f0000000c80)=""/26, 0x1a, 0xffffffff}, 0x10121) 00:15:11 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 00:15:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000001500)=[{&(0x7f0000001480)=""/99, 0x63}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f00000012c0)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) 00:15:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0xc008ae91, &(0x7f0000000140)) 00:15:11 executing program 2: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20006) r2 = dup2(r1, r0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 00:15:11 executing program 6: clock_settime(0xa, &(0x7f0000000000)) 00:15:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f000000bff7)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x80000080304d65, &(0x7f0000001000)) 00:15:11 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) 00:15:11 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 00:15:11 executing program 1: r0 = syz_fuseblk_mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0) write$fuse(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, @fuse_notify_delete_out={0x1}}, 0x28) 00:15:11 executing program 2: socket(0x1e, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x123b) 00:15:11 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) dup2(r0, r1) 00:15:11 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f000069b000/0x1000)=nil, 0x1000}) 00:15:11 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x100000}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000000000004}) 00:15:11 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) [ 144.990613] device bridge_slave_1 left promiscuous mode [ 144.996234] bridge0: port 2(bridge_slave_1) entered disabled state 00:15:11 executing program 4: r0 = socket(0x1e, 0x805, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/65, &(0x7f0000000000)=0x41) 00:15:11 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00') exit(0x0) fstat(r0, &(0x7f0000000140)) 00:15:11 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="390000001100090469001bfd3f03f5000c450001040000001419001a00040023000700f0000200000809c99183a8a500020000000000000000", 0x39}], 0x1) [ 145.067992] device bridge_slave_0 left promiscuous mode [ 145.073580] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.246123] team0 (unregistering): Port device team_slave_1 removed [ 145.270500] IPVS: ftp: loaded support on port[0] = 21 [ 145.277227] team0 (unregistering): Port device team_slave_0 removed [ 145.290638] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 145.305273] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 145.336383] bond0 (unregistering): Released all slaves [ 145.358530] netlink: 25 bytes leftover after parsing attributes in process `syz-executor7'. [ 145.369655] netlink: 25 bytes leftover after parsing attributes in process `syz-executor7'. [ 145.567618] serio: Serial port pts0 00:15:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000001500)=[{&(0x7f0000001480)=""/99, 0x63}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f00000012c0)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) 00:15:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x400000000000001, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0x3) 00:15:11 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000c00000/0x400000)=nil}) 00:15:11 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) dup2(r0, r1) 00:15:11 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000440), 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000140)=@ax25={0x3, {"055c99c0caa6b6"}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000480)}, 0x8000) accept4$vsock_stream(r2, &(0x7f0000000680)={0x28, 0x0, 0x0, @host=0x2}, 0x10, 0x0) 00:15:12 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xa01, 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0x9) 00:15:12 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000440), 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000140)=@ax25={0x3, {"055c99c0caa6b6"}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000480)}, 0x8000) accept4$vsock_stream(r2, &(0x7f0000000680)={0x28, 0x0, 0x0, @host=0x2}, 0x10, 0x0) [ 146.537145] serio: Serial port pts0 [ 146.606416] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.612913] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.620778] device bridge_slave_0 entered promiscuous mode [ 146.659872] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.666300] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.674270] device bridge_slave_1 entered promiscuous mode [ 146.710657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.774378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.879280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.919112] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.957732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.964701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.995274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.002199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.101204] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 147.108587] team0: Port device team_slave_0 added [ 147.143266] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 147.151569] team0: Port device team_slave_1 added [ 147.183662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.208985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.233954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.241224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.249222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.269314] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.276376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.284878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.497446] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.503826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.510464] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.516823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.524563] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.872137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.291709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.367114] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.439327] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.445498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.453156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.523504] 8021q: adding VLAN 0 to HW filter on device team0 00:15:15 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000877000), 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") futex(&(0x7f000000cffc), 0x5, 0x200000005, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x40000000) 00:15:15 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) dup2(r0, r1) 00:15:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x4000000000000fe, 0x0) 00:15:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000440), 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000140)=@ax25={0x3, {"055c99c0caa6b6"}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000480)}, 0x8000) accept4$vsock_stream(r2, &(0x7f0000000680)={0x28, 0x0, 0x0, @host=0x2}, 0x10, 0x0) 00:15:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002}, {@in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x32}, @in6=@remote={0xfe, 0x80, [], 0xbb}}}}, 0xf8}, 0x1}, 0x0) 00:15:15 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)={[0x37]}, 0x1) 00:15:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000001500)=[{&(0x7f0000001480)=""/99, 0x63}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f00000012c0)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) 00:15:15 executing program 1: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) r2 = getpgid(0x0) tkill(r2, 0x13) 00:15:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000440), 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000140)=@ax25={0x3, {"055c99c0caa6b6"}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000480)}, 0x8000) accept4$vsock_stream(r2, &(0x7f0000000680)={0x28, 0x0, 0x0, @host=0x2}, 0x10, 0x0) 00:15:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 00:15:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x20001) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5ebe453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258de9600000000000001bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) 00:15:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept(r0, &(0x7f0000000100)=@ipx, &(0x7f0000000180)=0x80) 00:15:15 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) dup2(r0, r1) 00:15:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") close(r1) 00:15:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x13, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/207}, 0x18) 00:15:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) [ 149.295192] device bridge_slave_1 left promiscuous mode [ 149.300841] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.352213] device bridge_slave_0 left promiscuous mode [ 149.357906] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.434915] IPVS: ftp: loaded support on port[0] = 21 [ 149.442457] team0 (unregistering): Port device team_slave_1 removed [ 149.454243] team0 (unregistering): Port device team_slave_0 removed [ 149.464405] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 149.481949] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 149.511797] bond0 (unregistering): Released all slaves [ 149.852207] serio: Serial port pts0 00:15:16 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)=ANY=[]) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000005c0)) 00:15:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 00:15:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_map={0x700000}}) 00:15:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 00:15:16 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x0, r1}, 0x10) 00:15:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000001500)=[{&(0x7f0000001480)=""/99, 0x63}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f00000012c0)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) 00:15:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xd}}, 0x32a}, 0x1}, 0x0) 00:15:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, &(0x7f0000002380), 0x4) 00:15:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 00:15:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 00:15:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1}, 0x0) 00:15:16 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x12}}) 00:15:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 00:15:16 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000180)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) [ 150.352091] binder: BINDER_SET_CONTEXT_MGR already set [ 150.360869] binder: 12558:12560 ioctl 40046207 0 returned -16 [ 150.591217] binder: undelivered TRANSACTION_COMPLETE [ 150.596542] binder: undelivered transaction 38, process died. [ 150.887226] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.893660] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.900381] serio: Serial port pts0 [ 150.913331] device bridge_slave_0 entered promiscuous mode [ 150.982683] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.989120] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.996816] device bridge_slave_1 entered promiscuous mode [ 151.034993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.071803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.181095] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 151.220951] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 151.382305] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.389455] team0: Port device team_slave_0 added [ 151.422532] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.429941] team0: Port device team_slave_1 added [ 151.465379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.508481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.741352] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.748572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.757693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.889785] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.896844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.905278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.784421] device bridge_slave_1 left promiscuous mode [ 152.790103] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.802068] device bridge_slave_0 left promiscuous mode [ 152.807600] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.815512] team0 (unregistering): Port device team_slave_1 removed [ 154.825624] team0 (unregistering): Port device team_slave_0 removed [ 154.835191] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 154.853136] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 154.882583] bond0 (unregistering): Released all slaves [ 155.011746] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.018156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.024826] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.031195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.041592] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.936222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.341383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.423390] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.502427] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.508600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.516550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.593874] 8021q: adding VLAN 0 to HW filter on device team0 00:15:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x1a, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)="0000000201000000000000010400000000000000", 0x14, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='security.secur'], &(0x7f0000000240)='security.capabimity\x00', 0x14, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 00:15:23 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000180)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) 00:15:23 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x2}}]}, 0x2c}, 0x1}, 0x0) 00:15:23 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 00:15:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffff0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 00:15:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d97993"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:15:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000ec0)={"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"}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:15:23 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0x83, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x22, 0x1, 0x0, 0x0, {0x5801}}, 0x14}, 0x1}, 0x0) [ 157.102574] netlink: 'syz-executor2': attribute type 21 has an invalid length. 00:15:23 executing program 3: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x10001}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 157.150133] netlink: 'syz-executor2': attribute type 21 has an invalid length. 00:15:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000000c0)=0xbcf, 0x4) 00:15:23 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000180)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) 00:15:23 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='vmnet0\x00', 0x840, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xff, 0x2}) 00:15:23 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000002c0)="295ee13130d7b9b1671070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@nl=@proc={0x10, 0x0, 0x25dfdbfe}, {&(0x7f0000000000)=""/62, 0x3e}, &(0x7f0000000080)}, 0xa0) [ 157.194728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.228776] binder: undelivered transaction 40, process died. [ 157.236145] binder: undelivered TRANSACTION_COMPLETE 00:15:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa}}}, 0x38) 00:15:23 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x2}}]}, 0x2c}, 0x1}, 0x0) 00:15:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x20000007b, 0x0, [0x40000108]}) 00:15:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0xffffffffffffff85) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0xffffff85, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 00:15:23 executing program 0: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000002d0007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 157.432185] netlink: 'syz-executor2': attribute type 21 has an invalid length. 00:15:23 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000180)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) 00:15:23 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) 00:15:23 executing program 1: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000332000)=',mime_typebdev(\x00', 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)=';', 0x1}]) [ 157.492678] IPVS: ftp: loaded support on port[0] = 21 [ 157.499204] binder: undelivered transaction 42, process died. [ 157.500561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 157.553124] binder: undelivered TRANSACTION_COMPLETE [ 157.706080] binder: undelivered transaction 44, process died. [ 157.712471] binder: undelivered TRANSACTION_COMPLETE [ 158.056375] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.062901] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.070181] device bridge_slave_0 entered promiscuous mode [ 158.098628] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.105059] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.112480] device bridge_slave_1 entered promiscuous mode [ 158.138219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.163271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.232771] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.261802] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.370734] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.377863] team0: Port device team_slave_0 added [ 158.401614] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.408722] team0: Port device team_slave_1 added [ 158.432763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.459807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.488685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.514894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.737438] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.743822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.750449] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.756808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.543135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.624199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.705387] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.711566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.719851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.797227] 8021q: adding VLAN 0 to HW filter on device team0 00:15:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)="706167656d6170005606ab8d90b9faa064e0") connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r1, r2, &(0x7f0000000040), 0x8010) 00:15:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x358010000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xf}]}, 0x18}, 0x1}, 0x0) 00:15:26 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x2}}]}, 0x2c}, 0x1}, 0x0) 00:15:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 00:15:26 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x0) 00:15:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3)="441f0800000000009727c1c6fe36cef3e26ddb2300ffff000003027813", 0x1d) 00:15:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') write$cgroup_pid(r0, &(0x7f0000000100)={[0x38, 0x33, 0x39, 0x34]}, 0x4) 00:15:26 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 160.317095] netlink: 'syz-executor2': attribute type 21 has an invalid length. 00:15:26 executing program 7: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000003380)=""/4096, 0xf) 00:15:26 executing program 6: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) exit(0x0) dup2(r1, r0) 00:15:26 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x3e1, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) shutdown(r2, 0x1) 00:15:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000032ff4)={0x2000}) mprotect(&(0x7f0000032000/0x1000)=nil, 0x1000, 0x5) setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x1, &(0x7f0000036fe0)) 00:15:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 00:15:26 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x2}}]}, 0x2c}, 0x1}, 0x0) 00:15:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") getsockopt$sock_linger(r0, 0x1, 0x26, &(0x7f0000000240), &(0x7f0000000280)=0x8) 00:15:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x30, &(0x7f0000000880)=ANY=[], 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8982, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}}) close(r2) close(r1) 00:15:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000032ff4)={0x2000}) mprotect(&(0x7f0000032000/0x1000)=nil, 0x1000, 0x5) setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x1, &(0x7f0000036fe0)) [ 160.519887] netlink: 'syz-executor2': attribute type 21 has an invalid length. 00:15:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000032ff4)={0x2000}) mprotect(&(0x7f0000032000/0x1000)=nil, 0x1000, 0x5) setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x1, &(0x7f0000036fe0)) 00:15:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 00:15:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f467671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_matches\x00') dup2(r2, r3) 00:15:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 00:15:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000032ff4)={0x2000}) mprotect(&(0x7f0000032000/0x1000)=nil, 0x1000, 0x5) setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x1, &(0x7f0000036fe0)) 00:15:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000032ff4)={0x2000}) mprotect(&(0x7f0000032000/0x1000)=nil, 0x1000, 0x5) setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x1, &(0x7f0000036fe0)) 00:15:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000032ff4)={0x2000}) mprotect(&(0x7f0000032000/0x1000)=nil, 0x1000, 0x5) setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x1, &(0x7f0000036fe0)) 00:15:27 executing program 7: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000003380)=""/4096, 0xf) 00:15:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:15:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000032ff4)={0x2000}) mprotect(&(0x7f0000032000/0x1000)=nil, 0x1000, 0x5) setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x1, &(0x7f0000036fe0)) 00:15:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f00000001c0)=@known='security.capability\x00', &(0x7f0000000080)="000000037970652700000004000000070000204500000000", 0x18, 0x0) 00:15:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x0, 0x80}, 0xc) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r2 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1'}, 0x34000) 00:15:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="295ed277a4200100360070") r1 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x11, &(0x7f0000001180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@llc={0x4, {@llc={0x0, 0x0, "a2"}}}}}, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x10, 0x4) recvmmsg(r1, &(0x7f0000002e00)=[{{&(0x7f0000002b80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d40)=""/164, 0xa4}}], 0x40000000000014d, 0x0, 0x0) 00:15:27 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) write(r1, &(0x7f0000000040)="f7b4d5b3f4a386", 0x7) write(r1, &(0x7f00000000c0)="4717e6e64bd1a8422b", 0x9) 00:15:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000), 0x0) 00:15:27 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000003380)=""/4096, 0xf) 00:15:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}, 0x10) 00:15:28 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f0000000040)) rt_sigprocmask(0x2, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 00:15:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f00000001c0)=@known='security.capability\x00', &(0x7f0000000080)="000000037970652700000004000000070000204500000000", 0x18, 0x0) 00:15:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:15:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0xc01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) 00:15:28 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) write(r1, &(0x7f0000000040)="f7b4d5b3f4a386", 0x7) write(r1, &(0x7f00000000c0)="4717e6e64bd1a8422b", 0x9) 00:15:28 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) write(r0, &(0x7f0000000040)="c2", 0x1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x24020400) truncate(&(0x7f0000000140)='./file0/bus\x00', 0x0) 00:15:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f00000001c0)=@known='security.capability\x00', &(0x7f0000000080)="000000037970652700000004000000070000204500000000", 0x18, 0x0) 00:15:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:15:28 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) write(r1, &(0x7f0000000040)="f7b4d5b3f4a386", 0x7) write(r1, &(0x7f00000000c0)="4717e6e64bd1a8422b", 0x9) 00:15:28 executing program 7: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000003380)=""/4096, 0xf) [ 162.220679] IPVS: ftp: loaded support on port[0] = 21 00:15:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:15:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r2, r1) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000040)}]) 00:15:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f00000001c0)=@known='security.capability\x00', &(0x7f0000000080)="000000037970652700000004000000070000204500000000", 0x18, 0x0) 00:15:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x0, 0x80}, 0xc) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r2 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1'}, 0x34000) 00:15:28 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) write(r1, &(0x7f0000000040)="f7b4d5b3f4a386", 0x7) write(r1, &(0x7f00000000c0)="4717e6e64bd1a8422b", 0x9) 00:15:28 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000003380)=""/4096, 0xf) [ 162.502669] cgroup: fork rejected by pids controller in /syz5 00:15:28 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x100000000000007) 00:15:28 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup2(r0, r0) ioctl$LOOP_CLR_FD(r1, 0x400452c8) 00:15:29 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="393a340d231ce63d"], 0x8) 00:15:29 executing program 4: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = socket(0x11, 0x2, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080), 0x4) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@generic={0x600}}}, &(0x7f0000000000)) 00:15:29 executing program 3: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth1_to_bond\x00', &(0x7f0000001480)=@ethtool_ringparam={0x11}}) 00:15:29 executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 164.081314] device bridge_slave_1 left promiscuous mode [ 164.086891] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.098941] device bridge_slave_0 left promiscuous mode [ 164.104451] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.023584] Â (unregistering): Port device team_slave_1 removed [ 166.034406] Â (unregistering): Port device team_slave_0 removed [ 166.043862] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 166.060475] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 166.087704] bond0 (unregistering): Released all slaves [ 166.393223] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.399636] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.406881] device bridge_slave_0 entered promiscuous mode [ 166.443163] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.449575] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.456891] device bridge_slave_1 entered promiscuous mode [ 166.491930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.538462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.642256] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 166.679748] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 166.845558] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.852948] team0: Port device team_slave_0 added [ 166.889347] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.897811] team0: Port device team_slave_1 added [ 166.932512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.970803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.008773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.046767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.399745] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.406163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.412840] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.419210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.427257] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 168.172115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.837965] device bridge_slave_1 left promiscuous mode [ 168.843594] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.857084] device bridge_slave_0 left promiscuous mode [ 168.862589] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.883829] team0 (unregistering): Port device team_slave_1 removed [ 170.895246] team0 (unregistering): Port device team_slave_0 removed [ 170.904882] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 170.921994] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 170.949615] bond0 (unregistering): Released all slaves [ 171.732495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.855729] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 171.976421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 171.982660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.991242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.115525] 8021q: adding VLAN 0 to HW filter on device team0 00:15:39 executing program 7: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000003380)=""/4096, 0xf) 00:15:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0xc01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) 00:15:39 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0xc01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) 00:15:39 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2, 0x9}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 00:15:39 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) dup2(r0, r1) 00:15:39 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000003380)=""/4096, 0xf) 00:15:39 executing program 3: setitimer(0x0, &(0x7f0000000fe0)={{0x100000000000}, {0x0, 0x2710}}, &(0x7f0000000440)) 00:15:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x0, 0x80}, 0xc) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r2 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1'}, 0x34000) 00:15:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000411000)="bc", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 00:15:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000013ff4)={@multicast2=0xe0000002, @rand_addr, @multicast1=0xe0000001}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x20e) clone(0x0, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f00000007c0), &(0x7f0000000800)) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 00:15:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000030c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000004400)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000003040)=[{&(0x7f0000002f40)=""/248, 0xf8}], 0x1, &(0x7f0000004300)=""/253, 0xfd}}], 0x1, 0x0, &(0x7f0000003100)) pwritev(r1, &(0x7f0000000200), 0x10000000000003b0, 0x0) 00:15:40 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @multicast1=0xe0000001, 0x0, 0x0, 'lc\x00'}, 0x2c) 00:15:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000030c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000004400)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000003040)=[{&(0x7f0000002f40)=""/248, 0xf8}], 0x1, &(0x7f0000004300)=""/253, 0xfd}}], 0x1, 0x0, &(0x7f0000003100)) pwritev(r1, &(0x7f0000000200), 0x10000000000003b0, 0x0) [ 173.846270] IPVS: ftp: loaded support on port[0] = 21 00:15:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000030c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000004400)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000003040)=[{&(0x7f0000002f40)=""/248, 0xf8}], 0x1, &(0x7f0000004300)=""/253, 0xfd}}], 0x1, 0x0, &(0x7f0000003100)) pwritev(r1, &(0x7f0000000200), 0x10000000000003b0, 0x0) [ 173.911086] IPVS: ftp: loaded support on port[0] = 21 00:15:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000030c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000004400)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000003040)=[{&(0x7f0000002f40)=""/248, 0xf8}], 0x1, &(0x7f0000004300)=""/253, 0xfd}}], 0x1, 0x0, &(0x7f0000003100)) pwritev(r1, &(0x7f0000000200), 0x10000000000003b0, 0x0) 00:15:40 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast=0xffffffff, 0x0, 0x0, 'sh\x00', 0x2, 0x5, 0x52}, 0x2c) 00:15:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x0, 0x80}, 0xc) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r2 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1'}, 0x34000) [ 174.597736] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b3a/0x1d80 00:15:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0xc01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) 00:15:41 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0xc01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) 00:15:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) 00:15:41 executing program 2: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040), 0x0, 0x0, 0x1000000}], 0x0) [ 174.731432] device bridge_slave_1 left promiscuous mode [ 174.737111] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.777783] device bridge_slave_0 left promiscuous mode [ 174.783482] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.926871] team0 (unregistering): Port device team_slave_1 removed [ 174.949445] team0 (unregistering): Port device team_slave_0 removed [ 174.962755] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 174.985961] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 175.013712] bond0 (unregistering): Released all slaves [ 175.838359] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.844868] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.853745] device bridge_slave_0 entered promiscuous mode [ 175.906330] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.912736] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.923958] device bridge_slave_0 entered promiscuous mode [ 175.933454] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.939838] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.950291] device bridge_slave_1 entered promiscuous mode [ 176.000706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.013879] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.020268] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.027972] device bridge_slave_1 entered promiscuous mode [ 176.084295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.097134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.171298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.288507] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.337740] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.377322] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.451947] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.594509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.608752] team0: Port device team_slave_0 added [ 176.658737] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.666559] team0: Port device team_slave_1 added [ 176.700503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.759833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.772980] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.781122] team0: Port device team_slave_0 added [ 176.803500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.811124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.820369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.831815] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.839956] team0: Port device team_slave_1 added [ 176.847400] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.855169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.869813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.881266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.920295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.956208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.963353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.971877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.997418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.004555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.013811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.257733] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.264247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.270914] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.277291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.285305] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.380041] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.386436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.393116] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.399462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.406856] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.080150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.088661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.590631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.702197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.716970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 178.823915] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 178.836527] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 178.842783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.857304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.952579] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 178.958881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.966570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.977691] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.084373] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.693809] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 00:15:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x8000}) 00:15:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @multicast1=0xe0000001}, {}, 0x8000000000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") dup2(r0, r2) 00:15:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x22, &(0x7f0000ad2000), &(0x7f0000000080)=0x23c) 00:15:46 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 00:15:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, "0f78fb1e4206c27f31f74df3edafaf4c0746b08ab78b1f64d220ee79493919c1"}) 00:15:46 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0xc01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) 00:15:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0xc01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) 00:15:46 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") lookup_dcookie(0x0, &(0x7f00000004c0)=""/162, 0xfffffffffffffe69) 00:15:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000001700)="295ee1311f16f477671070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001d80)}, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)='m', 0x1}], 0x1, &(0x7f0000001980)=ANY=[]}, 0x0) recvmsg(r2, &(0x7f0000000340)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/2, 0x2}], 0x1, &(0x7f0000000240)=""/253, 0xfd}, 0x0) 00:15:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x401, 0x4) 00:15:47 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000180)) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x0) getdents(r1, &(0x7f0000000200)=""/20, 0x14) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 00:15:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") lookup_dcookie(0x0, &(0x7f00000004c0)=""/162, 0xfffffffffffffe69) 00:15:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='bcsf0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x40082406, &(0x7f0000003780)={'veth0_to_bond\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:15:47 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='#'], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) dup2(r1, r3) 00:15:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) dup2(r0, r2) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000000040)=0x80, 0x0) recvfrom$packet(r3, &(0x7f0000002700)=""/4096, 0x1000, 0x40012023, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x709000) 00:15:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0xff81, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0xb}], 0x10}}], 0x40000000000012a, 0x0) 00:15:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") lookup_dcookie(0x0, &(0x7f00000004c0)=""/162, 0xfffffffffffffe69) 00:15:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") lookup_dcookie(0x0, &(0x7f00000004c0)=""/162, 0xfffffffffffffe69) [ 180.955970] device bridge_slave_1 left promiscuous mode [ 180.961578] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.983621] device bridge_slave_0 left promiscuous mode [ 180.989235] bridge0: port 1(bridge_slave_0) entered disabled state 00:15:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:15:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000101000)={@random="cd390b081bf2", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x21, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0) [ 181.093645] IPVS: ftp: loaded support on port[0] = 21 [ 181.111169] team0 (unregistering): Port device team_slave_1 removed [ 181.126763] team0 (unregistering): Port device team_slave_0 removed 00:15:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) [ 181.152514] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 181.177370] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 181.212627] bond0 (unregistering): Released all slaves [ 181.241756] mmap: syz-executor2 (14265) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 00:15:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xbff]}) 00:15:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='bcsf0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x40082406, &(0x7f0000003780)={'veth0_to_bond\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:15:48 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='#'], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) dup2(r1, r3) 00:15:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xbff]}) 00:15:48 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="56df4cc2a3788ce661de34fb0c63d571", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="2e605039f4fa3843e59ac74af0d18b1b", 0x10) 00:15:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xbff]}) 00:15:48 executing program 4: rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x40046c, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[]) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) [ 181.991712] FAT-fs (loop4): bogus number of reserved sectors [ 181.997722] FAT-fs (loop4): Can't find a valid FAT filesystem 00:15:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xbff]}) 00:15:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {0xd}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x55c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd0b}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x18}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x7}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40406300}], 0x0, 0x0, &(0x7f0000002000)}) [ 182.135245] binder: 14352:14354 ioctl c0306201 20007000 returned -14 [ 182.157607] binder: 14352:14356 ioctl c0306201 20007000 returned -14 00:15:48 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x1, 0x4100) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0xfffffffffffffffb}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)={r2, 0x1000, "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"}, &(0x7f0000001300)=0x1008) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1) r3 = socket$inet6(0xa, 0x1, 0x80000000) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0)=0x2f, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000140)=0x6ffffffd, 0x4) [ 182.262824] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.269262] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.276980] device bridge_slave_0 entered promiscuous mode [ 182.350605] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.357096] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.364813] device bridge_slave_1 entered promiscuous mode [ 182.415499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.453306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.563105] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.603290] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.737236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.744144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.853469] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.860842] team0: Port device team_slave_0 added [ 182.897422] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.904802] team0: Port device team_slave_1 added [ 182.940354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.970867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.008500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.015645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.030179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.056717] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.063773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.075107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.323931] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.330305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.336936] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.343285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.350518] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.779518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.103703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.176744] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.249580] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.255762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.263306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.332528] 8021q: adding VLAN 0 to HW filter on device team0 00:15:51 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x4) 00:15:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x1, &(0x7f00000000c0)={r1, r2+10000000}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x60000000, 0x90, [0x0, 0x20000140, 0x20000170, 0x200001a0], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{}, {}, {}]}, 0x108) 00:15:51 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='bcsf0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x40082406, &(0x7f0000003780)={'veth0_to_bond\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:15:51 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='#'], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) dup2(r1, r3) 00:15:51 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001940)='/dev/cuse\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000001980)={0x2b81, 0xaa3f, 0x0, 0xdb4f, 0x8, 0x6}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) r4 = msgget(0x1, 0x40) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) r6 = getgid() getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$kcm(r9, &(0x7f0000001900)={&(0x7f0000000400)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000540)=""/25, 0x19}, {&(0x7f0000000580)=""/6, 0x6}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/85, 0x55}, {&(0x7f0000001640)=""/221, 0xdd}, {&(0x7f0000001740)=""/43, 0x2b}], 0x7, &(0x7f0000001800)=""/197, 0xc5, 0x7}, 0x40) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000300)=0x0) r11 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000340)={{0x9, r5, r6, r7, r8, 0x100, 0x7f}, 0x81, 0xfffffffffffffe00, 0x1, 0x200, 0x7f, 0x2, r10, r11}) io_submit(r3, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000079a000)="16", 0x1}]) 00:15:51 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f00000c3000)={0x10, 0xffffffffffffffff, 0x0, 0x2003ff, 0x0, 0xffffffffffffffff, 0x38a9, [0x305f]}, 0xfffffffffffffe0f) 00:15:51 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400000) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x1000, &(0x7f0000000180)=0xfffffffffffffffe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000400)}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40000, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000240)={0xfffffffffffffffe, 0x80}) 00:15:51 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7ffffffffffffc}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x6b, &(0x7f0000000000), 0x1) close(r2) close(r1) 00:15:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000300)="29d7e1311f160577651070") syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000700)={[{@usrjquota_file='usrjquota=s/z', 0x2c}]}) [ 184.815358] binder: 14598:14600 ioctl c0306201 200000c0 returned -14 [ 184.847101] binder: 14598:14618 ioctl c0306201 200000c0 returned -14 00:15:51 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getrlimit(0x6071a45691d5c22c, &(0x7f0000000140)) 00:15:51 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) ioctl$VHOST_SET_VRING_KICK(r1, 0x400448c8, &(0x7f0000000040)) 00:15:51 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) read(r0, &(0x7f0000000380)=""/4096, 0x35) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 00:15:51 executing program 7: prctl$getreaper(0x28, &(0x7f0000000000)) 00:15:51 executing program 2: r0 = inotify_init() r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") flock(r0, 0x2) r2 = epoll_create(0x102050204) flock(r2, 0x2) dup2(r1, r2) dup2(r2, r0) [ 184.876319] REISERFS warning (device loop6): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 184.939228] REISERFS warning (device loop6): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 00:15:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000300)="29d7e1311f160577651070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x304, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3}], 0x18}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x98) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5) 00:15:51 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) ioctl$VHOST_SET_VRING_KICK(r1, 0x400448c8, &(0x7f0000000040)) 00:15:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:15:51 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:15:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='bcsf0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x40082406, &(0x7f0000003780)={'veth0_to_bond\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:15:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 00:15:52 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) ioctl$VHOST_SET_VRING_KICK(r1, 0x400448c8, &(0x7f0000000040)) 00:15:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:15:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x0) 00:15:52 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='#'], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) dup2(r1, r3) 00:15:52 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) ioctl$VHOST_SET_VRING_KICK(r1, 0x400448c8, &(0x7f0000000040)) 00:15:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x64, [], 0x0, &(0x7f0000000240), &(0x7f0000000280)=""/100}, &(0x7f0000000380)=0x78) 00:15:52 executing program 5: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000180)='./control/file0\x00') creat(&(0x7f00000003c0)='./file0/file0\x00', 0x0) close(r0) 00:15:52 executing program 0: setpriority(0x0, 0x0, 0xffe) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/112, 0x70, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 00:15:52 executing program 2: setrlimit(0x7, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x3, &(0x7f0000003000)=@framed={{0x18}, [], {0x95}}, &(0x7f000000b000)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x48) 00:15:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:15:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x64, [], 0x0, &(0x7f0000000240), &(0x7f0000000280)=""/100}, &(0x7f0000000380)=0x78) 00:15:52 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x800442d2, &(0x7f0000000000)) 00:15:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef01005ceb4fd2e515217e010000006e5fbe5a000000003e8b1a0826bb29000000000100000000000000dd", 0x64, 0x400}], 0x0, &(0x7f0000012e00)) 00:15:52 executing program 7: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0x7, 0x3, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) [ 186.098647] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.107425] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 186.156942] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.165394] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities 00:15:53 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x0) 00:15:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x64, [], 0x0, &(0x7f0000000240), &(0x7f0000000280)=""/100}, &(0x7f0000000380)=0x78) 00:15:53 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:15:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000140)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) 00:15:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8913, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x45}}) close(r2) close(r1) 00:15:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffffe, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004e1000/0x4000)=nil, 0x4000, 0x3) 00:15:53 executing program 7: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0x7, 0x3, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 00:15:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x400) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 00:15:53 executing program 7: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0x7, 0x3, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 00:15:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket(0x10, 0x2, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x100a00}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 00:15:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x64, [], 0x0, &(0x7f0000000240), &(0x7f0000000280)=""/100}, &(0x7f0000000380)=0x78) 00:15:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000140)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) 00:15:53 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x7, 0x4) 00:15:53 executing program 7: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0x7, 0x3, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 00:15:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000140)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) 00:15:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) 00:15:53 executing program 6: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r0, 0x0, 0x0, 0x4) 00:15:53 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0xa, 0x0) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/124, 0x7c}, 0xc00e) [ 187.048013] IPVS: ftp: loaded support on port[0] = 21 00:15:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000140)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) 00:15:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)) [ 187.334160] syz-executor7 uses obsolete (PF_INET,SOCK_PACKET) [ 189.085308] device bridge_slave_1 left promiscuous mode [ 189.090894] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.148994] device bridge_slave_0 left promiscuous mode [ 189.154543] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.869644] team0 (unregistering): Port device team_slave_1 removed [ 192.908876] team0 (unregistering): Port device team_slave_0 removed [ 192.958234] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 193.021342] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 193.059332] bond0 (unregistering): Released all slaves [ 193.795517] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.802110] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.810935] device bridge_slave_0 entered promiscuous mode [ 193.859396] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.865814] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.909127] device bridge_slave_1 entered promiscuous mode [ 194.011322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 194.048661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.224313] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.320390] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.444119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.451128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.556370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.563769] team0: Port device team_slave_0 added [ 194.598729] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.606653] team0: Port device team_slave_1 added [ 194.640850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.680072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.716262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.723483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.738511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.769209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.776421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.791239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.145751] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.152146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.158770] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.165117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.172660] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 195.424156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.061291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.135307] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.207933] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.214123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.221663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.289750] 8021q: adding VLAN 0 to HW filter on device team0 00:16:03 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100)=0x162, 0x4) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0xa}]) 00:16:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x64000400) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401070ca, 0x0) 00:16:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295e00000000f471671070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 00:16:03 executing program 6: r0 = socket$inet(0x2, 0x80003, 0xab) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x2, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000300), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x800, 'bond0\x00', 'vlan0\x00', 'gre0\x00', 'gretap0\x00', @link_local={0x1, 0x80, 0xc2}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb8, 0x1e8, 0x230, [@ip={'ip\x00', 0x20, {{@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, 0x14, 0x9}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}, {{{0x11, 0x0, 0x0, 'bond0\x00', 'ipddp0\x00', 'yam0\x00', 'eql\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xa0, 0xd8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x440) 00:16:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8090ae81, 0x700000) 00:16:03 executing program 7: rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigtimedwait(&(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100)={0x77359400}, 0x8) 00:16:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffffe, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004e1000/0x4000)=nil, 0x4000, 0x3) 00:16:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children/]\x00') [ 197.628579] IPVS: ftp: loaded support on port[0] = 21 00:16:04 executing program 6: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @random="db151d8bf481"}, 0x0, {0x2}, "00597a5e8e6b6e000900"}) 00:16:04 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x6, 0x0, 0x300) 00:16:04 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x41, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:16:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) 00:16:04 executing program 6: r0 = socket$inet6(0xa, 0x80003, 0x2) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000013ff4)={@multicast2=0xe0000002, @rand_addr, @multicast1=0xe0000001}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x200}) clone(0x0, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f00000007c0), &(0x7f0000000800)) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 00:16:04 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x7ff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 00:16:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x3a, 0x1, &(0x7f0000000040), &(0x7f0000000000)=0x4) 00:16:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) 00:16:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000140)=0x17f, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) sendto$inet(r1, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) [ 197.843325] device bridge_slave_1 left promiscuous mode [ 197.848936] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.904452] device bridge_slave_0 left promiscuous mode [ 197.910106] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.014476] team0 (unregistering): Port device team_slave_1 removed [ 198.028576] team0 (unregistering): Port device team_slave_0 removed [ 198.039922] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 198.058863] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 198.117620] bond0 (unregistering): Released all slaves 00:16:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1'}, 0x4) 00:16:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffffe, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004e1000/0x4000)=nil, 0x4000, 0x3) 00:16:04 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x38, &(0x7f0000068fe8), 0x0) 00:16:04 executing program 5: personality(0x20041fdfbe) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") uname(&(0x7f00000006c0)=""/176) [ 198.153523] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:16:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2d, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth0\x00'}) 00:16:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r3 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r2, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r4 = dup(r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r4, 0x0) sendto$inet(r1, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6c, &(0x7f0000018000)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x8c) 00:16:05 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") clone(0x200, &(0x7f00000002c0), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000002c0), &(0x7f0000775000)) perf_event_open(&(0x7f0000000480)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, r0, 0x1) clone(0x0, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000180)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2}, 0x10) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 00:16:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40040010000004c, &(0x7f0000000000), 0xb6) 00:16:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) 00:16:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x34, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) 00:16:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2d, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth0\x00'}) 00:16:05 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x1af) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000100)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, 0xc) 00:16:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2d, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth0\x00'}) 00:16:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x17, &(0x7f0000000000), 0x0) 00:16:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00'}) 00:16:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x125f, 0xffffffffffffffff) [ 199.077223] device lo entered promiscuous mode 00:16:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x7b, 0x0, [0x4b564d04]}) [ 199.116291] device lo left promiscuous mode 00:16:05 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffffe, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004e1000/0x4000)=nil, 0x4000, 0x3) 00:16:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2d, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth0\x00'}) 00:16:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) 00:16:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)="6d717565756500c60e52623eabd75dc5a4021f303d3c6be5d87144dd3d055a24b6ca6f88471d4996bfc41cb1c79581005409141e4ddd8b92afe99e9abe9edca413fc7137b9bf1621a001dc66005d931e8e6857f364608c551fbc15cd708268cdd9ed7d9076c4ccb4b791e5e9089237eb354892a888ae5b1b47d36ac785309ebe4a7dfdb0d2", 0x0, 0x0) [ 199.707142] device lo entered promiscuous mode 00:16:06 executing program 3: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0x1000000000017, &(0x7f00007e1ffc)=0x110000037, 0x4) setsockopt$inet_int(r0, 0x0, 0x200000017, &(0x7f0000000000), 0x4) 00:16:06 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000000780)=@pppol2tpin6, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000000f00)=""/14, 0xe}}, {{&(0x7f0000000f40)=@pppoe, 0x80, &(0x7f0000001280), 0x0, &(0x7f0000001300)=""/118, 0x76}}], 0x2, 0x10000, 0x0) 00:16:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000080)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) 00:16:06 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000600)="295ee1311f16f477671070") sendmsg$nl_route_sched(r3, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f0000000000)) 00:16:06 executing program 7: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x361, 0x7a5) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000016ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 00:16:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00'}) 00:16:06 executing program 6: r0 = socket(0x2, 0x3, 0x40000000000000ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x1ff}, &(0x7f0000000200)=0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00\x00\x00\x00\b\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) [ 200.011487] device lo left promiscuous mode 00:16:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5a5}) 00:16:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 00:16:06 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x5}, {0x6}]}, 0x10) 00:16:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5a5}) 00:16:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5a5}) 00:16:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000f96000)={0x9}, 0xfe53) close(r0) 00:16:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000000c0)=0x40000000000003, 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 00:16:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, 0xe) 00:16:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5a5}) 00:16:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x18) 00:16:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000080)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) 00:16:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r2, 0x407, 0x0) clone(0x0, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)) dup2(r1, r3) 00:16:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00'}) 00:16:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0x4004556d, &(0x7f0000000380)) [ 200.911691] device lo entered promiscuous mode 00:16:07 executing program 7: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x99) write$evdev(r0, &(0x7f0000001fdc)=[{}, {{0x77359400}}], 0x11a) 00:16:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = memfd_create(&(0x7f0000000180)='vboxnet0cgroup,nodev(\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000006, 0x11, r1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) 00:16:07 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") fallocate(r0, 0x41, 0x0, 0x4003ff) 00:16:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/223, 0xdf) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r2, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:16:07 executing program 4: r0 = socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f0000000380)=ANY=[]}, 0x0) [ 200.935865] device lo left promiscuous mode 00:16:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) dup2(r3, r2) close(r1) 00:16:07 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x0, 0x0, &(0x7f0000000000), &(0x7f00003cfffc), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:16:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000080)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) 00:16:07 executing program 2: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000700)) 00:16:07 executing program 4: r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) lseek(r1, 0x0, 0x3) 00:16:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00'}) 00:16:07 executing program 2: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000700)) 00:16:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000080)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) [ 201.563979] device lo entered promiscuous mode [ 201.582050] device lo left promiscuous mode [ 201.622593] sched: DL replenish lagged too much 00:16:08 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000f65000)=[{&(0x7f0000000180)="80fd0fa8e08c", 0x6}], 0x1, 0x0) 00:16:08 executing program 2: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000700)) 00:16:08 executing program 7: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)='F') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:08 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0x80, 0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 00:16:08 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) 00:16:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000012000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x3fffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 00:16:08 executing program 2: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000700)) 00:16:08 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0x40045731, &(0x7f0000000100)) 00:16:08 executing program 0: r0 = socket$inet6(0xa, 0x80801, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r1, 0x11a, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000000180)=0x3) 00:16:08 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"d202b999cf85000000000088f301e710", 0x1103}) 00:16:08 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7c, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) 00:16:08 executing program 3: r0 = memfd_create(&(0x7f00000000c0)="2f6465763f2f736e642f83657100d16bfb43fba7b2ed483542", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r0, r1) 00:16:08 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSRS(r1, 0x405c5503, &(0x7f0000000380)) 00:16:08 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)) clone(0x0, &(0x7f0000000300), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000000380)) read(r0, &(0x7f0000000280)=""/100, 0x64) 00:16:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x401, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@codepage={'codepage', 0x3d, '936'}, 0x2c}]}) 00:16:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip6_mr_cache\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000000280)=""/193, 0xc1}], 0x1) 00:16:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000002440)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$vnet(r0, &(0x7f0000000040)={0x1, {&(0x7f0000002480)=""/4096, 0x1367, &(0x7f0000001240)=""/4096}}, 0x3e7) 00:16:09 executing program 3: r0 = socket(0x2, 0x1, 0x0) r1 = socket(0xa, 0xffffffffffffffff, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'lo\x00'}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'lo\x00', 0x6}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) [ 202.680154] FAT-fs (loop5): Directory bread(block 2563) failed 00:16:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@can, 0x7f, &(0x7f00000000c0), 0x0, &(0x7f0000000480)=""/2, 0xfffffffffffffe25}, 0x0) [ 202.722372] FAT-fs (loop5): Directory bread(block 2564) failed [ 202.752938] FAT-fs (loop5): Directory bread(block 2565) failed [ 202.796671] FAT-fs (loop5): Directory bread(block 2566) failed [ 202.824679] FAT-fs (loop5): Directory bread(block 2567) failed [ 202.845268] FAT-fs (loop5): Directory bread(block 2568) failed [ 202.867986] FAT-fs (loop5): Directory bread(block 2569) failed [ 202.895314] FAT-fs (loop5): Directory bread(block 2570) failed [ 202.910193] FAT-fs (loop5): Directory bread(block 2571) failed [ 202.933194] FAT-fs (loop5): Directory bread(block 2572) failed 00:16:09 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 00:16:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0xbe0f, 0x4) pkey_alloc(0x0, 0x0) 00:16:09 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=""/126, 0x7e}) writev(r2, &(0x7f0000000080), 0x1a6) 00:16:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSRS(r1, 0x405c5503, &(0x7f0000000380)) 00:16:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)="2e2f66696c65ffff", &(0x7f0000000000)={0xc, 0x0, "bee36b0c"}, &(0x7f0000001ffc), 0x1400) 00:16:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 00:16:09 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="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", 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)={0xb, 0x100000001, "f5ba5b"}, 0x0) 00:16:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x70003}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="c744240000500000c74424020a000000c7442406000000000f011c240f0134120f20e035020000000f22e0e193ea2c010000e6000f00520ec4e1be5f7cd4a266ba400066b8f4ac66efdeb7eadb7cc866bad10466b8dd0566ef", 0x59}], 0x1, 0x22, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:16:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @ipv4=@rand_addr=0x1000000}]}, 0x1c}, 0x1}, 0x0) 00:16:09 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)) 00:16:10 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect(r0, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80) 00:16:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSRS(r1, 0x405c5503, &(0x7f0000000380)) 00:16:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ec0)={&(0x7f00000007c0)={0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000800)=@dellink={0x28, 0x11, 0x22f, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8, 0x1c}]}, 0x28}, 0x1}, 0x0) 00:16:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @ipv4=@rand_addr=0x1000000}]}, 0x1c}, 0x1}, 0x0) 00:16:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x2, 0x7fffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'nr0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x0, 0x0, &(0x7f00000000c0), 0x33e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 00:16:10 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 00:16:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x43) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000d39000)=[{0x10000000000006, 0x0, 0x0, 0x3}]}, 0x10) shutdown(r2, 0x1) 00:16:10 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 00:16:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @ipv4=@rand_addr=0x1000000}]}, 0x1c}, 0x1}, 0x0) 00:16:10 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) unshare(0x2000400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") fcntl$getflags(r1, 0x1) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000140)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1d0}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f47767") bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host=0x2}, 0x10) listen(r0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), 0x0) [ 204.499965] kvm: pic: level sensitive irq not supported [ 204.502578] kvm: pic: level sensitive irq not supported [ 204.520470] kvm: pic: level sensitive irq not supported [ 204.548064] kvm: pic: level sensitive irq not supported [ 204.584636] kvm: pic: level sensitive irq not supported [ 204.585896] kvm: pic: level sensitive irq not supported [ 204.615401] kvm: pic: level sensitive irq not supported [ 204.643226] kvm: pic: level sensitive irq not supported 00:16:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/if_inet6\x00') ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") seccomp(0x200000001, 0x0, &(0x7f0000016000)={0x1, &(0x7f00001e0fe8)=[{0x6, 0x0, 0x0, 0x7ffff7ff00000}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') 00:16:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSRS(r1, 0x405c5503, &(0x7f0000000380)) 00:16:11 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 00:16:11 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x200000088) connect$inet6(r0, &(0x7f0000000280)={0xa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000072eff0)=[{&(0x7f00000000c0)="480000001400257f09004b01fcfc8c860a881700f217e0060000e30000e5ffffbb5603000000000000000000ffff5bf109000000ed5e000000006203005b00000000000000000000", 0x48}], 0x1) 00:16:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1c3, 0x0, &(0x7f0000000580), 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="2664460f20c70f20d835080000000f22d8660f3880233664470f013b660f3a214dff0bb9800000c00f3235010000000f30f20f1014d5322e5d8d3e0f22d066baf80cb850eaac8eef66bafc0cb887fed4faef660f3881a7a9000000", 0x5b}], 0x0, 0x0, &(0x7f0000000480), 0x1000000000000007) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:16:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @ipv4=@rand_addr=0x1000000}]}, 0x1c}, 0x1}, 0x0) 00:16:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) ioctl$TIOCSSOFTCAR(r1, 0x5419, &(0x7f0000000100)) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 00:16:11 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)) [ 204.665319] kvm: pic: level sensitive irq not supported 00:16:11 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 00:16:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90, 0xffffffffffffffff}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 00:16:11 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), 0xc) 00:16:11 executing program 7: timer_create(0x0, &(0x7f0000000200)={0x0, 0x38, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000140)}}, &(0x7f0000000240)) timer_getoverrun(0x0) 00:16:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0)) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) r2 = eventfd(0x100000002) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 00:16:12 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x0) 00:16:12 executing program 7: r0 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x21) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/154, 0x9a}], 0x2, &(0x7f0000000500)=""/101, 0x65, 0x6e7}, 0x40010100) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x81, 0x0, 0x1}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x100) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getgroups(0x3, &(0x7f0000000240)=[0xee01, 0xee01, 0xee01]) 00:16:12 executing program 4: io_setup(0x9, &(0x7f0000001dc0)=0x0) io_pgetevents(r0, 0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0), 0x8}) 00:16:12 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f00000003c0), 0x4) 00:16:12 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 00:16:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6606"]}, 0x1c}, 0x1}, 0x0) 00:16:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x104d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x34d, &(0x7f00001a7f05)=""/251}, 0x48) 00:16:12 executing program 4: time(&(0x7f0000000080)) io_setup(0x0, &(0x7f00000000c0)) r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008740)=[{{&(0x7f00000083c0)=@hci, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0)=""/109, 0x6d}}], 0x2, 0x0, &(0x7f0000000040)={0x77359400}) 00:16:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x4}) 00:16:12 executing program 0: r0 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x21) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/154, 0x9a}], 0x2, &(0x7f0000000500)=""/101, 0x65, 0x6e7}, 0x40010100) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x81, 0x0, 0x1}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x100) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getgroups(0x3, &(0x7f0000000240)=[0xee01, 0xee01, 0xee01]) 00:16:12 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2}}}, 0x88) 00:16:12 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 00:16:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) 00:16:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x90) 00:16:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x2, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 00:16:12 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/130, 0x82}], 0x1, &(0x7f00000008c0)=""/233, 0xe9}, 0x0) 00:16:12 executing program 7: r0 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x21) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/154, 0x9a}], 0x2, &(0x7f0000000500)=""/101, 0x65, 0x6e7}, 0x40010100) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x81, 0x0, 0x1}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x100) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getgroups(0x3, &(0x7f0000000240)=[0xee01, 0xee01, 0xee01]) 00:16:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) close(r1) 00:16:13 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x8000000000004, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) poll(&(0x7f0000000080)=[{r1}], 0x5f, 0x0) 00:16:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x0, 0x7f}, 0x8) write(r0, &(0x7f0000ce6ffe)="da", 0x1) 00:16:13 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 00:16:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x7f}) [ 206.773768] IPv4: Oversized IP packet from 127.0.0.1 00:16:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 00:16:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) [ 206.809949] IPv4: Oversized IP packet from 127.0.0.1 00:16:13 executing program 2: r0 = socket$inet6(0xa, 0x400000001, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=',', 0x1}], 0x1, &(0x7f0000001780)}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x2c1}], 0x1, &(0x7f0000000200)}, 0x8000) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2df}], 0x1, &(0x7f0000001780)}, 0x0) 00:16:13 executing program 0: r0 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x21) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/154, 0x9a}], 0x2, &(0x7f0000000500)=""/101, 0x65, 0x6e7}, 0x40010100) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x81, 0x0, 0x1}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x100) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getgroups(0x3, &(0x7f0000000240)=[0xee01, 0xee01, 0xee01]) 00:16:13 executing program 2: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) write$sndseq(r1, &(0x7f0000001280)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) dup2(r0, r2) 00:16:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 00:16:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x40000107]}) 00:16:13 executing program 7: r0 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x21) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/154, 0x9a}], 0x2, &(0x7f0000000500)=""/101, 0x65, 0x6e7}, 0x40010100) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x81, 0x0, 0x1}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x100) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getgroups(0x3, &(0x7f0000000240)=[0xee01, 0xee01, 0xee01]) 00:16:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 00:16:13 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x8, 0xe0000001}]}, 0x20}, 0x1}, 0x0) 00:16:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmod(r1, 0x0) 00:16:13 executing program 0: r0 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x21) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/154, 0x9a}], 0x2, &(0x7f0000000500)=""/101, 0x65, 0x6e7}, 0x40010100) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x81, 0x0, 0x1}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x100) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getgroups(0x3, &(0x7f0000000240)=[0xee01, 0xee01, 0xee01]) 00:16:13 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) 00:16:14 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x40) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 00:16:14 executing program 7: r0 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x21) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/154, 0x9a}], 0x2, &(0x7f0000000500)=""/101, 0x65, 0x6e7}, 0x40010100) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x81, 0x0, 0x1}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x100) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getgroups(0x3, &(0x7f0000000240)=[0xee01, 0xee01, 0xee01]) 00:16:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="26000000130047f10701c1b00ef900000700000000ffffdf09ef18ffff000700000014006e35", 0x26) mmap(&(0x7f0000f95000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000f95fd7)={&(0x7f0000f98ff0)=@ax25, 0x10, &(0x7f0000f98000), 0x0, &(0x7f0000f91000)}, 0x0) 00:16:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x4) 00:16:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 00:16:14 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="f219946d9efe08e52cfdcc"], &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4626262c8523bf012cf6") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x117000}) r3 = socket$inet6(0xa, 0x802, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:14 executing program 4: r0 = memfd_create(&(0x7f0000000180)='em0\'wlan0\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1) readv(r0, &(0x7f0000003480)=[{&(0x7f0000003380)=""/245, 0xf5}], 0x1) 00:16:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") clock_nanosleep(0x4955051604c7bd61, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) 00:16:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) 00:16:14 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000000)) 00:16:14 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x250}]}) [ 208.115283] 8021q: VLANs not supported on lo [ 208.130774] 8021q: VLANs not supported on lo 00:16:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 00:16:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xb}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) listen(r0, 0x7f) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000080)=0x6, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 00:16:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 00:16:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r1 = creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) mq_getsetattr(r1, &(0x7f00000000c0), 0x0) 00:16:14 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c7442400e9000000c744240200000100c7442406000000000f011c24450f088f09b895f665410f3248b8b8789b86000000000f23d00f21f835100000000f23f826420f080f20d835200000000f22d866430f50ed650fc718c421c812f8", 0x5d}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="263ef30f524d02baf80c66b8c6b3c88b66efbafc0cb8ce5def3665dec9f4260f01ca66b9800000c00f326635000800000f306665670f1f00670f017cec35f40fb39adc00", 0x44}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85321, &(0x7f0000000280)={{0x80, 0x101}, 'port0\x00'}) 00:16:14 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f00000000c0), 0x54e) 00:16:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='/\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x10a032, &(0x7f0000000140)=ANY=[]) 00:16:14 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) [ 208.595962] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 208.625248] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 00:16:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 00:16:15 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xffff}, 0x1c) listen(r0, 0x0) 00:16:15 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000100)={'T!ROXY\x00'}, &(0x7f0000000140)=0x1e) 00:16:15 executing program 2: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc) 00:16:15 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x0) 00:16:15 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f00000002c0), 0x318) 00:16:15 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, &(0x7f0000000300)=0x100) 00:16:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 00:16:15 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46400) io_setup(0x8000000007, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, r0, &(0x7f0000000200), 0xfffffdcc}]) 00:16:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 00:16:15 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd0, &(0x7f0000000040), 0x2) 00:16:15 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x80140912, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffdce, &(0x7f00000000c0)}) 00:16:15 executing program 6: r0 = socket$inet6_sctp(0xa, 0x4000000000000003, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 00:16:15 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) acct(&(0x7f0000000280)='./file0\x00') close(r0) 00:16:15 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00000001c0)='./file0\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) poll(&(0x7f0000000080), 0x0, 0x400007f) rmdir(&(0x7f0000d19000)='./file0\x00') 00:16:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000985000), 0x0, &(0x7f0000164000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 00:16:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 00:16:15 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 00:16:15 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0042fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a6bd19ca420f485ad5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x2}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 00:16:15 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000140), 0x0, 0xffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000240)=""/167, 0xa7}], 0x1) signalfd(r1, &(0x7f0000000000), 0x8) 00:16:16 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000040)='projid_map\x00') rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x800000000044031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') 00:16:16 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) 00:16:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsv0='jqfmt=vfsv0', 0x2c}, {@errors_continue='errors=continue', 0x2c}]}) [ 210.031864] Process accounting resumed [ 210.043493] REISERFS warning (device loop2): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 210.043493] [ 210.067579] REISERFS warning (device loop2): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 210.067579] 00:16:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 00:16:16 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000040)='projid_map\x00') rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x800000000044031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') 00:16:16 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f000000a000)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 00:16:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 00:16:16 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) acct(&(0x7f0000000280)='./file0\x00') close(r0) [ 210.125193] Process accounting resumed 00:16:16 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000040)='projid_map\x00') rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x800000000044031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') 00:16:16 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00000001c0)='./file0\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) poll(&(0x7f0000000080), 0x0, 0x400007f) rmdir(&(0x7f0000d19000)='./file0\x00') 00:16:16 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f000000a000)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 00:16:16 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000040)='projid_map\x00') rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x800000000044031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') 00:16:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0xc0c0583b, &(0x7f0000000180)) 00:16:17 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=""/65, &(0x7f0000000400)=""/64, &(0x7f0000000440)=""/199}) 00:16:17 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000140), 0x0, 0xffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000240)=""/167, 0xa7}], 0x1) signalfd(r1, &(0x7f0000000000), 0x8) 00:16:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="f9", 0x1}], 0x1) 00:16:17 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f000000a000)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 00:16:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) 00:16:17 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) read(r1, &(0x7f00000001c0)=""/105, 0x69) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x0) read(r1, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 00:16:17 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$sndseq(r2, &(0x7f0000011fd2), 0xffffffee) write$tun(r2, &(0x7f0000000200)={@void, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@broadcast=0xffffffff, @random="684b0d4752a8"}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}, 0x28) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x0, 0x44, "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", 0x0, 0x0, 0x2, 0x1, 0x0, 0x6, 0x6}}}, 0x120) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1) dup2(r0, r1) 00:16:17 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) acct(&(0x7f0000000280)='./file0\x00') close(r0) 00:16:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0xc0c0583b, &(0x7f0000000180)) [ 211.307978] Process accounting resumed [ 211.319505] IPVS: ftp: loaded support on port[0] = 21 00:16:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00000001c0)='./file0\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) poll(&(0x7f0000000080), 0x0, 0x400007f) rmdir(&(0x7f0000d19000)='./file0\x00') 00:16:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0xc0c0583b, &(0x7f0000000180)) 00:16:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0xc0c0583b, &(0x7f0000000180)) 00:16:18 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000140), 0x0, 0xffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000240)=""/167, 0xa7}], 0x1) signalfd(r1, &(0x7f0000000000), 0x8) 00:16:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000001140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000000c0)=""/130, 0x82}}], 0x1, 0x1, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:16:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000001140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000000c0)=""/130, 0x82}}], 0x1, 0x1, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:16:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000080)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "59cf728caf628bac"}}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 00:16:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/183, 0xb7}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000015c0)=""/224, 0xe0}, {&(0x7f00000016c0)=""/254, 0xfe}], 0x5, 0x0) 00:16:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000001140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000000c0)=""/130, 0x82}}], 0x1, 0x1, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:16:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x709, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IF_NETNSID={0x8, 0x2e}]}, 0x28}, 0x1}, 0x0) [ 212.493480] Process accounting resumed [ 213.346142] device bridge_slave_1 left promiscuous mode [ 213.351711] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.363712] device bridge_slave_0 left promiscuous mode [ 213.369301] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.363614] team0 (unregistering): Port device team_slave_1 removed [ 215.374465] team0 (unregistering): Port device team_slave_0 removed [ 215.384858] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 215.401392] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 215.428742] bond0 (unregistering): Released all slaves [ 215.499087] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.505489] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.512830] device bridge_slave_0 entered promiscuous mode [ 215.549933] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.556332] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.563750] device bridge_slave_1 entered promiscuous mode [ 215.598545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.632772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 215.735151] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.772415] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.932244] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.939743] team0: Port device team_slave_0 added [ 215.973776] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.981306] team0: Port device team_slave_1 added [ 216.015819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.054183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.092163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.130687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.494776] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.501184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.507850] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.514236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.522101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 217.406831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.481287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.505148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.564912] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.571554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.579866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.654494] 8021q: adding VLAN 0 to HW filter on device team0 00:16:24 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f000000a000)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 00:16:24 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) acct(&(0x7f0000000280)='./file0\x00') close(r0) 00:16:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00000001c0)='./file0\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) poll(&(0x7f0000000080), 0x0, 0x400007f) rmdir(&(0x7f0000d19000)='./file0\x00') 00:16:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000080)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "59cf728caf628bac"}}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 00:16:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000001140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000000c0)=""/130, 0x82}}], 0x1, 0x1, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:16:24 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x0, 0x2}) 00:16:24 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80044100, &(0x7f0000000040)) 00:16:24 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000140), 0x0, 0xffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000240)=""/167, 0xa7}], 0x1) signalfd(r1, &(0x7f0000000000), 0x8) 00:16:24 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80044100, &(0x7f0000000040)) 00:16:24 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='sysfs\x00', 0x0, &(0x7f000000a000)) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 00:16:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 00:16:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000080)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "59cf728caf628bac"}}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 00:16:24 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80044100, &(0x7f0000000040)) 00:16:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 00:16:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000080)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "59cf728caf628bac"}}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 00:16:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000004c0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f0000000280)='./file0\x00', 0x0) [ 218.395861] device bridge_slave_1 left promiscuous mode [ 218.401712] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.418644] device bridge_slave_0 left promiscuous mode [ 218.424358] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.482018] team0 (unregistering): Port device team_slave_1 removed [ 218.501811] team0 (unregistering): Port device team_slave_0 removed [ 218.517109] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 218.555618] bond0 (unregistering): Releasing backup interface bond_slave_0 00:16:24 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80044100, &(0x7f0000000040)) [ 218.645300] IPVS: ftp: loaded support on port[0] = 21 [ 218.670741] bond0 (unregistering): Released all slaves 00:16:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$llc(r2, &(0x7f0000000080)="57860e17f91a8bf2", 0x8, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) [ 219.063503] Process accounting resumed 00:16:25 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r1, 0xffffffdffffffffc, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) close(r0) 00:16:25 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) sendmmsg$nfc_llcp(r1, &(0x7f0000002440)=[{&(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f066cf8c4f9f8dffa4f1215b385238acea7801d01f19befd6e3064f551d7a0f058a6e1f48c1709a3753be598e31313028c6b3062e01b0044a89645d8a4c580"}, 0x60, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={0x10}, 0x10}, {&(0x7f0000002040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "11c2a1d1cf02c798bae95dec50d9e07550bc588ee947a6bccdf3adec3b8528276d8114d3eeed95fd8169cea40666bf683080852fef79a5e7cb88acbcb5a9e0"}, 0x60, &(0x7f00000023c0)}], 0x2, 0x0) 00:16:25 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r2, r0) write$binfmt_elf64(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f"], 0x1) creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) 00:16:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 00:16:25 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000006c0)=@abs={0x1}, 0x6e) 00:16:25 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 00:16:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 00:16:25 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000c4c000)=0x4, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4000000000cf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:16:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x0, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x2, 0x0) 00:16:25 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000afdf)={0x28, 0x3, 0x0, @fuse_notify_inval_inode_out}, 0x28) 00:16:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4040, &(0x7f0000000180)) creat(&(0x7f0000002500)='./file0/bus\x00', 0xcebb6074bb566d03) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 00:16:25 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r1, 0x1) 00:16:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000001200)=""/4096, 0x1200}, {&(0x7f0000002200)=""/4096, 0xfffffca1}], 0x2, 0x0) [ 219.789506] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.796230] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.804110] device bridge_slave_0 entered promiscuous mode [ 219.843747] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.850236] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.857695] device bridge_slave_1 entered promiscuous mode [ 219.893578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 219.931315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.055685] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.124932] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.320373] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.327827] team0: Port device team_slave_0 added [ 220.378849] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.386478] team0: Port device team_slave_1 added [ 220.446327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.501202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.546349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.584129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.887848] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.894211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.900845] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.907223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.914481] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.654860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.727050] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.733240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.808118] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.814271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.821839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.893562] 8021q: adding VLAN 0 to HW filter on device team0 00:16:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) 00:16:33 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="66b8009000000f23c00f21f86635020006000f23f80f01c80f6ae3b800008ee00f01cbbaf80c66b85470078366efbafc0cb066ee0f01c8263ef2afbaf80c66b8ebb6dd8366efbafc0cb0deee0f2120", 0x4f}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="266464f2f0806ead000f08c744240007000000c744240200980000c7442406000000000f011c24d0f0c4e1fc5a685866baa000ed66baf80cb8b14cb385ef66bafc0cb033ee0f20c035040000000f22c064f4c4e1781726", 0x57}], 0x1, 0xc, &(0x7f0000000180), 0x204) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:33 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}}) 00:16:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200000008080000b90200000001000084811f4ce10000001e000000000000000010ec0302e5fb00526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000013900)) 00:16:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x1}}, 0x18) 00:16:33 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r1, 0xffffffdffffffffc, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) close(r0) 00:16:33 executing program 3: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @rand_addr}}, 0x11c}}, &(0x7f0000000280)=0xb0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0xd3f, 0x1, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 00:16:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xf728}, 0x2c) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) open_by_handle_at(r0, &(0x7f0000000200)={0x9, 0x1, "01"}, 0x0) [ 227.188649] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal 00:16:33 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) ftruncate(r0, 0x800) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) [ 227.238246] REISERFS (device loop1): using ordered data mode [ 227.244158] reiserfs: using flush barriers 00:16:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) [ 227.280616] REISERFS warning (device loop1): sh-458 journal_init_dev: cannot init journal device 'unknown-block(8,8)': -6 [ 227.291890] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device [ 227.310781] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space 00:16:33 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3fab09b252a495a15a4685ab5873fe848034c3c1a98ae90082485a5a221d3c"], 0xe8) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 00:16:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000002c0)="0f0926f20f01180f229066b9490b000066b80040000066ba000000000f30f082913c0000650f00db660f3803c6660f3a61367cf9c33e3e0f350f01cf", 0x3c}], 0x1, 0x24, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:16:33 executing program 7: clock_gettime(0x0, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3, &(0x7f0000001840)=""/106, 0x6a, 0x4}}, {{&(0x7f0000001b00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001b80)=""/128, 0x80}, {&(0x7f0000001c00)=""/15, 0xf}, {&(0x7f0000001c40)=""/147, 0x93}], 0x3, 0x0, 0x0, 0x80000001}}, {{&(0x7f0000002000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002080)=""/91, 0x5b}], 0x1, &(0x7f00000031c0)=""/207, 0xcf}}], 0x3, 0x10000, &(0x7f0000003480)) openat$mixer(0xffffffffffffff9c, &(0x7f0000003440)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003cc0)={@loopback={0x0, 0x1}}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[0x0], 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000003500)={0x18, 0x0, {0x0, @random="adb63a9831f4", 'bridge_slave_1\x00'}}, 0x1e) r0 = syz_open_procfs(0x0, &(0x7f0000003540)='net/tcp6\x00') read(r0, &(0x7f0000000180)=""/230, 0xff4e) 00:16:33 executing program 3: syz_fuseblk_mount(&(0x7f0000009880)='./file0\x00', &(0x7f00000098c0)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bfs\x00', 0x0, &(0x7f0000000200)) [ 227.584705] FAT-fs (loop6): Directory bread(block 128) failed [ 227.600832] FAT-fs (loop6): Directory bread(block 129) failed [ 227.624764] FAT-fs (loop6): Directory bread(block 130) failed 00:16:34 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x60894d0f, &(0x7f0000000340)="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") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000140)=0x5, 0x8) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3"}, 0x60) bind$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "48fb39fe415d8475fe41318cdaa8cb821aaba7ba58c6a4d537711ecd89e537bc02b181f187b19423316480477beec2c29087e9a63a84d101b8f1617ab346e6"}, 0x60) dup2(r3, r2) [ 227.645961] FAT-fs (loop6): Directory bread(block 131) failed [ 227.652233] FAT-fs (loop6): Directory bread(block 132) failed [ 227.662057] print_req_error: I/O error, dev loop199, sector 0 [ 227.678852] FAT-fs (loop6): Directory bread(block 133) failed 00:16:34 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setreuid(r1, r1) setresuid(r1, 0x0, 0x0) [ 227.724842] FAT-fs (loop6): Directory bread(block 134) failed [ 227.752537] FAT-fs (loop6): Directory bread(block 135) failed 00:16:34 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)}], 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x358, @local={0xac, 0x14, 0x14, 0xaa}}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}, 0x8, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 'bpq0\x00'}) 00:16:34 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3fab09b252a495a15a4685ab5873fe848034c3c1a98ae90082485a5a221d3c"], 0xe8) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 00:16:34 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = getpgid(0xffffffffffffffff) process_vm_readv(r1, &(0x7f0000005040)=[{&(0x7f0000003d00)=""/153, 0x99}, {&(0x7f0000003dc0)=""/24, 0x18}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/181, 0xb5}, {&(0x7f0000004ec0)=""/73, 0x49}, {&(0x7f0000004f40)=""/249, 0xf9}], 0x6, &(0x7f00000060c0)=[{&(0x7f00000050c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000006100)='/dev/mixer\x00', 0x400, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000006140)=""/48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r5 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002840)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000002940)=0xe8) stat(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast1, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000002b40)=0xe8) r10 = getgid() r11 = syz_open_dev$admmidi(&(0x7f0000002b80)='/dev/admmidi#\x00', 0x5241, 0x8a200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000031c0)=0x0) r13 = getuid() getresgid(&(0x7f0000003200), &(0x7f0000003240), &(0x7f0000003280)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000032c0)=0x0) r16 = getuid() lstat(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getpgrp(0x0) r19 = geteuid() lstat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003700)={0x0}, &(0x7f0000003740)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003780)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000003880)=0xe8) sendmsg$nl_crypto(r11, &(0x7f0000003cc0)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)=@delrng={0x10, 0x14, 0x4, 0x70bd2d, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0)={0x0, 0x0, 0x0}, &(0x7f0000003900)=0xc) sendmmsg$unix(r4, &(0x7f0000003ac0)=[{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002780)=[{&(0x7f00000003c0)="3f952c0711ecfab69cb87b8466f9803d94c21b9fa1b9baca8de7fd7b5cedde2ca524db1570f15991f842bcece83901cac9ca1ddceed4e61825a64ef74c09e64e513df5dc27951804e4cc4be47c28c33b3c479afe6bcb9334541f89426eae4fb406402fa496df403abd1989db2d42e388280aea7f03bbb4bf665f27fcaefb218970d6e7b619dd61de285f1ba9f31f62a958f79d3e7990aed39c9419171cc63f3adfc1add2d3ae3aae13e5b7cec098e6668a81921c5f984cb8d4c9c3ef9b14925b44d6f603553c80ff909edb9b6f", 0xcd}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="fcdde78d3ca98ab8233f5315657ae1200604214790447998debb5c5c32bc2cca77cf5ed62e9ee59ba821768d7f10f4173e09a67982e1c06e5107238c756a19e48605189d8c7a67feb6ec94e0747f11733cdc5547351d4e6c5e800b09f9eb8c724290c84b2220741b35676cea420a0c9235efacda9710a3386706f75a93adcc2abb3a30752ec31339a1c7711b4fd37d94f9706cd57b17c81405e2d49815c50b0d51e542d07aa89c5ad1166a46b2a9b2371c0139ff89e632b9c3e9d485d25f60310faf71b698", 0xc5}, {&(0x7f0000000080)="14c30a708fea8ea86cdba81f560ed2cb48f4db74643344e9", 0x18}, {&(0x7f0000000240)="f6ee317f7f70072f63f6f953904221d6e51028e15728127b57af17cc4e887a0d66111ce98905e83a3291814cd80f1a44de3646981c99faa6412e8cc63c00b308e4a084f9685a23a7da7d4195d2b2642ccf3f500f2c1aa0f33f562ff3c6ae419e262eefdc657b785ec7df2bbdf79400c3fbb6a64f2ca8657b905c1f6d20086e2e9fb5500d73eda98e13f541f7d213b62f44ab812a356be411ccbdfff9654df5d68fe06d3f8881782b797497a51fa990f2da21", 0xb2}, {&(0x7f00000025c0)="2de478eeb262fa79939f8db14061aeba58a02dd8543ee44fdab085be2abc96eec23d736bdca70bc7c417a394943e96420de09b6173774504a1ce3339729660ce7c512c430c2b6d5e6a43edd4bb74708a2771c9e8dfd8e29cfcb6de48876811624ccd4e0e1710b57caa67ffeb509ed427b19480028a34eb770575f138b8ae5d0e112a7505492ac249c81ce6bcc5bc055eafd10ba39d72d4a22f592fd20af2827c2ebf785aaa1060ddb85eb99e63f30d6b13771176c279c16ed239dcc96c652eb5d67fec3c93af142a4abd90deaa88f250d9e4cca4cfa6c1994f410f7350e64694870bcb64ea6f28fd", 0xe8}, {&(0x7f00000026c0)="8a868e1bda200fd11405885a3d10ee7d8bfe7c09624ffff6d27f4f06ea01bf0430960b77ae48502b9b658293d7798a07db69068897cb09c4ffaee35d38cfdc4df3168776deb762de72dbd8c6ea16d4574d93406ed6a6e54548a159ce0bf3d0cc8a6e6ae7c423e2b5f3f4b5277b40dbfe3c5d4090ef88533b77abbd78eda7a70a08c48b58e2baffa79e64795ec35f2ee18401255028ba5a6b586ad610", 0x9c}, {&(0x7f0000000180)="d83685a1a96f47b32625ed8076d91451f134f88fdc1ccbd82af8c6e71802a5188bf60c25c03c7102ec35eedc51a363f120d9359faf8cd4649426f36925d9460ff64d4743da894eb8bbbeb9", 0x4b}], 0x9, &(0x7f0000002bc0)=[@rights={0x28, 0x1, 0x1, [r3, r0, r0, r3, r3, r3]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r3]}, @rights={0x10, 0x1, 0x1}, @rights={0x18, 0x1, 0x1, [r11]}], 0xa8, 0x20040000}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002d00)="56b0a00ee068b07dbfee4b47288014cbe9a1c8c8572dc932812246a5f773127b0c85258777d275193fbb92359bf5cdcbe21c15a81a0b70f737093dc3055369faace3377f94de08b4034ca7f349f3e0a5bffa9ea2ce6a3e938dd29fbed03a4306ec071f0d581fc5853e83b386f814287e9d10504b85e88500f138985fe230c40348905ec4092020c72b1950d0e0f477287fa6fd9c57c9d454e596510e6e67055db54209bd5969", 0xa6}, {&(0x7f0000002dc0)="4cd24a3e7f4b2686cd1d25203c9bf988175b22bc47b7b4e84973a40e9e269e72b43f01a0bfbd5976d1833b50", 0x2c}, {&(0x7f0000002e00)="6b866266eb1d1684163c82cb2279a76c190b539c29b0e5374c789ad6e8aecdefc7aae6d6fdae56faddc0c800f2332ecdf7cadc3d81211da3c026392d2a2a16bbd2b60656ba540c272ef8292270a5154b4350a85fd9a9836a4feb41f69bfadfc465b6881662787be4972799ed0fe574a479dbdffb2d1f79f8471f212724137ed13c4844f3d4fa2fc09e9d1eaca145acd72f", 0x91}, {&(0x7f0000002ec0)="708c9e656e9fbd64b0664eeedd21ead5663e0ef1507eff8fa35c28820a8a2f6f39ebbf85d0b03adc5de14ff902affde3f7f17ac9a6dc8f2b25bf899264ee959057993e435c435601183329968e09d6b82137de6572b54b5f132d1c6e83ded4126513dd7a01d583fd4560de72a095b264d54feb744acb2cd23e82d55283847f5b4215dac8c929f86787c6d20270c6dfea7ea36360a98aa930e8daa6dee9a1f417cc9dc825ab953c3a8de287f3f6f9447ca31872d6c5cf82c83b25ac234c36f10d9c6173065e3ad21c7e2d5238928305594974fdf074a9e8c30247ffc30ca1d96437758ad6eca6ae170d17ac47", 0xec}, {&(0x7f0000002fc0)="0914b0ed357a1d9f9e", 0x9}], 0x5, 0x0, 0x0, 0x1}, {&(0x7f0000003080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000003100)="7509b0ec3216831178e9ab428a37de2164f761a6689cda03bf1c601ba44b7634f302c139acfcf012eeca5c1e14dc762e01b6b3498beb3b6ea94c9b8ac9c78ef4d0f77c67301569798763305d21258b495b14475a6ca730f38ef1525caf5eb205f483d00cabc5f60e3e041e145b0a6aff9367", 0x72}], 0x1, &(0x7f00000033c0)=[@rights={0x18, 0x1, 0x1, [r0, r3]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x20, 0x1, 0x1, [r0, r3, r0]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x20, 0x1, 0x1, [r3, r0, r3, r0]}], 0x98, 0x20008080}, {&(0x7f0000003480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003500)="59343cec44beabb014ee8bb687af62e5cb84b4ac6faf094046793efee54795d10bd83a43d8ccf9ed4cc04fe45552f1e34725aa3bb5aaaf8b8a44b6c6b210c6db9aee60632ba1dd8417a2871a7f7708e017be9be6b54e2b8ac01baecfe1bd66cc75e95a0eec8442285a486b4afaa61e851afc0c476a482b0f7465239ae3edf3ce7bd81844c7e0c47014696a46eaae987a9980728d81f6b9d8e1bd8f23f309f76a4ac7be79e17bf5ab036caf914bb9bd2f70d6bc7b9e7191586c3e8dbc69c1afea93e0852328f76d9adbaf45005534e913229564d28f6bf472779a21ab851f631603e6555d912411be0e204444cd83d369b721fc5c0ddf88d8de", 0xf9}], 0x1, &(0x7f0000003940)=[@rights={0x28, 0x1, 0x1, [r0, r0, r3, r0, r3]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}], 0x68, 0x84}, {&(0x7f00000039c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003a80)=[{&(0x7f0000003a40)="2de9dd482344607fb7ec93b7036549fec365d7d1f425b7e392aa9c469288f8deaeba47a58997", 0x26}], 0x1, 0x0, 0x0, 0xc004}], 0x5, 0x4000810) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000380)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@typed={0x4102, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) [ 227.769769] FAT-fs (loop6): Directory bread(block 136) failed [ 227.781497] FAT-fs (loop6): Directory bread(block 137) failed 00:16:34 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000000000000a004e20ff010000ff020000000000000000000000000001000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e20ffffffff00000000000000000000000000000001f9ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2104000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2001000000fe80000000000000000000000000001508000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240200000000000000000000000000ffffac1414bb08000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2407000000fe8000000000000000000000000000aa00000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000a004e2174000000fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22d1130000fe8000000000000000000000000000aa0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x410) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000100)) 00:16:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x11}) ioctl$TCXONC(r0, 0x540a, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TCXONC(r0, 0x540a, 0x1) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xc27, 0xa0000) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x7f, 0x7f, 0x1}) [ 228.048753] attempt to access beyond end of device [ 228.054061] loop6: rw=2049, want=310, limit=128 [ 228.058788] buffer_io_error: 14 callbacks suppressed [ 228.058798] Buffer I/O error on dev loop6, logical block 309, lost async page write [ 228.076261] attempt to access beyond end of device [ 228.081335] loop6: rw=2049, want=311, limit=128 [ 228.086078] Buffer I/O error on dev loop6, logical block 310, lost async page write [ 228.095269] attempt to access beyond end of device [ 228.100324] loop6: rw=2049, want=312, limit=128 [ 228.105150] Buffer I/O error on dev loop6, logical block 311, lost async page write [ 228.114263] attempt to access beyond end of device [ 228.119339] loop6: rw=2049, want=313, limit=128 [ 228.124088] Buffer I/O error on dev loop6, logical block 312, lost async page write [ 228.132742] attempt to access beyond end of device [ 228.137776] loop6: rw=2049, want=326, limit=128 00:16:34 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r1, 0xffffffdffffffffc, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) close(r0) 00:16:34 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000180)={0x9, 0x2f, 0x2, 0x0, 0x8, 0x104a800000, 0x40, 0xf9, 0x9ab20000000, 0x4, 0x5, 0xfffffffffffffffb, 0x0, 0xffffffffffffdef4, 0x3, 0xfffffffffffffffc, 0x0, 0x7ff, 0x10c000000}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000001c0)={0x7}, 0xfffffffffffffd77) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x20000000) 00:16:34 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = userfaultfd(0x20080800) r2 = memfd_create(&(0x7f00000000c0)='\x00', 0x1) ioctl$KDENABIO(r2, 0x4b36) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001540)={'filter\x00', 0x0, 0x3, 0xf0, [], 0x1, &(0x7f0000001400)=[{}], &(0x7f0000001440)=""/240}, &(0x7f00000015c0)=0x78) sendmmsg$nfc_llcp(r2, &(0x7f0000001340)=[{&(0x7f00000001c0)={0x27, 0x1, 0x1, 0x0, 0x9, 0x2, "8c27c5007a7eddad1be5f588eb5680618b9c69ef9e74c37977d7c9a914f13b303f58741bda750bc0f395d1737a14e508e31669a7066caaa76a9eb4d96e70a9", 0x2f}, 0x60, &(0x7f0000000680)=[{&(0x7f0000000240)="59419bea58197bccf6041f70eba2203a02f5ea067b699dfb11f8a712d19cd356bead3171abafb8143f5b245f5722b2b58a059a9bcc271f6c2209760e7ba81d9c34b4093b2b5cd2b07ed03a6a372a4d230556825c773a34db86d151266de514192c1606fb8ef74e486bd9ccb63e6b4a668cad678dd5b7193f4dd1b8403ed154b622f28c7160ffc64508acfee165a94aa441e8f5d86fc091834b37e02a9aafd5ce19452e09ed4a28994227e52f6655d26a2a8e514be72c248f476e74d881e8c932d075b91e514667b3804031c4d786", 0xce}, {&(0x7f0000000340)="941edbd67581faee3c4138e831b3d2f5dacc720e7caa6ab89fa2a8f0ff9b302fd981c1ae5e1d210e5f973e85fc839280e46ada64e33c8bd2394f460c978d7f8c8564905720b35075bc7212338745103de209ed2810584d378bf9a8c217a64930e50a16280264fadbc3a830b3f555883f04c5d24e3e", 0x75}, {&(0x7f00000003c0)="a701157419371bad4a93d9e89439dfce841d2aab2ebfe3a1519a041d5c3dc055a80d0794ceb7babc268edca5b0f36f757aaac492dc7aacbd546a649abac93215cf00d2dc4da33f2813c56c63f8978cd900120a3718b6c50465a1508fee7b94d5592f2a3189be91b8914174478f12239e4f", 0x71}, {&(0x7f0000000440)="51fa5f254abc", 0x6}, {&(0x7f0000000480)="6542a942375388532b418ca64e352123193e89112801c05e45cc2297af2c5e8e2ff176c69cacb1578bf075e560d002794f5673b688d8a269ec488f16d335ca5585912a7ab21160e354f88834f18216244b7785706451d3b4ce23bab273751470ba10b8ab50", 0x65}, {&(0x7f0000000500)="5ae7d6acfe1ddae6f6fb28594fb0c253666eb4830b3b1ba35f1ffc30e67b6483c915db5a60f43c1872367b85d00d8ca78e4a76cc0de9078c2fc441aeb5abc4893d9a97d1e01da346840a98c6dabb66a0b41a666a8b117bd3bf4d505fab84b5d6cf24eafe2d", 0x65}, {&(0x7f0000000580)="5904ff66e2e89e37d976e158f6c1db5dc8cfa88f546a3c58d04d756f4304e909bb24ac0729af6f5b2b81519e6fd3abe5a84870d687606c0a2841bc8f65aa8cd66acff23af9c38284", 0x48}, {&(0x7f0000000600)="936a13e05c7127ae957a3d505631aebf40ab756d3bf11554669fb10749e8e4918126a04ab4791530823ca19c50ca008898539e6181fdc31ca16cbe4f0afa80d5bc", 0x41}], 0x8, &(0x7f0000000700)={0xa8, 0x84, 0x7362, "0578a5aa3b270794f0473092b39a8dfa9d4218897ef4f7a6580578d3c3085064fb566e4fb43a159d650e7d1951f4dafbc24e125eede0d8a7f3d71ab811a347dbed9be2034c996e6b1c86e4f5fe2a67379b7022dde11dffad33ad1af1141247604977320cb4bbf686e9e850b55a87475d06821940866c660e2c523ef054909f4d4d901973a40b6f37b163e16e23ee5a837c"}, 0xa8, 0x8000}, {&(0x7f00000007c0)={0x27, 0x0, 0x1, 0x7, 0x0, 0x20, "0489bb6c0e938356018f36a93cf422de8ba72c061750683ce5d8f67179d2dd42a543e13386607912151b40b759dcf5ee5dc094603febc4d15183f878e81ee9", 0xe}, 0x60, &(0x7f0000000b80)=[{&(0x7f0000000840)="ab17487b2f8788e5110dcbaee7eee442d6d19b3d5a688696c3e1bdf62e604ce4868eb8fdea4ff771f5af782f5b9baab95144e58422e9056b22f638f8cb6355be4fbad746506ff6fcf26b5c8a1c", 0x4d}, {&(0x7f00000008c0)="fbaa11569476c1aedf262d3f9045b78fc11e721c21fabb03f6a85c066aa2d665adcefdfa3d48cf5f56a5e5183630be0a1173e2dd7934c385d844a7d80ffde1382e98c45c265dab989efbf2129719e777971e144c1470889c08187147c482e5f8327d25ba9469a6ccf90f9e5810cab1b1e7f3a61b649d6b", 0x77}, {&(0x7f0000000940)="3a6b6ca40b466cf9385985f7849abcf1861afb97436f21b5b1551cfb5a838d01efac6c91a3e28bfa64b38a13623e843d5f3347f5cc4914068ee0e9a205be89b85563580e3279c6d4e1152a29d8a0af367a8b4b1b04189ca482824709784c7ddafc6393c4401644dd65ac2e03b2646427f33150147f269c3352a4e2470620ac210c8fb58702c6e32a7b259a29ad1167c63e8e2949ad00f37d744fbb92bc7e559f2656bff32bd2b22d0436fb9b16f2615cfc212fc972f23b61033c4dae775e6dc56422fe692a0bbacd5f8541ca5a0d6a79af5e5fe9b344bd25c97ac8a8c0cc16b525e0e710c1801e130740f12d327035d0b533635bd6c94542a9af", 0xfa}, {&(0x7f0000000a40)="50602cb5e15f53b297120fb8690ce6a2d10379844d795bc135aa93ba8a51cd2903f4d16d5568881f869df29d30e6a80150de916781d973ebe820454b4a6e0cb50c9c00d135c37a43d0e418cf23c51c0ca1fbf98d4111d067a2b5d0c76417bf671efb7e3adda792626c6d54827d79", 0x6e}, {&(0x7f0000000ac0)="db558e221dde961a25b92959f9a56488dfa753c2e78791900044f7edb64a1dca66ef83d681573eaa2995148f42c4a1cab135f779d30a3d11379243ca4e0f8d16fa42141981e34cee5377b738bbbc34e6ea0d63570c75508b651dac8da5e9c16f977cc98fbc9c1bcacd80ca0a8737cc913a500a5ce40ce87c4b2b4067371f0e3f6a6fab3de265712dc851423c852361ece93567de2cbc9e05323c77143fa4ec7b3db0b7d19af9958471a223829a47851a6656dbbe2c258859a26dd92b7ee6782b", 0xc0}], 0x5, &(0x7f0000000c00)={0x28, 0x0, 0x34, "b27dfa1889ede6aad8c99df5d1e152c270"}, 0x28, 0x4000}, {&(0x7f0000000c40)={0x27, 0x1, 0x2, 0x6, 0x0, 0x4, "0455d93fd5d28d2306d799744d4469567dce8a6f3afcb1b48e0d83b9c7c663e5b2f62e7d5eda144a85cea0ed2288efa7d93ad9667023f06af5a56dee7a6a60", 0x29}, 0x60, &(0x7f0000001200)=[{&(0x7f0000000cc0)="c54c95180562771d117c14a88c0497551de5e9c0e64a4f3457885d8acfb10150fe318830c890449ed51e71241d90b0ab4530226179a3", 0x36}, {&(0x7f0000000d00)="48eb0e55967d3fa8b4b6f3b2cbbdc00ed193a2589c00", 0x16}, {&(0x7f0000000d40)="477381bf77df4b9263ff5c8610f86e9d7a518d5263d9ab761bf49963c0902c6f8308db12e028d0cf8b1d8c0f3c9e5f93a2a6468f38f7ec51b8ad4878c12325113b51a4ab2c88bfbd9cdd3c2474bf1623fc71a37253d6888d766fc3406b56053a35185be1fbbcf27d44ad546feb8740c8385aef131338d348416dddf8c572", 0x7e}, {&(0x7f0000000dc0)="54ec7f9bc52bd5d0d8564276585b41fcfffc1939c563c6351b7670724d42f3e36e4beaad8e1e827ce9ea0b", 0x2b}, {&(0x7f0000000e00)="25f4b8ce0d64d40c", 0x8}, {&(0x7f0000000e40)="9b491a968192ae7e56b43f3f56f45bf09a3bf0132ece462ef14ec349719f8e9d111cdf1aed8a13a9ef07494f5297b8131b1f2c5d1b4db3a43fed0ad1ec12ae9b1bea53281f8d29c00af7c44409ac0ed2d98fb5e090ab13b7b33904a867a98543a29fd94fe8ec2da4fb436413fceae0a23a32b80f6330415a36f7bad46d4d30322db39705085b67dfc6cac2b586faa8a329341d1e7540136562975fb3909462f09eea597b4256b0362b63a05d1eb0048d5a28700448b20e7a88d57c9e76485198b1a96936ae1258606c471fd21be8afcba0a9a96c80ffc3a6d6ddd1e69825b21280a9a1f3384739ad", 0xe8}, {&(0x7f0000000f40)="03ff8f969df8d6a5a94ab568cf0eff59ad74a4258715b67698a0e7ed16d4fdd9b81ca8d6e661edf023596c541fd2852e4db38d9a5eb26d69c5604d2b7ffabdfed27c1038037450084b5c79c89e5e2ebda73672db8660ed55f993ce3f3d1d9ae45af84c57721a0d200a796a4961", 0x6d}, {&(0x7f0000001040)="568cdd496b242ce456a35d6d954368d49823c48fb2f8b99a2bfc631f9aed7ea32dcb95db8d2f7f7859a4dc2df4e0eca0671a1c4d10ef477b19c2ed9c859a0f937dbe748044bab675bdd675bb75bb91acd5181e2b70e0f5539e47df8c3ac44eb17cf0f3c1f85b7aa94ec1d3c5d8de7efd90b18e7e9e182024ce3679724c71eb03128eae0b12", 0x85}, {&(0x7f0000000fc0)="83", 0x1}, {&(0x7f0000001100)="212ea324d5e227817c1321e470af5ee6c667f75d5daa74117653661f2b6f4569eab60b6d0a4317b58f706018055963cb088c6e2edf0d57c9cb30e0a92fa35ace1c1fde194a2671aee978b8702f8bc4ab3bb8a86d7cfab9180c4173ff388fc679bea9bcbb82cc79a755c4905d0349d860399bf434f6eba7492f04c13f0d6428b78c0b19c8b814c496e3d1a55cbe67d469d22cb4c334b797e195631d4f0ad67945eaee3343dd86ed7c1e2c94a14a9ea5b7c02ae19920d9aa38062efbab0b32ce42e17bc545a40658c1c7218f1694452a9e6721cf2c6ecbb17e80c7b0b382942ced2fcbbadfbf92158feddda19b96ad625e25", 0xf1}], 0xa, &(0x7f00000012c0)={0x50, 0x10f, 0x5d32, "d4d92c37b6c5c714a9b3b6fe35a16c66624109866c41db12107611835a08da281c182e88c04ad2302758f47954df4ab29cc485f6dfc0b62cd7c1f9c9afc3"}, 0x50, 0x80}], 0x3, 0x40010) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='bond_slave_1\x00'}) r4 = dup3(r1, r3, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000140)={{0x2, 0x4e21, @multicast1=0xe0000001}, {0x307, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 228.142649] Buffer I/O error on dev loop6, logical block 325, lost async page write [ 228.150820] attempt to access beyond end of device [ 228.155892] loop6: rw=2049, want=327, limit=128 [ 228.160622] Buffer I/O error on dev loop6, logical block 326, lost async page write [ 228.168526] attempt to access beyond end of device [ 228.173539] loop6: rw=2049, want=328, limit=128 [ 228.178254] Buffer I/O error on dev loop6, logical block 327, lost async page write [ 228.186106] attempt to access beyond end of device [ 228.191103] loop6: rw=2049, want=329, limit=128 [ 228.195860] Buffer I/O error on dev loop6, logical block 328, lost async page write [ 228.210686] attempt to access beyond end of device [ 228.215710] loop6: rw=2049, want=2153, limit=128 [ 228.272161] attempt to access beyond end of device [ 228.277240] loop6: rw=2049, want=326, limit=128 [ 228.281966] Buffer I/O error on dev loop6, logical block 325, lost async page write 00:16:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) ftruncate(r0, 0x800) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 00:16:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xfffffffffffffffe) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000f6c0e645fb90ca8fd842140000000000000000000000000000000000000000"], 0x2a) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1ff, 0x200) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) getsockname$packet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x14) connect$packet(r1, &(0x7f0000000300)={0x11, 0x7, r2, 0x1, 0x7, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46088100ff00000000000000000000000000000000000000003800001300000000000000000000200000000000000000000000000000000000000000000000200000000000000000000000000000000000000000009b0d0c2b916ae784629995218a33922f1d"], 0xfffffffffffffcc7) write$binfmt_elf64(r0, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 00:16:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x7, 0x4000000000000004, 0x0, 0x1934, 0x0, 0xffffffffffffffff, 0x0, [0x305f]}, 0x2c) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400040, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x7f, 0x100) 00:16:34 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3fab09b252a495a15a4685ab5873fe848034c3c1a98ae90082485a5a221d3c"], 0xe8) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 00:16:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0xfffffffffffffefd) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x101) ioctl(r4, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r5, 0x40096102, 0x707000) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, r3}, 0x14) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000200)=0x5, 0x4) listen(r2, 0x0) finit_module(r4, &(0x7f00000001c0)='.^\x00', 0x3) fallocate(r2, 0x0, 0x8, 0x1) 00:16:34 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="856c960000800000009500000000002fe70f3db67e61d89d1ac30b015cdb0000bc2419650c672632939d50d600b05af0681e46a1e30b201acbcad2a897f4e9ec69403114e576cc34cb93bea5f2ea"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x44, &(0x7f0000000240)="aab84d4670930b05c1e2218b148c", &(0x7f00000004c0)=""/68, 0x423}, 0x28) connect(r0, &(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x80) 00:16:34 executing program 7: r0 = socket(0x10, 0x803, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f6578650000005400042a004bddd9de91be10eebf00f5e94aae2200010000c7457accc3320c67a90f79805843e901d2db75af1f00000000000000005ac6d3") perf_event_open(&(0x7f0000000180)={0x2, 0x4b, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r1, &(0x7f0000000000), 0x80000002) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000000c0)="e02beb4de66278237d2f57ca282c34b7feacae81338a14f2ce6792a01221d5beb28c91") 00:16:34 executing program 5: r0 = gettid() prlimit64(r0, 0xb, &(0x7f0000000080)={0xa84, 0x1}, 0x0) 00:16:34 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") getsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000080)=""/100, &(0x7f0000000140)=0x64) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x80000) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x8) 00:16:34 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000737000), 0x170, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24}, 0x1c) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\''}, {0x20, 'cgroup'}, {0x20, "6d696d655f74797065ad47504c6b657972696e67"}], 0xa, "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"}, 0x123) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000140)=0x5, 0x4) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0xc, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) 00:16:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3e) ioctl(r0, 0x4, &(0x7f00000001c0)="295ec1311f16f477851070") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa000) getsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 00:16:34 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3fab09b252a495a15a4685ab5873fe848034c3c1a98ae90082485a5a221d3c"], 0xe8) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 00:16:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffba}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="aabe9c064d371c10690d") ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x8000000000020201) write(r2, &(0x7f0000000140), 0x28d) [ 228.594867] FAT-fs (loop6): Directory bread(block 128) failed [ 228.604135] FAT-fs (loop6): Directory bread(block 129) failed [ 228.625007] FAT-fs (loop6): Directory bread(block 130) failed [ 228.639165] FAT-fs (loop6): Directory bread(block 131) failed [ 228.645708] FAT-fs (loop6): Directory bread(block 132) failed [ 228.653188] FAT-fs (loop6): Directory bread(block 133) failed [ 228.659252] FAT-fs (loop6): Directory bread(block 134) failed [ 228.665655] FAT-fs (loop6): Directory bread(block 135) failed [ 228.673173] FAT-fs (loop6): Directory bread(block 136) failed [ 228.680285] FAT-fs (loop6): Directory bread(block 137) failed [ 228.871139] attempt to access beyond end of device [ 228.876266] loop6: rw=2049, want=310, limit=128 [ 228.880975] Buffer I/O error on dev loop6, logical block 309, lost async page write [ 228.895121] attempt to access beyond end of device [ 228.900314] loop6: rw=2049, want=311, limit=128 [ 228.918412] attempt to access beyond end of device [ 228.923456] loop6: rw=2049, want=312, limit=128 [ 228.928980] attempt to access beyond end of device [ 228.934120] loop6: rw=2049, want=313, limit=128 [ 228.938977] attempt to access beyond end of device [ 228.943970] loop6: rw=2049, want=326, limit=128 [ 228.948763] attempt to access beyond end of device [ 228.953794] loop6: rw=2049, want=327, limit=128 [ 228.958631] attempt to access beyond end of device [ 228.963588] loop6: rw=2049, want=328, limit=128 [ 228.968389] attempt to access beyond end of device [ 228.973355] loop6: rw=2049, want=329, limit=128 [ 228.979665] attempt to access beyond end of device [ 228.984642] loop6: rw=2049, want=2153, limit=128 [ 229.016879] attempt to access beyond end of device [ 229.021887] loop6: rw=2049, want=326, limit=128 00:16:35 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r1, 0xffffffdffffffffc, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) close(r0) 00:16:35 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xd) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000029000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00ed001800190d000000000000000002000000000000070000000008001500040000000800160004000000"], 0x2c}, 0x1}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) 00:16:35 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000100)=""/126, 0x7e) 00:16:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(morus640)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003440)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08d980ba0ff5e8cf7e2b109ad19f2826658f87cfb86913dcf71988298711f4176427ae057b6add9a47b1b84e067fb59403e307ca76f4e7382f51d1cdab9290d5ebc84e89bb17ce0dc2673b3a", 0x4c}, {&(0x7f0000000140)="f989856dbab0211c94a6c5e311cce43b79aaa929911415a6b6c015ece004f358deec39e80ee37d6996f8f1a3f054bdf8668ffffbdd1b850ca67aba0561e700363b4fd7de92930e660e63d259430e2d23c708d56dc655fc7dcb99fef7f88e2c9ce67f52ab6f1b48f203cf3cbbb677b8e61b23c168f12539eeee9064f55bac9cfbdd6afcb541cc0895bf926b9968dd23a7f9f75c9df3d92bd660af6979fc69915e548d26cc0cde9829ef82109fd3b3bd44e4b2ff0ee2fe4439a7da", 0xba}, {&(0x7f0000000200)="f7d6d809a1942711e1ad7e5de031c0e39962c9f0147de8164845bfdbffa65e432fc1faf666cc5af30d26877e5c55575bb995d22f2bbe07233efc3e7e419e8a6e7d6956fde46254c88801078eef083b270e636992ca54e785b3e8b19fe85943feb61a7a46f3dbb2f500a656a022291d4e9b0705d3a82de08896bd924246c428ae12ae243a3a0c2cf0ff0fb27e106d4f14368fc4358b99d435238be5940bf561a99e415a69a4e158a6282d3eb24f204686b89cab4ed0f593623d8f3bb6fe2f6cff8179c96770", 0xc5}, {&(0x7f0000000300)="db8287e77d4b102dd2143e48aa0708fb679dc52ea22be01c9f2c98fa160a3265472ee1db66ea05571df677bcbf30441d7d61277282a07f8abfe204dab54990ddb3d796f8418d2c17b12df009ff715fda98602d54aee3a2b69da73b44b621a408f99fef53eea7ab4318a77e0803f006bc10", 0x71}], 0x4, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x8880}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="62b450549239af739f99e14aed3cd58397f6f05e6e344bc2e00391b82fe46e556b52c57bdf72cc283d2c6f5e570361fb7c10333a6adad69ca187ba68ac10e8530cb1", 0x42}, {&(0x7f0000000440)="7615f97bbd41b51025d47a7aba27818bd2d58b4e9649bebf11078fe544a8793bd1d97375827dd4134e0beaba3ed3f472650d278aacf5893a09dda145baf8d1afefd25d533f712ff670cc4ef607948df706168eb9147583f9dfe78efaab2c3d05fd3a60ad59bbc21fe0a02c9c2a5fa6ffe9fc50ab2214a23f83f08d", 0x7b}, {&(0x7f00000004c0)="197652dc3a40379aebf5d90bf8cfd91184e7d2f121725ec9ece7696e151b6469c314404f3c1f7acbe33dae7d41fbd3cac5b49d10243f8238dd5d9016d3c9efa7c7755ea125756e18ff10db22bca492879c5c2bff5830854ca93a7672fe1d8302f4d7211f51cdae8bd0170fa1462cb41447516bd923a18d2334923bb94b118882fa6c8892c6936b6fd1b27970d04fe4918bf31905e49263d2bb251765ee5c7c82491689c7fae3eeb82813", 0xaa}], 0x3, &(0x7f00000013c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0xc954}, @op={0x18, 0x117, 0x3}, @iv={0xb0, 0x117, 0x2, 0x95, "72fc57b1cab17fa67aecde3a6e52e645d82d7867b663defcece7a521dc14a6318d7b380ba850f79ebbd6d37679f5b6ebd3ddace3a4691372fe4d978e788c8563d6b53df6d72ec5435b552c28ad1e9b96cdd75d178b53f8647d3f671c4ce9af02eeb726a9d4a5e92b85720555caf6576d0fbd0c8f187cbb116b26a8030a8e7f99fa15c694c005ceab42277c574f64cc886efcf74200"}, @assoc={0x18, 0x117, 0x4, 0x86f9}], 0x1140, 0xc001}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)="704fa3c28571dd1e444a07", 0xb}, {&(0x7f0000000600)="d5eee90b9a1af9c6689c27de18f405f6318348f49df270ce03bed275e598cd13e6bcc609fd74d4a455cb6b92e2df9c19e446165eeafd0691ecfd1ecb8ef19462561ce09b81d66d96407665eb93d72c68e5f498b3f99abf5d7426c7d62643f9d3c4de9839efb5fd4ef3ca729af9c4953d1c01e4794e2116ae42d6042cfda489a90a22fc16948fa54385a4511dac1497a84efbeb47e82d526c8336088e9866bbaaa1071c1ec6807f374fc34326d2d9a6e86132014823a929c07399ea957cdb0fb50931cc36ce06a9b40e", 0xc9}, {&(0x7f0000000700)="f28b9c3656e16b252ab87072daf0b43ad4418274a8dd5e10fe41f83531292aa18894f5b124a80f7276394090cb6161c075a807a5c24d2cedab68ffd9538983137d9115899bc3428356100c209aadaf7b9d8e8a5abce8deba22af2764f993688999bf48fdc5b5ee55e351af79c62af7020602c6e3787da8db56b4e6c507b20e66231688320c593e4f990dac9aea1fdd9223ec67f0987d78a6485578277ef9c00680aec2de280261c6a78aca1a081019c736974105a05eed6f78d1d21879cce286896198a16200879c1ccdf28651290c3a4078d2f3e6dd", 0xd6}], 0x3, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xb8, 0x117, 0x2, 0x9e, "39900ac65d1fe9ee45863e66a52665cd888360aca8eda309457f9e6af943b39f6f409f6a536a72c146e9fe5f548bf011385aa26e21ba652a69a653ccc0f778e6ac80051d0d8db2dd568c7a7a6350779b51db4bab79b260b1becacfaaf693d189202d0556d4ada9fe1317af1a46aa9064234a5f8b9321e19f0777c9c61bd685900248f77c1a853d937186968a4f770b1b00dd4fc688182bf9776c37e4d052"}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x60, 0x117, 0x2, 0x49, "e9b30673038646bbab18f15e211bc66d443ac5462b3dcb35eb187bd5c4e5c96bc31c5f6f6fd47baca915335be9e7754c5a76d7640577ebad157bf6fbf87ee1231ef23b88c7c78ef8ce"}, @iv={0x50, 0x117, 0x2, 0x3a, "d9db75c4c727396a52bffaf0cf48df1df54bc28171befa4ee29b902f95343376ad0cabd76d0a04f3c8146bd1230a56328e82a9be8232af880542"}, @op={0x18, 0x117, 0x3}], 0x1f8, 0x44010}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)="67e22356cce2fba98a4080e6aaa1f5170fe7c9528d94e2371e55b15c0716001465f9cc52ab06e57d77af80665a72d84081e91e6dbf", 0x35}, {&(0x7f0000000a80)="717cfe661a71ee0763541aec13d8cb", 0xf}, {&(0x7f0000000ac0)="9b9162d9d438a1f467a46b7b4226f107ef91bf7e243ce7f84ac41f13c1c32b7bb433812bd2caf5baf84ee4c6b5b1154a7e9959f5d4a120b301e44a3572ae4600d5e81c6c9fbfda93c764f53316418bb33aacbc7395269a67d682af70f8abd892c3cb01403bde1613dd0ec49dad035436ce7a30cb8d25a8a45ab2e435083db75182bd1a404fb86312c67a9e9226082056116a0c3cd8035efc63c6c6d63ad3d59b7b23a93f227dc0ab9bf433bcacb832161fc58c75b900b1127dfb90c2bb", 0xbd}, {&(0x7f0000000b80)="a069e214607dade586de6cc86e87390c422b933d81d57bbf8ab3808503e3975b40560843f6e2467da53acbc655d60bb38d6a1bb9c5e5f8dcd28334888dae5fe162dbefc0ad036f4d5bee452c246d7b39497701bccb7f280462ece08b18fb4743ff94a16f150a9fb74b48c26071ee0d6fa42e14e43ff6a275eb4dc9d704f4bb08e9f728986d0c84bb665d91496e80d139da21b68724e36986f66a4df5f87c0dbda63978402df92cb0e9dee19eaf4e477261aaefc578ac72c3e7668e39daefb5fe977fb72e373e91abef6005cad6932a587ebec6f8e0877af62f48b2931a67ebedeac1d5866bab48d7daa90ddcf93124bb4be7d69a81", 0xf5}, {&(0x7f0000000c80)="f5ab59b06f29b7a43714393eb8c7fe80c7400a4b1335fc94f86a6530094ecad06de076aeb5a88c", 0x27}, {&(0x7f0000000cc0)="cec49d5138d0b81750b948b5b97a90a40617c41348eaab5ae8775ed51d87658d5d4ced4d684eeb3b98e973fcbea53df936fd2e8fd56070a5b53e129bf8066825c48af8e8666d753f1449b63318acde7f625445fd762c0bb31c4415140b78d38ae753ae7b3eb1cfe2f7d46b37977c032c84e85d42095b14e7108149a52239a98fd56c8490", 0x84}], 0x6, &(0x7f0000000e00)=[@assoc={0x18, 0x117, 0x4, 0xbb}], 0x18}, {0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000e40)="f6656ae125fbaefef4607379c327942c1a9743a12cbc354a54ee8c04ff7d30d9ad03d95e44acd4ab3b3c85da2b2e67db32989f620ebd933ee6aa5bf39f28977e481b9245b0ad5d587dd4a50ab67e16e916d560ba3bd2ba1d4e1d2c0cda068e6a0946eca72522f2ef811c72b4e67a287f7159062ee2335a1540dcb0add49538d0da2a3b2fb57b16801ff08c502b202ac10335c6aa56f5ddaa1a82d6ba7bad22d863076800fdb8947a36b7db9bdd6219128f0d8246f684220780233112ab5157c779bee22dfff394ceb916b0081ed66b983ce0bda9b1ede70a6aea162b61f4020c7460378ea1662c5cf9e5f65d660874a90a4579a970d655ad", 0xf8}, {&(0x7f0000000f40)="9d73f307d72850108461e74acf26edc47f62", 0x12}, {&(0x7f0000000f80)="4ea60e0105212c6dbd0f6fe36de21df13b796c113ab98d7a850d4f48aa95eef6a5c946ba8794c5a23e1d19bc0ebfb44de5eeff16012659780b893762b81999d8a1d8ac4248422f8f8ffc08cc1c176b616ddb61c34823a2a161f4f83ed22ba35abdbda148d897968527bcc61446cb32a541205ff8d3fd5d2be5ee2fa8c89e97956bbf3c8573120a5f88f37a5115489b13f6c442a75dbb56b0a64dd3d2260eceb5ecdb9f618730400804", 0xa9}, {&(0x7f0000001040)="324cd305429323605addf0266c33d8af0da0b6e16feea9ff4977fa7db93c4a8834a7540f369a7ee1268b1792284cbd28f24fa488ade24f75c34b72278bd9281b9f23f0946337037e6bb51f5fafe8f1a6757ac2387dffbf8fbd85c3753000033f9aa3ffc5c2ef4b1d3b0db83d7082d21be7b7f8c971a0b6b81de01cb062e5bca4cb4cd619d754e8d2a2ce6fa546ece33f53659d9520d1754b5c9b5f14f44ed4c156d1cdc6d1d1983e16236d3ede8d84", 0xaf}, {&(0x7f0000001100)="45df3e008e8873a46575dfd7ecb5e38543d1a8d4336bc07aa71c446b3163f94bee71f9998174b8ff5be1bbf16acb988b9b67c62f14b4dbcecb23c067b806c7205bcbc6b2fc0c9aa262998e10cef56a00de00145d1ff6228c08ad5233f785c422e6324e2ec2047c6788c023818174b560ba744c1a40c8d43a782c75", 0x7b}, {&(0x7f0000001180)="5b3a1584d37439f79eb4a7d1e20d6fd2673ffeaccb52ab854557ddc4492bbb050fe0f63a0053ae76c71001b1aba382b66914d8882513904479", 0x39}, {&(0x7f00000011c0)="ea84b60affba1af0a3c1d5305b2b2cdae4bea6247bedbd321318eccb7d1517efac8282dcbedfa29b29b2df8e805f2d4c4b3f45fbf45af6ddc758a56c492185cfbd82a9e41b3c9841b93f771577e09a433750dbfbeefc67cb5e63d17a79fa99ad5df2ef65e53bfe8d1a32c84e9d7925480f6c", 0x72}], 0x7, &(0x7f00000012c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xa0, 0x117, 0x2, 0x8a, "ba25b45ac67aa12e50a435406807c0f62311fbb25064c0d2e438c72d338e5ed0e2c6043bef04c7343c2b825ad21ac13efa239f337af0be9a0aed19d88f4f21fd5064e5ec096fb11c7dfe520ab7d97c4e474d838cfd87b4ad4f5d20e66bfe3a4612622792b4bca639650c7b803e8725a7df0e04513063b5422dc94043e7d1d721eef1d718d75a6677b48e"}], 0xb8, 0x8000}, {0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002500)="f46c683df25487efc144b2f870ae3c51b7f276e6f3e2a3df0dd79bc5cf1bf2d86362d30d5c05d97fc58bbe161791ffcae36babee2eec9acf709fffd6a52bd9df0a9232b2aae75bd63b417e026661951ba7fc75c05dcd09e41fc327d4713131187aca0d54d5228a074a6334091d37701bf4b7b5b3ab67c89e85a5a0c39054d3dd251a3aa9a89a3cf8001e6b06110045d61a914fd93fd4c23c18c476c7bbbb01023557a6dc27a5e84c770ed4568d3dda3ce616680a64dee90a887ce7b259040821583120", 0xc3}, {&(0x7f0000002600)="d5083cb8e5c5811e6bb54a1a6b0eeb44044fd4091b23d2e37798dda8abf13861a926a6186621d8a034a9b1af8c603848b528d7295f186e05eb4d3ea9ae15589a4b0fc63129db84d5cb0e7e3c21e1fc774e8f9c7394b9", 0x56}, {&(0x7f0000002680)="0e63e4229affe5b85a21a28cd829474b1572d09cac8e8f136ce5d0b9c6df6c8ddea2007b8f0f2da59801725896b3901a1ea84bca8f493db165014b7afd16af5e928d70ff65a29a3b4b8a3bf737b0f252874921c4fc4cea13b4c42531fd43c28a7c64bc6733fcb0a7065da566dd4a0c0db1d9a29aa8c41fc4e4337eb13f95807ef19a880e6a6c4ac73c3c8d9a7b95f141b555af6028460cc163a47567a9d723f40762224c52d6eb93b0fdf0152b3bc53bda8ec2460c8ce651f80458e1ed252d88de62d85b151d5e4f05d6330cd049566041487aa4ade6e13d28dd63d29bc1f3f36173a3d54ebfdb28064f33c54238a8be", 0xf0}, {&(0x7f0000002780)="9da38f9a1ec74c678dc58333925e521a56cbbfaddf832bfbdef9937b24ea2b5575474a2db4a25e9386af085868cf70bc51dea1febef3c9ae129afa0ac63d64ff90f252a8e6870c0fb500c12bb6ca5ee19db732cc3c913954c3902df6865e9ae34462764b957cdf2b971293fd800e4560ad83980aa9efed338ab1ef145a548a47482813222b9d41d6cd4566b3ef38e691e435cd5a6e0620bb6fbf3042fce1130c4184832bca18d1205b51c14f072373cdcf796e7d1b2e4b6befd99cb3f45a652356da010682525b4f8295b6efcb1a0eb7b4dc81b634818ef004774df3372eceb57d6aabef5d321241ee", 0xe9}, {&(0x7f0000002880)="98041262447ed14a8a0e8625745572a7f24e30ce9d59ba3d5824b91110d8afadf591acc64842cfc366f0f4d0891f728a0451fe139c35c1d9aaf2e3d30004fa1c665f9c8308fe2038828e5dc905acedd0e0f89c78226bdd3fda47731ba1d772b26910b28ba3a83f07ab423197d241dedb460182d8dc1dbe992e438a21d5c8584919e695", 0x83}, {&(0x7f0000003600)="06df625c04f09d81b7703cda49958015fc5912281e15d5bded50905ca138f78ac3d73740c8c39eb32e63f9f6ce0ee1325b737e0b0cd4086b356cd6dfa08e6f840ca7271e6715a30c189302b4a18e6d9492ccc65891d0f2719cec1c5f3e71bf2a8b9cb43ba68ad6b1ad88b001b560e0c3fd7df3b1525ca0a17a19b40ca1440cce7128", 0x82}, {&(0x7f00000029c0)="c4e8d6f5b79a6ea0dc698d75d9ba6711a4a618564b722a9adcfe49cae65693f1eaac9129ebd4b7022604eb73306c3b898f4f5baab8e9f8296b0d98b88d3061ecf84ade37f9f7b9060cd54373c6a1e5fdacab0719c0b63a", 0x57}, {&(0x7f0000002a40)="47aec4d35a101cf7ba9d1b024ec34e6719ab5a27379b294638d926728f992597c4126ea4539d2ea8dd6b78b26f8600cf5cd46e0411ea36c6500c16fe63832430bfc8a4a9ba51d2f49e58d01be7c3e857e85b569a0537887d15801ec8d4d254b4f08fafc02cef7ee98d40bb9c4628ccfc62635d3e3b71b4e682f3bd9a46403b1fab9182c3e6ee1a182bd76f487e047c228c0176b3c8b9074a9ead024eef5f7d471c14cffbe30ed8e620b70fa89bd423ccd18708b085350adc4813a10e88bbcaf19eb994984c88378b1224338497dd197378b23e254c79ea", 0xd7}], 0x8, &(0x7f0000002bc0), 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002c00)="98dcf3b68d3f24ef661105902b46d9fda0b800cfe65ce6df56a33a3c6a0c39a8fe906d488628e563cff73515a0e52b8f9f7e39fdf5a2f869d635", 0x3a}, {&(0x7f0000002c40)="d5145f9bfe140e3d07ee80ddf90a9eca1a4218b89822c9636db7f0d2ef82875e5b856f8afaecc2340b881ae957fed39a74c769301201a0c14122dcbdaf34789f4336889a5b0a516b0825a8e0c784c0c24f60a713339036903299090d3c82bc8445be1bf125467c49f2ffba789349dff8ad38c8f8ab5c86da1743fceb742a53f5841e3cf1cdb2e8a2afab537cdf82de75c5eda38ee14012e3dddc15694c652bc4e3b0060a90a2b127961f0942b203667ab6b195d35ef3535a2305e11a04516bb503", 0xc1}, {&(0x7f0000002d40)="7a0690d7f1b0e46e05", 0x9}], 0x3, &(0x7f0000002dc0)=[@iv={0xb0, 0x117, 0x2, 0x9c, "2c49d99b789ff03381f0764c07b27fa9df537b42ac8772f8afb3aac72d99f1d6d9ac16128b054702ee3a8a0ae74e8187cb80078ee94920538893e215675fff968d16859fe9873fa94277102c55b456b3136b83c630da5794cfa3e81cceb98155158c7c5f3e6088d5f085c6945e189450aff44178c0c5741c513ed4784d4f7bed0685f0b4066479a3a44fef18a0aa3352e8853fd845ffdbe3cfc7b1eb"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x78, 0x117, 0x2, 0x60, "dd5c315df8b7740030946915f08accfa6edd480694da290982a8e633d0915fa0a7499841587f71f0d310cd5afff78d21c80a0c7d026cf3ffef6308d3f0c5a5c100c1f7ecb57ef07616411220f946dbc1b33407f42b0707068bb969ecb8a322a4"}], 0x170, 0x4040}, {0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002f40)="9bd44259d79704165a1b7e031f4cc9b437f82eba8ff2dbcea87a91a49db4cc209e948a25c69d2e1bd21965e5f48041286e6ccd725ecec87bdb47bac7af62939f147ecd32de2131e5", 0x48}, {&(0x7f0000002fc0)="8d100b3cc600c1b37aaefa8c560b248d8fbe8a0ccd86e6b1bb5355beca74b97a7b3f94c0b2bdba1614bb15098b0f248f4ca28304c3436c68248248fab76bc5766aa11d61a2a96c93d3a1b733720656f46356b9d70f2dbf0876c68e7f9d39d4a5c5626ffa583542527126c524036b3ea566e3629e2b9412a851c7fa545222f007f1ac74e8b501236c19db9682b311678626fea248e83df2ef1d81663aa4", 0x9d}, {&(0x7f0000003080)="3989ef971104ca8e593dfe942399d146d170f9c2deefaab5360ce5cc3b82976ad9f38a8bd107932677eaaca63dc2c8fa0b228893c2fef14b5602716d935856855a0f640291072743a475a52a1708e41f4a22dfec845732d853dad3e7006b281708909363270284d3956f447fe5d4b1", 0x6f}, {&(0x7f0000003100)="f10852b8c339f971662576272648e1fd39a5d015121489d4ec465d3d0c4cfc84fb83ce7e09d21143a9f7d17d688ba5b2a6d1416c8b02edaedf34af9eaf0e1ed8e2ed684e3cf93d3b36bcbe86edf35c6b80e0b6f7389803b08e3d5bec973189849a06da30bfcc529491459f12747e58442a56976903a538b7f840df9bff8674d98c3085b9e891e5f233cac63f7d21053345114b9cfd6999d0269e4a059b82faa09682a70b11355ff76f2e88601e07ae8ed805d3ebe772529c6add772cdb29e102", 0xc0}], 0x4, &(0x7f0000003200)=[@iv={0xd8, 0x117, 0x2, 0xc1, "daa3f3d2eaa3335e8bd3078825f587c2ee54542af336135459177c46c4e3f2081e6856c46eeb06d9bc18273e4ee7f48be3ec4240937609a5587913b22188136f9d5815ef46db83fc2fcd0ec310551b6dfa32272cf51851f6cec273a1d75a9c35b0a914fab2e38c59df65626aef030fa6783fdfb607c599f844d260795533d40ca080bbe1be56e1838fababe8ee292e4efeacb8ea314915911181eb290aec837e1e49bf03e4fb266150ab05c32ec78cee7ae3664fa64f2b22990ea4e6ae5a5bad6f"}, @iv={0x50, 0x117, 0x2, 0x39, "413b9706c4fddf7baa9227625424b994ebfe3946d3156989fee95ac9bd720f97b41de73e7027bf02067cff415487d11e35538bcb5cad15713a"}, @iv={0x98, 0x117, 0x2, 0x80, "fa1ba3636532ca4fcb31d2af8f34bffee546bdcf696c5645c611f9052b6edec5b4dd71d5902ddbb1c493a06cded6e8bd9678a654589285d71f8e8920002cd69e411af9270ccef9a10f326c9d3ef290a7951443c295849e4cf63aef9757d3530db9513498998971a77b28d2d8a46962c379551eba24caec707829884156745b42"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x208, 0x8000}], 0x8, 0x1) recvmmsg(r1, &(0x7f0000001280), 0x1500, 0x0, &(0x7f0000001380)={0x0, 0x989680}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000002940)='/dev/audio\x00', 0x900, 0x0) recvmsg$kcm(r2, &(0x7f0000005940)={&(0x7f00000036c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000003740)=""/166, 0xa6}, {&(0x7f0000003800)=""/145, 0x91}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000002980)}, {&(0x7f00000048c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002bc0)=""/36, 0x24, 0x7fffffff}, 0x0) 00:16:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xff, 0x1, 0x3}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0xffffffffffffff80, 0x401, 0x2, 0xffffffff, 0x100}, &(0x7f0000000140)=0x14) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe8b, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x4879, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x1, 0x4) r3 = dup3(r1, r0, 0x0) recvmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000600)=""/183, 0xb7}, 0x10000) sendto$inet(r1, &(0x7f0000440000), 0x38c, 0x0, &(0x7f00002ce000)={0x2}, 0x10) 00:16:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) ftruncate(r0, 0x800) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 00:16:35 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000003ff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f0000001ff0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 00:16:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r2, &(0x7f0000000340), 0xfffffffffffffdcf, 0x0, 0x0, 0xfffffffffffffffe}]) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x50) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000040)={0x3, 0x1}) [ 229.340323] FAT-fs (loop6): Directory bread(block 128) failed [ 229.368691] FAT-fs (loop6): Directory bread(block 129) failed [ 229.378405] FAT-fs (loop6): Directory bread(block 130) failed 00:16:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000002340)='/dev/input/event#\x00', 0x81, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000180)=""/235) socketpair(0x3, 0x80006, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000080)="bd48c80a23a1d76b09a4a6a5b9b113e443003150c4a5", 0x16) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB]) sendmsg$nl_netfilter(r1, &(0x7f0000002300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000280)={0x203c, 0x7, 0xb, 0x2, 0x70bd26, 0x25dfdbff, {0x3, 0x0, 0x8}, [@nested={0x4, 0x81}, @nested={0x101c, 0x96, [@typed={0x8, 0x48, @u32=0x8001}, @typed={0x4, 0x4}, @generic="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", @typed={0xc, 0x96, @u64=0x5}]}, @typed={0x4, 0x6c}, @nested={0x1004, 0x4b, [@generic="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"]}]}, 0x203c}, 0x1, 0x0, 0x0, 0x4000801}, 0x1) 00:16:35 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x97) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x0, "dcbd7013560987c90ebd84b6e984c7242a057f7f7f8b85f0aba26dc45e69c2db87180107eba9f36e22ba7df5228e6a97e954627eb3966137d05054d92ff0e25078b35ba8d6f9e3ab5b89afb667676ae0"}, 0xd8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000006c0)=""/209, &(0x7f0000000500)=0xd1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000004c0)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x25) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x0, 0x0, "df2c9c75bd4c55325fe54fe4b8475c9366744ab46131ba47cc839c6d3d1f288e5da58ffb88c3c9978407767b86505a282c67a7702a239d5a0f8b7b29a332d8b0f83a005fc5f5db95c1deca497bf4535e"}, 0x361) sendto$inet6(r0, &(0x7f0000000000)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x402) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000001c0)) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x0, @hyper}, 0x10) statx(r4, &(0x7f00000002c0)='./file0\x00', 0x400, 0x122, &(0x7f0000000300)) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, r5, 0x0, 0xffffffffffffffff, 0x0) [ 229.385325] FAT-fs (loop6): Directory bread(block 131) failed [ 229.394735] FAT-fs (loop6): Directory bread(block 132) failed [ 229.403116] FAT-fs (loop6): Directory bread(block 133) failed [ 229.409888] FAT-fs (loop6): Directory bread(block 134) failed [ 229.418926] FAT-fs (loop6): Directory bread(block 135) failed [ 229.425898] FAT-fs (loop6): Directory bread(block 136) failed [ 229.432563] FAT-fs (loop6): Directory bread(block 137) failed 00:16:35 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x401, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xb, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000240), &(0x7f0000000280), 0x800}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000000)=""/144}, 0x18) [ 229.562190] attempt to access beyond end of device [ 229.567358] loop6: rw=2049, want=310, limit=128 [ 229.572662] attempt to access beyond end of device [ 229.577631] loop6: rw=2049, want=311, limit=128 [ 229.583158] attempt to access beyond end of device [ 229.588357] loop6: rw=2049, want=312, limit=128 [ 229.590349] IPVS: length: 209 != 24 [ 229.593852] attempt to access beyond end of device [ 229.601789] loop6: rw=2049, want=313, limit=128 [ 229.614888] IPVS: length: 209 != 24 [ 229.631466] ISOFS: Unable to identify CD-ROM format. [ 229.639323] attempt to access beyond end of device [ 229.644449] loop6: rw=2049, want=326, limit=128 [ 229.649306] attempt to access beyond end of device [ 229.654347] loop6: rw=2049, want=327, limit=128 [ 229.659881] attempt to access beyond end of device 00:16:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/213) mkdir(&(0x7f0000000080)='./file0/\nile0\x00', 0x0) socketpair(0x8, 0x805, 0x81, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000240)=0xd7) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) [ 229.665226] loop6: rw=2049, want=328, limit=128 [ 229.670145] attempt to access beyond end of device [ 229.675162] loop6: rw=2049, want=329, limit=128 [ 229.682385] attempt to access beyond end of device [ 229.687396] loop6: rw=2049, want=2153, limit=128 00:16:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) r1 = dup2(r0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffff08, 0x6, 0x5, 0xa6, 0x5, 0x5}}, 0x8) 00:16:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'ukcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x80000000, 0x80000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) lseek(r0, 0x0, 0x0) [ 229.777805] attempt to access beyond end of device [ 229.782850] loop6: rw=2049, want=326, limit=128 00:16:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) ftruncate(r0, 0x800) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 00:16:36 executing program 0: truncate(&(0x7f00000000c0)='./file0\x00', 0x4) [ 230.027791] FAT-fs (loop6): Directory bread(block 128) failed [ 230.036348] FAT-fs (loop6): Directory bread(block 129) failed [ 230.042437] FAT-fs (loop6): Directory bread(block 130) failed [ 230.048728] FAT-fs (loop6): Directory bread(block 131) failed [ 230.054720] FAT-fs (loop6): Directory bread(block 132) failed [ 230.060695] FAT-fs (loop6): Directory bread(block 133) failed [ 230.066689] FAT-fs (loop6): Directory bread(block 134) failed [ 230.072696] FAT-fs (loop6): Directory bread(block 135) failed [ 230.082222] FAT-fs (loop6): Directory bread(block 136) failed [ 230.102377] FAT-fs (loop6): Directory bread(block 137) failed [ 230.179983] attempt to access beyond end of device [ 230.184984] loop6: rw=2049, want=310, limit=128 [ 230.190284] attempt to access beyond end of device [ 230.195387] loop6: rw=2049, want=311, limit=128 [ 230.200459] attempt to access beyond end of device [ 230.205532] loop6: rw=2049, want=312, limit=128 [ 230.210757] attempt to access beyond end of device [ 230.215838] loop6: rw=2049, want=313, limit=128 [ 230.220732] attempt to access beyond end of device [ 230.225756] loop6: rw=2049, want=326, limit=128 00:16:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000280)={0x0, {{0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x108) 00:16:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'ukcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x80000000, 0x80000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) lseek(r0, 0x0, 0x0) 00:16:36 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe000000008500000030000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) timer_create(0x6, &(0x7f0000000080)={0x0, 0x1b, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_gettime(r1, &(0x7f0000000100)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x4100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) recvfrom$packet(r2, &(0x7f0000000180)=""/27, 0x1b, 0x2040, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x10000, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xd7, &(0x7f0000000280)="3c2dbcd405e8e96a639a2fee86dd", &(0x7f0000000380)=""/215}, 0x28) 00:16:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) fcntl$addseals(r0, 0x409, 0x9) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x404000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x4e23, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1d}, 0x4}, @in6={0xa, 0x4e21, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, @in6={0xa, 0x4e21, 0x60000000000, @loopback={0x0, 0x1}, 0x80000000}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e24, 0x1f, @loopback={0x0, 0x1}, 0xfffffffffffffffc}, @in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e22, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x8}], 0xd8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f00000001c0)='\b'}) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 00:16:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=@getstats={0x1c, 0x5e, 0x711, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$notify(r0, 0x402, 0x80000000) recvmmsg(r0, &(0x7f0000006140)=[{{&(0x7f0000005ac0)=@rc, 0x80, &(0x7f0000006000), 0x0, &(0x7f0000006040)=""/193, 0xc1}}], 0x1, 0x0, &(0x7f0000006240)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0xc) [ 230.230553] attempt to access beyond end of device [ 230.235575] loop6: rw=2049, want=327, limit=128 [ 230.240551] attempt to access beyond end of device [ 230.245685] loop6: rw=2049, want=328, limit=128 [ 230.250700] attempt to access beyond end of device [ 230.255726] loop6: rw=2049, want=329, limit=128 [ 230.262512] attempt to access beyond end of device [ 230.267564] loop6: rw=2049, want=2153, limit=128 00:16:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'ukcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x80000000, 0x80000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) lseek(r0, 0x0, 0x0) 00:16:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8900, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x20, 0xa00) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000007061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 230.328349] attempt to access beyond end of device [ 230.333602] loop6: rw=2049, want=326, limit=128 [ 230.346967] binder: 16900:16905 ERROR: BC_REGISTER_LOOPER called without request 00:16:36 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'team_slave_1\x00', {0x2, 0x4e22, @rand_addr=0x6}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x0, &(0x7f0000000280)=""/244, &(0x7f0000000140)=0xf4) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000000c0)) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000180)={0x2, 0x20, 0x5, {0x77359400}, 0x4, 0x20}) r2 = open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) getsockopt$packet_int(r2, 0x107, 0x2000019, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 230.514882] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 230.522276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 00:16:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x98000, 0x0) dup(r1) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES16]], 0x1) r3 = syz_open_pts(r2, 0xffffffffffffffff) r4 = getuid() ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x100000001, 0x8, 0x2, 0x100000001, 0x4, 0x0, 0xf8a, 0x3, 0x1, 0x9, 0xff, 0x2, 0x8, 0x1, 0x7ff, 0x3], 0x10000, 0x300010}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000001c0)=""/254, &(0x7f0000000140)=0xfe) dup3(r0, r3, 0x0) 00:16:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x100000000, &(0x7f00000002c0)="1ac112ed39a931e3a3e056fb061ba088051d32509bb0148e5143e747a09ca4b73a61a4bfcf2d63a2190a2045f2da3f2dd8bfce90b29c1078ddf3541d8d5800d6af1ffa9187edd37edd8860bb6eb339cca9b9d69f071def702646afcc973895df0536aa95f66932c94c9ac585ac429479cb29e81997761e9cd297e7d8a9109e0afed08fcf60c793288761089542a82d1ff968c3f45b6a5ad71bde98075a0c0e6c2e4b1f4e7d099ac90dbb63d0e1e63f800e9df410a3b6876ca94e07d52520c35491059a2aba9173afbc2c317801d599f9c1689a0a04500d690f5052a1416ffa73d2ba2c2b93d364401e27eaa80d79") r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f000000affc)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x40201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @multicast1=0xe0000001}, {0x6, @random="412177a4e30c"}, 0x2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 'ip6tnl0\x00'}) dup2(r3, r2) write$cgroup_pid(r3, &(0x7f0000000080), 0x0) socketpair(0x9, 0x6, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond_slave_1\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3ef) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000180)="340367", &(0x7f0000000140)}, 0xee) 00:16:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'ukcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x80000000, 0x80000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) lseek(r0, 0x0, 0x0) 00:16:36 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f00000001c0)="bf70726f6373656c696e757800", 0xd, 0x0) dup2(r2, r1) [ 230.586869] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 230.594654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 00:16:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)=ANY=[@ANYRES64=r1]) modify_ldt$read(0x0, &(0x7f0000000080)=""/60, 0xffcd) ioctl$VHOST_SET_MEM_TABLE(r0, 0xaf02, &(0x7f0000001680)) 00:16:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) r2 = accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x20, 0x6, [0x0, 0x1, 0x7, 0x6, 0x5, 0xe12]}, &(0x7f0000000100)=0x14) tee(r2, r0, 0xff, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r3, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0x1, 0x0, 0x8, 0x7f, 0xffffffffffffffff}, &(0x7f0000000200)=0x98) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73797a101ffa934c0924874083371b9d92766c549994612b40b886397f95725c8f27a38d1a020ac92378866c33ae95d841e3205fa050b2a7afe337001e749371e666a4eddadb5fba06a4928ecffb976a9e0f62edc73996788058afb037032baf8eefc91795e91907328f61449b8bff0f00000000000046b881d2d6e1bc95db87c8e52eafa67c066e93ec2938e13cbb7f3481b5be79be99301ce7ce6837e838e52c7cacc54825d1fac86a827521aa892378d32c6e8c71064432997f47abdeb1935b161dd24a0fe1eaf52dfc26fe5efd763a458d46c53c70aed2208f270bdbaefda75ded49aaf3dfd2176977e1efaa245060341877668442c04ad082a3fab86a558dfe9411c95531767d4165a0083bb3fa071b66c32eb5b178c9e93e91f1ec63bb3d357ae866142f159da0059199aa8c1da9bd9caf14ee71aacce821bc58ec3389f835"], 0x4) ioctl$int_in(r1, 0x800000800c5012, &(0x7f0000000500)) 00:16:37 executing program 0: mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='::.ile:\x00', &(0x7f0000000140)='nfs4\x00', 0x2003, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000180)={0xfffffffffffffffe, 0x401, 0x2, 0xfffffffffffff3f1, 0x1, 0x1, 0x9, 0x5, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1}, &(0x7f00000002c0)=0x8) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mount(&(0x7f0000000200)='::.ile:\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='cep\x00', 0x0, 0x0) 00:16:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish-asm)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client0\x00', 0x2, "2df80ef538bfc005", "a691f7d5b77d18598c4e1b01a7b49beb0400ff481489f56d03de7e4c954536e2", 0x7, 0xcb82}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendmmsg$unix(r2, &(0x7f0000007f40)=[{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000001c00)=[@cred={0x20, 0x117, 0x2}], 0x20}, {&(0x7f00000042c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007500), 0x0, &(0x7f0000007e00)}], 0x2, 0x0) 00:16:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000000"], &(0x7f0000000240)=0x8) 00:16:37 executing program 3: keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)="b1e7b4bc22a85e49d321af3c4f83181008124f61659c5fa2201eaaf015f729ad01d832c2cb36f85df25caa2a114406055d4854c489a41a92326a112f094bbc4d7a44b7b225268ab0a6c4329b90410c945a4586ab9b60d40dfeb22c94ae92ae92f4f51572b536317f4c238895936d0d00a2bfa1da35a6a60678f56667c873165fc19b8dd400e402064dc0d88769c1c80fe6ea004ff5e639a18ef4095445775fa63a5c50721881763b0b06c7b6bc", 0xad, 0xfffffffffffffff9) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='user\x00', r0) keyctl$set_reqkey_keyring(0xe, 0x0) 00:16:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x7000, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) [ 231.148282] binder: undelivered transaction 46, put_user failed [ 231.154577] binder: 16900:16905 ioctl c0306201 200000c0 returned -14 [ 231.164662] binder: 16900:16983 ERROR: BC_REGISTER_LOOPER called without request [ 231.172401] binder: BINDER_SET_CONTEXT_MGR already set [ 231.178907] binder: 16900:16905 ioctl 40046207 0 returned -16 [ 231.181174] binder_alloc: 16900: binder_alloc_buf, no vma [ 231.190440] binder: 16900:16984 transaction failed 29189/-3, size 0-0 line 2967 00:16:37 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x80) fchdir(r0) 00:16:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) connect$vsock_dgram(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="30d0095800a6ffddc9ba8dfd7979f84edc43c6462af1781a8626dabf4cc1", 0x1e}], 0x1, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r3, &(0x7f0000000280)=""/100, 0x64) read(r1, &(0x7f0000000400)=""/100, 0x64) 00:16:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fstat(r0, &(0x7f0000000140)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f}, 0xc) dup2(r1, r0) [ 231.217575] binder: undelivered TRANSACTION_COMPLETE [ 231.222758] binder: undelivered TRANSACTION_ERROR: 29189 00:16:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="fa85000000ffffff671070") getrlimit(0x6071a45691d5c22c, &(0x7f0000000140)) 00:16:37 executing program 7: perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:16:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4) connect$inet(r1, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffff5, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x200) setsockopt$inet6_dccp_buf(r0, 0x21, 0xce, &(0x7f0000000180)="08bcb27d845b6f083db8fd878f15fc213b78c8975078e861eb13860654733b6bc6761af5bf64dcb220de789aaa8a417c16e0f1a8a0d4dab5e5c3b96a4ad4cf8dcba1bef3c2116bb02bbdc07e0861d710bebfa90b3789aff37b1616f3c7515d521b1f3ca3bf89b47df14cfb8dcb90e89f1f6add8d8f607c451270dbd8a390e84b08e665c48681dee7a60b7dc3e639a9b54de89ebf04a1646b8caaa42292905ee6f7904ba0362319a64f", 0xa9) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000418fe8bc55dddc4876cf0d88ed5517c22d393548edebc9ff5bd3bd5b6684b160258f32a5d452d868de0192afcfdd77eefcef03061c3eb0bcf91ea6b2dfcfd306dd8b0760feb2eacb3ea76c661fdd12489a83ac7b023bbf1a", @ANYRES16=r3, @ANYBLOB="0c022dbd7000fddbdf2506000000500002000800050001000000080002004e21000008000500b10c000008000600e4e50000080002004e240000080008000900000008000600010000001400010000000000002000000000ffffffffffff3000010008000900150000000800010002000000080005000300000014000300ac1414aa000000000000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10040, 0x0) socket$inet6(0xa, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000040)={0x0, 0x9, 0x1f, 0x9, 0x9, 0x2}) 00:16:37 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x692, &(0x7f0000000140)="e59c666195bbe5926600f01608614c0c8ece4b8c99365f0dbd448a9cc5f9b61ed05274134808c6a7d99150fa4c0ef32d5489f534e7a056166a5c451932fd92eb7c7101976ed632e4bc95fdc96129b8aa39654516125609b7bb801ebba4c03049162aac2297f4889ea0a64c35dd2d6340a55d5f34e895d40d8a6dbddef263e024c667b01d7d6af0af319f2de1fa88") sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000ff00000000004000000007000d6b08000000000000070000000000000000"], 0x20}, 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000003c0)={"726177000200001600000000000000000000000000000075ffb60b26d3100900"}, &(0x7f0000000380)=0xffffffffffffff76) 00:16:37 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffff, 0x4800) open$dir(&(0x7f0000000100)='./file0\x00', 0x2000, 0x20) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000200)=0x4) 00:16:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f00000000c0)="14275fcf8472cc00e5f145de0022a56855f761b7329e5dd1aaf8701e02c5a4fc991ea99e0a", 0x25, 0x9}, {&(0x7f0000000180)="5d08aa0b019ba611378cfc74547314b08de8814ade95c4057faa1ed1ec1f823fa44e6a6e4bffaed89f0233a08bf1548ce751f026dee674985a83eee71204d849f841f4b354134f781167f94066a10c77960bd4aaae7ce2509b44b6f5d2490af4639c52ff38254a58508e208e24fb3cfe130268dbf3a1738784242bfdb90427f065cffb37564258c8eb32bb393742cb04c9f422ec7ca2656525412ddddef1fde77202077747e92081b7c83cd85f56a09af4f6ff98ab698c4bec444c1982e08938cd04a77a72ed4b1c4bce7489", 0xcc, 0x2}, {&(0x7f0000000340)="384ffa0825bbfff604c0b359b5493ad31d3716939ce52620462899f9277ea29c3831df317216239a55415319b62d1886e0eea9817b40bd312da0e94bc742bc3b10d63c5be57e45e223ee5ee49a264fabbfe29a26f659f76631a76ea5601ea1297d5b7fc9827640a4dd1a8ec0fb990c2a92bba4804d33faa8ce2d43d2130e152407ad7d7fc05abb36220606d842c13d5058085e06eebfce6383562548638a7bdc68d1f95d39f54435e0fe98f55019b72763cacacdf3ca37355fa9b95d597c", 0xbe}, {&(0x7f0000000400)="51802d6e54852729d6df27ccce79e4730ff51c2ffae22d1eb36b349729ab792c6596cad58a02d0ddb47bde81920699a9a93b9c15d9f58762759a9e0a5b0acb0701dee2a82d1db176107d1e4da76069d73630c908c31d03a61e6461c047fcbf611d8b1ced4baf0ebbe2e746de1e55630bf1849c25fe1ae7a697c404edf7792552c117447f6289a0d45f2481fafe895505e8d421e444285dd5e0b74fe790e5f7c185c5de6a32328c60eb3f1ec3cee5b0762a3aa8de02aec586301a9cd1ce8f54c22aeb3eb83c2478119e7016bf3009482391f8e6b8aa777a1b89d0aabf9a379d220b6e69ed357076a88707d8e64ab3d0", 0xef, 0x5}], 0x0, &(0x7f0000000300)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4006) signalfd(r1, &(0x7f0000000040)={0x6}, 0x8) [ 231.656699] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 00:16:38 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000001c0)=0x4) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) r2 = memfd_create(&(0x7f0000000ffe)='$\x00', 0x0) write(r2, &(0x7f0000000200)="04", 0x7d) sendfile(r2, r2, &(0x7f0000000040), 0x8000) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000001000)=""/4096}, &(0x7f0000000080)=0x78) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000000000004, 0x11, r2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f00000000c0)=0xfffffffffffffe3e) 00:16:38 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r1 = open(&(0x7f0000000300)='./file0\x00', 0x8000, 0x20) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0xff, 0x401ffd) getpeername$inet6(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f00000023c0), 0x218, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x7ffff000}], 0x1, &(0x7f00000000c0)=""/87, 0x57}, 0x0) 00:16:38 executing program 3: socketpair(0x17, 0x802, 0x100000000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x6, 0x3, 0x1}) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/87, 0x57) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001000)={&(0x7f0000001040)=""/4096, 0x0, 0x800}, 0x18) 00:16:38 executing program 2: r0 = memfd_create(&(0x7f00000000c0)="00d0d449afe311d05e08028a78c8e5edf11aad8f4bd8953d08fba6f9d40b", 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0x7fff, 0x2}, 'port0\x00', 0x59, 0x100808, 0xfffffffffffffe01, 0x3, 0x3ff, 0x75, 0xff, 0x0, 0x3, 0x6}) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0xffffffbd) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:16:38 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x8001) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r1}) r2 = socket$inet(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000100)={@broadcast, @loopback, 0x0}, &(0x7f0000000140)=0xc) sendto$packet(r3, &(0x7f0000000040)="d7de4577cabeef57dec9e83e81fb71df64c8ac676967706e0de5b8087a87cfd348e2ba49f9927bc0e7ca25a4f781131e1a8b6c1fa77993a6abe62593cc2bb3de8edc57f5ad16228d4ed4fd2055c87bb348a07dc07710", 0x56, 0x4, &(0x7f0000000180)={0x11, 0x16, r4, 0x1, 0x4, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000300)=0x10) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000090affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="345ba19ea5fd0000f05300000200000000000000", @ANYRES32=r4, @ANYBLOB="0f00f3fff6ff0d000e00ffff08000d00e308000008000e0040000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 00:16:38 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) r1 = socket(0xa, 0x802, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) getsockopt$inet_dccp_int(r0, 0x21, 0x10, &(0x7f0000000100), &(0x7f0000000080)=0x4) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180)=0x18, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000006c0)={'TPROXY\x00'}, &(0x7f0000000700)=0x1e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000740)=ANY=[@ANYRES64=r1, @ANYBLOB="3cad488f8847787291200d51e22ea8cf4a5494ea3a2a956b01fba878687b169201055404", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32=r0], @ANYRES64=0x0, @ANYBLOB="dd22c86a108827be75e7319fa73fe8c7bf929893729d7cb74bc005541ff082b75962287e3d1e2c80bd3f5bfdec7ffa76819a6237d6c45cd81d4b8acd297171de21ab64f7cdb817cf90edbde05e9fa1af6bab400db122a265258b625be5d476bf3786d1917ca4f34b53231d6dc78b9f7cf80e2e6b56aa6c4cc7f28dc3649f6e35f35ffde839780465817a5533a6ab752033da73baffe87da7bda8c45acdb262da25342ba297f06a1d95c0b0e859e60db4a66be4fa9f4ba2785ce1e246dcca5a2bf025c38849eda16defdaaad4eda8af4d809525625ed80bba4e53398adb173ae45784bb9c3dde82e39462c20bdca217ba4d8c4ec7fc683f73bdae25fcc4ea1fcfba03dc9419569b9b791ed55091c9acfd7264281cdd4cf3ee3590dcf10484f209a6382d421eb41993983d69a628faa6677b12cd73530dabf8217b331e0e572f253442186a98aed51b97c757c256d964ecf4389f2b492a0b33efcd917d6a131c92fc67380c9e99c1c1cf0319f1bc611a892f135f752264effb31b9e8a4efa672458775d115a4ff5fb93466b29264c80bfbe098819079975efbf5cc1b8b56c052c415fdc77ed38e9d897b5ad0f59851b4b60f9fbeebf5c552df144245e1b4cb465a0426d9b1a16c359e1064cc17785cffd137d6f55fea649cda333ac4006c329313f02d0d218aeed3864573d9fd01ec3c143c3cc04582aa121e044a16d5c6b8e0a49db57cc98cfdd62466ff83d4183e1f4b749c9bea66b43e99ba46ac804df37e047b685be14a8552aca313eff1f129c19f5135c075ba914639a0e91f974ef844fafc654cf809be0ea7a099e3af34a159357a384571e4f9af2b5997e0380d6937410fbca3b0b371e9811a216d39bc52dadc2594fbaba91a510d81d55838e23e1973ec58919d934ee5ad3b8db6d423ea1df4dfe9aca8d901d77c05bf33db03d5a72da7458f4f499167efe9b2ad7a2bf870be70560a78a075f4c314deb6b5ca0f10ec3de0313b8fe811a50232af0d6c53473e6833922f5c0db8fc919e2831b7e791f33035bf2ed8eeca1d55886d6babe152c6ee64e80c090896912f09cea6b063c6614967df5835ecc8a7dfb53270bcd36c870f81b01b142f7533064945609f73690f703725e4d707222e73641a9a28fd41fe9aa1cbbaba563fa100dc9eca092b0d18240cd2fe533d74da9c63f5fc3a66b392874a2d49614832cb56c696a79a5471133856cd5fc88094294a2ee77202b967a9a538d980fca75f1e12f71271bdae5b811453d61a5fc3ade94aeb7c813388a69486bacce4ab3f4706286eabc52b530f5136f8544556ae1c6f445c828ab468c29c664670d97a55c456bd7a30178d488a6c26a862a9126236c4c72ecf7217e49940009d5653a07fe3425fead79fb4df99ceb43a48372fbcc7ec6243318cfac3e2728bb2c639c637eabfea7014c32cfea568c4b5e2bb9ba79112ebffff66f7651ad5010852d41d87cbdce92597e63b022d71aee833518749ce8698d260bebc9e45a1e666970f4973e25568376487ccbc11312ca7c255a88edd8514d9da9fb745404955e55254a8665b7924b338bbb41a0a51470313b946376c98cbda9aafe6b99fe5afd440331307194f6ff6ae356680bde212011a24054e54033101e8049b7e4eadb7d4c890aba5fc4ed36a82cb797782a3f9d3b3d5a3b9e7e7a00c1ddf6685888a8a7c6a383e06d9750624958ff3eca9d15809f7244a63d7de772ab3ed696824b00022530cc3646fb8991f67b1b030588698923beaa2852c1fcf15befa89d1d379b760e221380639ccac961f3462a1f089b71b010fca2d26d37297eb3fbb9cbc15bece2e83318f6ba6f0a1b5c976075258b63344e2bd2e2dcd0f9933033a824196a44018905f40465f25c00418a54e9275d6a5946ffd149137ddd5a310681f83ff9614b4cc5e3e1f0c8ee2808b037da789b1343d8741700d3a2e5623f58e21a21ad3f81e27e9bc6a72e1113a392250c8101dd5b8183a35358db38a90d732a77f5884ddbbd47b45ef54e0cfccf12fa89772ba89d21bce1f7f99b1c866bc312d0a09ed261c141dd5853dae37b4b734d798c1e057db32b9d32f23a4ed9797495b964f093289f3ccaa82e9d58a9c719cc5e93804d63cb3cf714dbaa316a09a3a57c4df416476e629e98c548d7adaea4d992309710ba639cf55767d292e21d49d253e56d028f47b658e84e44ea3ae78874609e3be217741e5675332d4bf14ccad0f4752f50c86e461a1718cb7e638e7e3d351f6d0ec77474c262da9a3564cfedb88c01d289cde5ba6e7d37ca8f299cf0f0e8747b579d04f73ef510b0c8d4978f01d52a99103095b0f0c4df760c63d5ff7bc9250030749a671b742034542cff6d867f2ae76b4e4028b1c8a9ec418115d9444d9abff4633646358ca042eba6f843770f2ec570cde7b812998a44cea831bd73b7e520c01e0634c8a6d501848e69a70d3bd4895218bef39d3229e195323fd18073da85123578f4120adb4ebbe8e38f0ea72a00dcc67e758ccc0202426e11a12bdfabeb2f43a1a9f11d12d60ab5a416fd523ae86db44e43fa8cb7ca1bebd15c046f7975fc74d3fdf3c6cfc0f029018e1abf70905122d3ba55520ed523b71c5fd0695e0e431f6296a8dc041a276e1c2b9b64d0857b30db04e85f3d940c28bafa0cc12783829aca889ccbb46139331546ccc244516e4fc01dfde9641adc157bf7f427509dcd5e5c68a3dd95d9193ca78e2395237901b97a8e6b71768c34a5b75446addc8540b23e1161d54687468297a7c17446fc0b31391a3836459e7ae457301dff9a32095941feb8f64c7fb70df123c7956524a2b29ca20b6fc4f61528209eb39e4db1d4e3ac6256f60d629aa2a55a5985fc2860df8d2d531748d84b8b0bee0875c2c2adfe83506d86572e98be312481cc6e7e5cf0857ef254f7f6414638e1907970406610efdb76fcc6f6a39560670579600c9e9ba19e961254286ab732cddcae4fbe041c5fcadf20fc304f3d6ac1cc1e5d6455b172012f7e14dbc7d602e5bdcc0be14fdeddd06c4021c07619628d4de22e2a12da511370db109e9c20cb99b75afe2668e25e26933116a01c28e04cec7956b1663ba4667fcca9143c97bad4c332f23230863e4ce1361babe104837fd058805653366cac9ea99fc5a0d373888035ff9e990038681f48f71e73026369054888ba72af0a32b3887c48d39cfd7cecfca595993d29a8163b9429230495b71dde75b8f0150c6e3af0e25ee3b07bf9a7e435e09b9715c2aa036a348f33ce72ed374b438085b6a5f9f7db25c6da6ba4ec76ed3e9c63354e15d7567c84aafd362d6502c26915148d1da0de5c38d376e0daeffe7242079fc3a9716110114e36416506bf1c748281ec96d1334eae50ee969168097cb7f76b732e42442f817bed0047e8b469a59e22d86d141a4dbc476576fcb7582aaee6c854ea309c00b7adaed64927fb4f594c9ca378a2163a673878b0a64a87a9c0c8c25d3273d6d08248c3464993b86d731b9b169c2eda17c49bfe903107ec02f12dcef968431ad8f8c62a304ac4975dee592e36517363c323ef0a679065d65618cf07ae10595185858b1b11121065a75f13cb95298cb7d8ceda68ec54ea63c66b3e367e33718828d18b583d6deee04121c4b15df8ffa1d528e663dc728779449cc2846f9c46778223c7fe334a519b9ff1290530bdeadd6b94a539b0d47b26d7b605776b731b03790eee3dc076c7085f41df24f2eae249ac9b1d3c4ec737c96d1af7e2ff72edffdbfcdf856052ffe6567d3d665dc816389575ba6d7d89b8291a8a957999c5241acdd31cbe6ae05cc3f6c650855e774e68f6b7fa6b8b8498e5ff6ba9177bd474e25567d1fa34df03bedd6b42d9f1cb575faea6953e71124585084c50ebf766cdef402137194c826f21fedd42313fd488e1b6f9b45fe18b48fb00303c8fc17778237fec043be6e0e7273c81cd35776ac97d9e2d305fde541452a63d9d50bcdb353898dd525a3934d540b6fcc7dad527d337390c4503d8736d8d79516a3cc096e00e14d79c4f7924fb31ebe3a70537f8189f5b2f2144eb3feff734cd1ac12b7c5213f0703a5c478f5a2416fcc263a26c5569f7297ad7d5b4acb793e66791def64526d8e059901986028b59f2c1adece74e13c6a6588471d7403e72c9a27b8c352e82bd4072f09ae28c8a822faf12873aa38043914a0d994adedf160e56242ecfd85e7a44fe3bd09243a55a81fd95ae4d17b380a646688b9cd88066d4c6c5f8341f86e12a93957659c6bf2a966f29491b710b9b9796be0603ea99d0e595a72b706089a954a89aa9097698445cdce008638db28aa864c4e2316890f805541a77fb4199ffe6e07699720c81c5c1c8b3ecdba54d0d34dbe28b3110e831e4cbc1432832ac3fff26855ead1abb6bd27fa09e33fab33203e1f3efef0b515aaafb55259159ae14d63a4256fba597464898affab8242ad2dae916b131e3108f552330a713f48e4b7271b845c4a4edd958a7b59acea81a4fbf54360290ff47182c77314a236ed0479e949bdec372d03f9bdee33967029a27627a23d50609643087a70a85924e1c8f21df1a7450533e20e523490f111974f997814cf3086ba0b05274ed089c4cf3a0603bb6cb8b833efda44b248e0e7cb4fcab88111f3e82e149b00008fe7d263eeeb856019e62d7d150216af41e69d9674193b0341f31ff75f3fd6448c47d45d32a5ca29993e5e045fc3aef45e5cf4af03095156198eef714ce26adc01abacae57e344e1874fa631fc58415fb95cc09f9a5f44f081097a82afba862411806577aaf463fc8e4d71647e317e072cfef1ee7cb453618967b4e4bd4e399457b2fe0ccf83525124b9672aa1d573008687a5b2d8a90765a3ba3421e4f4385685c8adcccf1dc0edd5b0dd2db3acf21bf2952b2b9ff68d37fcbcebaa7ad4a6cfa5f8b7b030a51cec1a32f2a2050f2fb4976eb0c353609f9b4cf2117e7248887024f5437f25553279ad2f583b593820051d446a0039a08e4ad9e0bc9f5f8a01fc759ac9139f56f9c13039bb91500e8c2874391fd79d038b5ef5c7d31eddfb65599c3e6b843bc4fdf90c652d75a07e1831295dc30d68970c52e366c66572ac2f0d78a05462c1ad42a9bcb5fae21ab2d5ff6db9bc6568d04e2542c5f8443f55b2b316bf645a34e4e9ee811972fec77d8886ab495b8e213040b120a4d680e4d3732586e01791edebbcbdf8aa2fd140dad978621207cedf1c427a0536c7eb48ed91873209b169b1ca115d4f7566ebdf0cee413ac473e1ec0d3dfeebc666f2d863614574072f0c78029bb3a7b715600e035fa57a283b65ddde3687003963fb9858433926d6b6947a7b7c24f79641ef14fcc4e11d0e76e87a1b9893a3bc24cabd20ab34a753316e7a23ea4b36100ebf991d783593e6c36b89c7f9361290d0ff9acb7f3582981be7cabbf433a4fafbb52d3030f54aadd5ba1db3d8cd299220397bc7cde9baed2dfe136b52780b9b99b53fb65e78ee5f6ba42c792e539da4e30e7d1bb364e6401daa51ed30680b6f420e475605f39ab456d97470e82ae2a111d23e9ec214ce7fa78e34ec5ad9f07ea9364493c8d1817a8f1b9a3f41d64be81b7bb3abb6db230ec05eb224fec9caac67c3438a4d4ae4f2a94bc9f6bb9367c9f715a56630ffc29f3b1ed54f0acb4b5d2ae424566a8d4366f6acc1cc64251b5b9cd3ae4898b75879340be82f305b41686305d00b58c9c0cb888e3e82e020de2cb825e34c5249a9cada46053b086e4480e9d876b03b9ec9d37fd065085be70821bb8893", @ANYBLOB="2d4b96f411a6b313690533d50e06000000335b6f486a564025b5786dfeb5", @ANYBLOB="8e2cfb0f502d85fd82ce79729bcdeb2e25ee669ea1b52b58c73bf93f41b3d413b7730afb263b5e8d5835341d0a44279e0517bbaedc4b2630df8e2009acafa1310539919d7169f4901016b15157cfeb72928c0f25403e3d40b6e31be273a04072d6dc50c8dce9fd8b46ca362e88ab2395df74292f014a408ec3f0a719f63e640a494ddd30b2e43dacd9c8bf932deddb491e2e5d4f16012a7022dd0fb7977bf06e5af7e4977e895dcf4a2dddad88c0fac95f4814272aaa36920853acf361938ad2723539594fdf309544179831d18e8d0e1dabc754423af434aa73c23bd8f5b0a6f9e0f8d300bc029e1e81", @ANYRES32=r0, @ANYRES16=0x0], &(0x7f0000000040)=0x9) 00:16:38 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)="ef09b024aa0af93e754ede97986b904af29fe96ec0894b531f38a103766e74853bce4311f31dbc89d102c3f5e7001d8491ba56a06cdfe876adb4ad91bc83450b003bef00467d82434cb8222ef6046692cb2fb6c20e1b0103fb40afbcc67e3ef49a7d54fb7ee23a3b918625e3740be4fe4f1619eec8fe931217ac315279a60407a2f4c4000fe6fa91e396ece800b7f06b2689177c1810034220dfdf8969411d2d9c1a30", 0x0, 0x0) 00:16:38 executing program 2: r0 = memfd_create(&(0x7f00000000c0)="00d0d449afe311d05e08028a78c8e5edf11aad8f4bd8953d08fba6f9d40b", 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0x7fff, 0x2}, 'port0\x00', 0x59, 0x100808, 0xfffffffffffffe01, 0x3, 0x3ff, 0x75, 0xff, 0x0, 0x3, 0x6}) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0xffffffbd) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:16:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) socket$alg(0x26, 0x5, 0x0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x9}], 0x1c) 00:16:38 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) rt_tgsigqueueinfo(r2, r2, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x101, 0x321000) ioctl$KDSETLED(r3, 0x4b32, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d3000f8168b00", 0x4014}) tgkill(r2, r2, 0x3) ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 00:16:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") rt_sigaction(0x412, &(0x7f0000000140), 0x0, 0x8, &(0x7f0000000180)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0xc80000000, 0x7fff, 0x7, 0x6, 0x7f, 0x430}) 00:16:38 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x4402, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = epoll_create(0x40000000022) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f00000000c0)={@local, 0x0}, &(0x7f0000000100)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@local={0xfe, 0x80, [], 0xaa}, r3}, 0x14) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x50000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$notify(r2, 0x0, 0x284) fcntl$getown(r4, 0x9) 00:16:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7ce, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r1, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000400)=""/209, 0xd1}, &(0x7f0000000140)=[{&(0x7f0000000500)=""/156, 0x9c}], 0x1, 0x22}}], 0x48}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 00:16:38 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80000) fchmod(r0, 0x400000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x1, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x6000000, 0x1f}) 00:16:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000040)) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140), 0x3) socket$inet6(0xa, 0x80000, 0x2) 00:16:38 executing program 7: r0 = memfd_create(&(0x7f0000000000)='/dev/sg#\x00', 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x7f, 0x200, 0x200, 0x4, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e24, 0x5e, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x88}}, [0x20, 0x5, 0x8, 0x86a, 0x0, 0x17e4, 0x5, 0x6, 0x1, 0x4, 0x400000000000, 0x1f4, 0x1, 0x6d, 0x10000000000000]}, &(0x7f0000000200)=0x100) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r2, 0x5385, 0x80fd01) [ 232.293566] Unknown ioctl 22026 [ 232.307173] Unknown ioctl 22026 00:16:38 executing program 5: removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', '%(lo#systemsecurityem0em0wlan0\'eth1[{mime_type-+:/,$mime_type\x00'}) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x3eb13d0ead364b73, &(0x7f0000000080)) 00:16:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0xfffffffffffffe29) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x9, 0x8040) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x1a, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000140)=0x100) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x2}) close(r2) close(r1) 00:16:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000680)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000500)=0x84) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x800) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) [ 232.378482] rdma_op 0000000079a88b31 conn xmit_rdma (null) [ 232.464129] QAT: Invalid ioctl 00:16:38 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x67, 0x400001) ioctl$KDSETMODE(r0, 0x4b3a, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x3f, 0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup2(r2, r2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x20, 0x4, 0x570, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c80], 0x0, &(0x7f0000000100), &(0x7f0000000c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0xfffffffffffffffe, 0x0, 'veth0_to_bridge\x00', 'ip6gre0\x00', 'ip6_vti0\x00', 'ip_vti0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [0x0, 0x0, 0xfffffffffffffffe], 0x110, 0x140, 0x190, [@rateest={'rateest\x00', 0x48, {{'yam0\x00', 'ip6tnl0\x00', 0x32, 0x2}}}, @m802_3={'802_3\x00', 0x8, {{0x7e, 0x0, 0x1}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@log={'log\x00', 0x28, {{0x6, "b1fe3b7153ef42214be9ac5ee56099cb5beb5d0242daead835c7d9113070", 0x1}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6gretap0\x00', '\x00', 'veth0_to_bridge\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0x0, 0xff, 0xfffffffffffffffd], 0xe8, 0x118, 0x148, [@limit={'limit\x00', 0x20}, @vlan={'vlan\x00', 0x8}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'team0\x00', 'lo\x00', 'ifb0\x00', 'dummy0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0x0, 0xfffffffffffffffd], 0xb0, 0xb0, 0xe0, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x9c, 0x8}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'irlan0\x00', 'veth0\x00', '\x00', "7379cc5f74756e00", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xe0, 0xe0, 0x128, [@rateest={'rateest\x00', 0x48, {{'tunl0\x00', 'lo\x00'}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0x5e8) 00:16:38 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000800) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) iopl(0x420) close(r0) 00:16:38 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070b7126c877077b9684efeaf0ba684b950aaa6c2c07165") sendmsg$nl_route_sched(r3, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:38 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x9) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl(r0, 0x40084149, &(0x7f0000001f64)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x404000, 0x0) [ 232.510924] QAT: Invalid ioctl 00:16:38 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000240)=ANY=[]) poll(&(0x7f0000000300)=[{r0, 0x200}, {r0, 0x8000}, {r0, 0x4000}, {r0, 0x40}, {r0, 0x2}, {r0, 0x4}, {r0, 0x1000}], 0x7, 0x2778) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x20000, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0x8001, 0xff]) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) ftruncate(r2, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="80", 0x1}]) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x8000, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffffe}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f00000004c0)=0xc) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0x7, 0x7ff, 0xf06, 0xd9, 0x0, 0x0, 0x4, 0x0, 0x98, 0x6, 0x100000000, 0x80000001, 0x9, 0x1f, 0xfffffffffffffff7, 0x62, 0x40, 0x74a0, 0x9, 0x52, 0x4af3, 0x1, 0x1, 0x552b1ec0, 0x6, 0x8, 0x5, 0x1, 0x101, 0x6, 0xbc56, 0xa45, 0x8, 0x4, 0xfffffffffffffffa, 0x80, 0x0, 0x80, 0x471549a88b2cbe3, @perf_bp={&(0x7f0000000380), 0x2}, 0x30000, 0x7, 0x8000, 0x7, 0x266940000000000, 0x29, 0x5}, r4, 0x10, r1, 0x8) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000340)="44ebff249da0793d347b72a4437f8ea9279eec911a32f83ed924b5aaa824817d38eb2f27ac050e82eb0d3ed3e8", 0x2d) [ 232.640768] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask 00:16:39 executing program 7: r0 = open(&(0x7f0000000000)='./0ile/\x00', 0x40, 0x0) finit_module(r0, &(0x7f0000000040)='.\'^^cgroup\x00', 0x1) 00:16:39 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070b7126c877077b9684efeaf0ba684b950aaa6c2c07165") sendmsg$nl_route_sched(r3, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:39 executing program 3: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) r1 = socket$inet6(0xa, 0x40000000000, 0x1) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r0, &(0x7f0000000300), 0xfd1a, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)={0x8000, {{0xa, 0x4e22, 0x4abe}}, 0x1, 0x6, [{{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x14}}}, {{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0xb}, 0x20}}, {{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x7}, 0x3}}, {{0xa, 0x4e22, 0x81, @mcast1={0xff, 0x1, [], 0x1}, 0x45}}, {{0xa, 0x4e21, 0x100000001, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x7fffffff}}, {{0xa, 0x4e20, 0x1, @loopback={0x0, 0x1}, 0x7}}]}, 0x390) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 232.758250] FAT-fs (loop0): bogus number of reserved sectors [ 232.764139] FAT-fs (loop0): Can't find a valid FAT filesystem 00:16:39 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0x3, 0x0, 0xffffffff}) io_setup(0x468, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0x12c}]) fcntl$setstatus(r1, 0x4, 0x2800) 00:16:39 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070b7126c877077b9684efeaf0ba684b950aaa6c2c07165") sendmsg$nl_route_sched(r3, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:39 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2={0x1f}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000eeffffff000000000000000000e20d0efc6b1f0d43c5a07dd139549353ee61b89c259f40c3ef14fad91bbb9c4926025409aff2eeff231a798b423e5e63e1c4dafbbc48ce433190b8301ce07898eaea64daccd0d66911b96b8c54451b36a8a40f945ec845855de4dbb252a7c5cafb421586a70e239fa83836714c941e2186e81b9db71a54de887b4a5bd3c00a14b0077c81d161b8505119359e927850"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) r0 = dup(0xffffffffffffff9c) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000300)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x40) membarrier(0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000080)={0x7fff, {{0xa, 0x4e21, 0x100, @mcast2={0xff, 0x2, [], 0x1}, 0xbd}}}, 0x88) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000001000/0x3000)=nil, 0x3000}) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) rt_sigprocmask(0x2, &(0x7f0000000400), &(0x7f0000000440), 0x8) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x78) [ 232.966680] skbuff: bad partial csum: csum=0/65535 len=290 00:16:39 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x303816b1, 0x400000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2, 0x7}, &(0x7f00000002c0)=0x8) lseek(r1, 0x80, 0x4) 00:16:39 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x348e5916d8138d3e) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8)=0x800, 0x8000fffffffe) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) fadvise64(r0, 0x0, 0x0, 0x4) 00:16:39 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070b7126c877077b9684efeaf0ba684b950aaa6c2c07165") sendmsg$nl_route_sched(r3, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:39 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x109080, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'bpq0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) 00:16:39 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070b7126c877077b9684efeaf0ba684b950aaa6c2c07165") recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:39 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1941, 0x7f}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x3ff}]}, &(0x7f0000000280)=0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) epoll_create(0x7) munmap(&(0x7f0000010000/0x2000)=nil, 0x2000) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) r5 = dup2(r4, r2) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b805000000b9a50000000f01d90f009a75fe000066ba200066b8dff366efc4c10572d7090f22db36640f74900d30d3930fc7ab76000000660f6f3c5d0500000066ba2100b00eee0f0d7700", 0x4b}], 0x1, 0x0, &(0x7f0000000100), 0x0) 00:16:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x440, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x540, 0x800000000000, 0x9f89, 0x6, 0x2fb, 0x3}) ioctl$TCFLSH(r1, 0x5412, 0x907000) 00:16:39 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'syzkaller1\x00', 0x400}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@state={0x28, 'state\x00', 0x0, {0x9}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x81, [0xffffffff, 0xffffff00, 0xffffff00], 0x4e24, 0x4e24, 0x4e20, 0x4e22, 0x8, 0x2, 0x3, 0x1ff, 0x4}}}, {{@ip={@multicast2=0xe0000002, @multicast2=0xe0000002, 0xff0000ff, 0xff0000ff, 'bpq0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x8}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7f, 0x7be, 0x1}}}, {{@ip={@multicast2=0xe0000002, @loopback=0x7f000001, 0xff0000ff, 0x0, 'ip6_vti0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x3}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x2, 0x200, 0x1, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x7fff, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10}, 0x2c) 00:16:39 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/20) socket$inet6_udp(0xa, 0x2, 0x0) [ 233.802188] FAT-fs (loop0): Unrecognized mount option "/dev/dsp" or missing value 00:16:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x108) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)="53a7684f9d4123c27959e36fbca9b1bee8f7405d5c6d34a412308a266f50aa32ae62ea48deb22f250c67e25a0dcaabee6ce5d5ddbf148c92801775a0c781208b5d7150f4e4ac0ce0e25e671a86e52dd5000e5645e4f04cc3932c0f0ba4be6013fbb326bbc926d783e2f6800bee617b1cb7b2bf", 0x73}, {&(0x7f00000000c0)="e5538672654921470eb1eb563eeb03ddd7d589157aa6b24a214d293bf9f2d3299509aa96a259c3e157f4acc89db753f939135c4529d20b274d36e44b", 0x3c}], 0x2, &(0x7f0000000600)=[{0x100, 0x29, 0x3, "c9d21527d261a377a6c32dd9762c1da1b5e059b8c6622a562ff9c0953ec36e207edc59f72773e52a690979a96d37923b254cdc8557598fc45122f8262dbd0335d05d373ab89be5c1fe595b8ca1e7431c8578c8e6fb56b055de4862b91dd283b683cd7984406760b176e3960130ae41e8dbed710cc6cb0db8aeeb6ddaaa13ebc5fac8cee47dc0c824ee58625780865a320e74d079a8f898f3406aa928e4c4ff61977f7cc5d95288fa76f4d2b7cbb743da30ada71ad5aca4e4c48e9e36d5098638bc4edcc1c66fd3b96625e72bb59a3a7dac4463a6af4478b42e9b74c1c8e97c998727418f02fe722d0e5768ae"}, {0x80, 0x112, 0x5, "80fe3c66bbf5504690fd5cd44016e24ee22b6c202b73a8094b258862ebadf60f4002a5935dec2b369af6e05976ff8afccef6303510872a89e4a3c85afbd16102769a04552380dd452354ed07c9b187e6b25f6bc6bec0f75df9394055d6a4813f786f877a39a5f60e7e4f"}, {0xa8, 0x3a, 0x0, "283edf77e4e71a6496c962c4ac12671f11c11cc897acb57b788f80dc65eeeaa84e42f074d9e6b660ee20f2a74c30c1b7616db684fa1e3b99a6611c39c8453abcb6b9c48c98a06eb1208077bd2335bfbc9e88245cde3b07ed0dde0f9163b35fd40ad0f58091e2d332262833b29f86845f4be73c5dcc7c1c5a080ab6b49b93f0849511fadcdb4eceaa6e883698d5e7eebff1a18377b92ba3"}, {0xe8, 0x197, 0xfff, "af8bc77ef29391bdc95159d774b82999f9ec17d72ea8d792dd81bc4309956ff15e266400dacbb3e1ee6a3b9775229989b5fcb0ae619b4d53e86c708ad1521644a18c3bfadd9cbd6b78d0e502126afd77e3e2ef164aa7131c232b1f04c8977e953175754b91e9d41e3b53089840f0c08a38923cd1298b6b89ff29e7dac75514d835f4b33ccb47681e32dd1c87be265aab4231f2bf10bcfa576c3d3ac0126e471790789b18051873e25f1c57f17e9904b82483e735a03589550a1f23e3da7eead65d706c0dc077aba0937ca8cefaf50db07267ab72b8ae"}, {0x40, 0x13f, 0x9, "ea4d0fea5de164b3c3594e2ffd06d47aa3fb59b175186b645e80877fe26caec6554dba4682442ea3dabf"}, {0x1010, 0x199, 0x3, "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"}, {0xb0, 0x112, 0x3ed1, "8a01ecfcf36af0d49fc0d1425dc8423dd23ac0b0cf45767087665c42a636a83cb0f6605488db2a9a55d8056b13f02f4ad447e2a68725bfa3487f1197948b31a03b8feac4530757196d6a46c06fc508fb86a073e7b31b2d470d6e4565849cb284471a0f16ba21ac1b59daa5d7da1088da44c4a9746855d4173195e62554d8696cef3508f8b9fe6b83b6ce055080bf33cf69af729635c01c71107f6b"}, {0x98, 0x10d, 0x2, "20abbdf4f5d1c11cc1c7dbe55ae06de1f589ba5552c26316e51b96be10a62a45527f273c36062c133d2be38864fded0c35cec5b29efb34f23a3fba5dff44909011a2f19824e86bc65b0046558eb04d212c57e6d444131bb242370bb450be07c5bb1de41d1c723901b318a8930327a817b50c9aab9da543a082f08b2af43a97d45ef09bcc35"}, {0x100, 0x115, 0x9, "512cbd6d783d55cfda94470874711f3a68fcf9116cabcde3a59454a0b26a80a21ef6c026af3194510b638a27569630afe5612fe670d6a7f0478853917633303ae042e650689cca3b6eb679099151cf375d98a099f659567db00b76528ea5b762d70c3a3f763303d079dbc05244656b38cae64f3a0df6fa778dabfbe228db055b18edb8cc7fa98c4d904cab0b8877b80e32f0947d1e860ecc855525dc7b88b597239c1469c76e411c0b775bbc6ec71009c08b63bcefe6d8c7eb3a51a78b08212daf35eb453ca533def39519852c09325953e0de8cca83606b5af6d60df09df34e3d4ed1e63d7a00b56b7b49a99d50a7"}], 0x15a8, 0x400d0}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 00:16:40 executing program 7: r0 = socket$inet6_sctp(0xa, 0xb2daab1c65b747a, 0x84) r1 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="a42300", 0xfffffffffffffffa) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x2c) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={r5, 0x9, 0x20}, 0xc) 00:16:40 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0xe, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x5f, 0x4b]}, 0x2c) r2 = dup2(r1, r0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0xf5, 0x5, 0x81, 0xf853, 0x6}, 0x14) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x40, 0x8001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x7, 0x401, 0x7, '\x00', 0x1}, 0x3, 0x400, 0x9c, r4, 0x4, 0x101, 'syz0\x00', &(0x7f0000000080)=['-\x00', '-\x00', '\x00', "27b52800"], 0x9, [], [0x6, 0xb41, 0x80000001, 0xfffffffffffffffe]}) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x401, 0xffff, 0x1, 0x4, 0x0, 0x6, 0x10, 0x1, 0x84, 0x7, 0x6, 0x9, 0xffffffffffffffff, 0x8, 0xfffffffffffffff7, 0x27e, 0x105, 0x1704e00000000, 0x80000001, 0x0, 0x9, 0x3, 0x0, 0x91f, 0x100000000, 0x2, 0x7, 0x4, 0x2, 0x401, 0x100, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfff, 0x2, @perf_config_ext={0x1, 0x3}, 0x1, 0x6, 0x9, 0x7, 0x7, 0x79, 0x5}, r4, 0xf, 0xffffffffffffffff, 0x2) 00:16:40 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4000000000000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x3a, 0x1, &(0x7f0000000280), &(0x7f0000000000)=0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='dummy0\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x0, @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='gretap0\x00'}) 00:16:40 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x160) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0x9) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003100000000000000000000e6c1d91ade"], 0x14}, 0x1}, 0x40080) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00\b\x00') readv(r3, &(0x7f0000c43f70)=[{&(0x7f0000ea5000)=""/4096, 0x1000}], 0x1) 00:16:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r0, &(0x7f0000000280)={0xd5, 0x7a4, "52a3882c7ad10acf67f2f3992d558ff52dabb3df21a507ad62fd6c0ec44e7586672193ecafa5a241a2af9ff7296a9d0153421d1a8a7455fdf97ba5e43dd07936b6d21f6db513e09ecadd18becf45fc474729831c0dad1e06274ad46dbaff2c6a6962b18b1e3faf4353200eea5d16958f83634009a98fb59768b88dc15d82573e5952b36e1c1463f932ebfd85008317361e3616777254957884c0f9eb16e1242434bdee608692a39329114b678ecd4b72cdce54de8bd5b7845dfd6f8a1b718c4dcb9783cb053c6a27b29437046e"}, 0x2000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x200000, 0x0) r3 = accept$alg(r1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x401, 0x109000) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000100)={0x0, 0x68, &(0x7f00000001c0)="0cf9d68fdd9e4ad726dba61f6cc88c28170d4f2df77fb4e6fe0e5ad5361aecbc7b8dfa8642fd5caf19768fdba517b1308be4871deb9a6116e1ac0f7c44778000e5f90bcb007c3439f881997fd75495a09193acfbd5c60bf8e3fcb17671c75da45ab91527d410547f"}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x9c1, 0x1, 0xb2f9}, &(0x7f00000003c0)=0x10) r7 = getegid() getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r7, r8, r9) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000400)={r6, 0x7}, &(0x7f0000000440)=0x8) sendmmsg(r3, &(0x7f0000003640)=[{{&(0x7f0000001700)=@l2={0x1f}, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000001800)}}, {{&(0x7f0000002cc0)=@rc={0x1f}, 0x80, &(0x7f0000002d40), 0x0, &(0x7f0000002d80)}}], 0x2, 0x0) 00:16:40 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000002c0)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x8, 0xfffffffffffffffa, 0x29517f37, 0x7, 0x0, 0x9, 0x5, 0x0, 0x4, 0x200, 0x57b3, 0x7fffffff, 0x7, 0x3f, 0x0, 0x8a9], 0x4000, 0x80000}) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000580)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 00:16:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00') sendfile(r1, r2, &(0x7f0000000200), 0x7) 00:16:40 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) write(r0, &(0x7f0000000140)="40966cefcbbc57fa4e920f63cde5a150b2f02f0beda17f0c32a9c9f6708b8ddc498ef60dfb4d2ed2262ca0d16369980d77a2fd3eb2c613a1066d930e1701eeee472f4767af895aeaf01515ef5970fcc31d993698185178f563957b123ee9b5f439d47405da14f17837858559332c1bd172c7a58b95e0d72aeb1415c1add1ab52750a12bd255b2c07b554907c302965bfbc614b60287255a25c077007fceee93a655bbcf66935dd7cd2ac1357db3f9606736e70003b87126b52806f9d93898dfe858165f482aee587291889a4b5c35bdb82bb8fceff305a35eb448e9db1c52da94848081fbde10b2c12facb9214191b58e4", 0xf1) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, "6c6200010000000000000100"}, 0x2c) 00:16:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8400ae8e, &(0x7f00000001c0)) 00:16:40 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070b7126c877077b9684efeaf0ba684b950aaa6c2c07165") recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x38, 0xef47}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x7ff, 0x3, 0x0, 0x5, 0x7, 0x1ff, 0xfffffffffffffff9, 0x1000, r2}, &(0x7f0000000240)=0x20) sendto$inet6(r0, &(0x7f0000000280)="8cabf3ce6b05a5b4da3e1f8c7874ef2c69ee6e1795aea04b7e20b6e1bcc6a73bbbe6442d42a4752d29808d95d532bd5906de292212615ce5af86bd78d0cff07c29804494d79af5efbd3b12420e511b618f89916b0c2dba41d50a5c31b3f3b666b49193a00d0c7b11254eddb1f151171e3c6ee4ae368e1a74f849", 0x7a, 0x4, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') [ 234.368570] IPVS: Scheduler module ip_vs_lb not found 00:16:40 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x1, 0x10}, &(0x7f0000000100)=0xc) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x0) 00:16:40 executing program 5: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x0) fcntl$addseals(r0, 0x409, 0x9) unshare(0x40000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180), &(0x7f00000003c0)=""/128}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f00000001c0), &(0x7f0000000480)=""/50}, 0x18) 00:16:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00ffffffa0007917a8fe5c12835670a55822326d94c0e4d15134a35ac8f8000094ba7c77f692afda621862c62daa71e3675e65e8cecdd36ae156dcff066bf2c232a7c3271eb5ed0846d41d13da8e1b64e4ed5b90914fbea461b48f5cc0"], &(0x7f0000000640)="47504c00bc3047629662c71f3f5f26c0b48bec3e7ba6eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x1, 0x2a7f, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000000000000000000009500000000000000856d4fc5ca826f512a79c855ecdbfe5544bb85cc912f834820f63d09e805a335ef331be3234e0a1e3cd27f35870ed9eab600189b93d0f6017beb852b7df2d479d98811d39574c6c95f561fe2f3d8205bee39b194dd1373f1d6791860ea527e0d000000003dca44395110ee688d2353c984d1c39a07373210d609c6af19542e891cc1d6d5c8081d79ad"], &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) fdatasync(r0) 00:16:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}]}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000008f37)}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2408000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000140)={{0x0, 0x8000, 0x8, 0xffffffff, 0x401, 0x4}, 0x3fffffffc}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f}], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000100)}) [ 234.587224] IPVS: ftp: loaded support on port[0] = 21 00:16:40 executing program 5: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x0) fcntl$addseals(r0, 0x409, 0x9) unshare(0x40000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180), &(0x7f00000003c0)=""/128}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f00000001c0), &(0x7f0000000480)=""/50}, 0x18) 00:16:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x6d, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001540)={0x0, 0x10001}, &(0x7f0000001580)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000001640)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000040)="ef0d4418e726d967718ee42da4206a1e7a6bda8e50cbbe7824113600ac51fde2e895350477404191dbbfa9441ab8f13531a0ebc1d2397d8899ea959219015ad06a7eeab038fccc4c87932d438dd3d597ceb19642b1a465fb80972c74469a3ec45be8c56e8aa0ac96897180608088ad7357139ba923c16f3d7982f63a", 0x7c}, {&(0x7f00000000c0)="9c1d205c5ca6467358efe2485a7f5eb0c1e2a4bb4631e1be2037174a1edc765d6accb3250c3b1bc6a92137cd0aa4e98ff734d1ed9c5dca8307ff53be962a8fe01aea0c2151caaafbe6890f33b723416cbd9bc8b98b9d93b0d6a8135f2e59b4ad30e8f683555505bccbe935ef7b93d94c202000fe9304c68e9e24b8846a9d1c4165cde9e0305c6d643dd9a19e3f3e801c5b41e9717d964360ee2f534c8d3a725fa637afa9ef23af4609c8602ab46cefe06ce005369f544049bf7718ea9894fa1ad08cc9", 0xc3}, {&(0x7f00000001c0)="887ad83bf9741f161385ee7a33597b518024fec62ba3a676201cae2ec3d08045735525963b7598f816c6c4a8d0261d420339cfdafea678d90e84d35132441aaea2e055d145474032108f014cb8dff63225af64ed05d199ba5cce247a983d5e914e72eceb3c679bc47edad370ed2224cb655d4e343ee11c9e5cd88de9c02cb8df311847fbfe910298f842f2a648957d05b92910e4b557e3", 0x97}, {&(0x7f0000000300)="791e6cc407bb7cbd4557d8f55d0167752dd2c00a7711e73a42604c5c39f393dc4768a9e093de3c8136922303b303ea28a5a4f1a26f2ecdb3732882f367449b172582ee250e4bf2ea5f9958eccf2370cf5d2d9ce8b7fa52793aa5c5928e626f617f0265594fbb207d0113ea24a548222bc339ea3dc4dc56d33562b94b30eb949eae406a6a419e9439a6fe6537ba88d31a4187cca92eaa0e963f", 0x99}, {&(0x7f00000003c0)="ba4cab99a468c4a790665c22b9437b60b6bd50bcf3c6750883d330db80dc5ede6b30dcd34b12ead2b737c9a66a227bb17499ffdd4830a3bb4849d4a042f2d7e86bd4940f0a181998ccd5e89356050ae4beaf617c1ee4860041d4c76103f287857580873d6cbbde0fc6a4f1244b2d81ffc6fdb162fc493b00107f4dec5e7c658eef3f7bddded3989e7430844d0200ec81832a43987d6c3f9d7ace303c07", 0x9d}, {&(0x7f0000000480)="9176c1492d7909c08efdc4c1f878af5ab192261f68dd84e31eb7df99e9869b36416c4bfd7c257d8d16926b0c505736058efa8109f648ad9f226657e3bfe6", 0x3e}, {&(0x7f00000004c0)="37a2a810e53e6c2907d41ef538c437723b5be9702a15bb0a8154dbbe34d799952db98448c24679e7bf7c531ecdbedc49dcfee401178884d4a5adc705b1630303f279a055e4b60e9702d2856ab955591857528a46ef583a8d1e2c338949cb69e8a7551b1020f9f65e668bc88f48f56789125d04ccaad5cfc0eabee918eccc25df098b36886f01f236b9445b826a4258c4cdccb6b297cc6d0897eebdd717d3b01a87d15fb80e3020c3d33e6f119b5e4a68a2f68a04f9b8b14486c199fbe9ab50342a639fc8a0710a56ffc933ad61544e013c22795a41706caf08237ac97b2288930f0875c4b8e1fbf0a725725b572edd732b9e6db373aaf83e988da4524792b88262c7ee15e63eb1567fb5449465f6782fa3eaa592388be25ecc7602eba9acecba65a39f84884f97aa2f909fcea99470f282fcdcf5181f7316cf7676a5980863a2db6b615462968aea2df468e782b276ed2898c1c280a7f0f8d4c7aedb3eeeb81263873d1ee59d99a4f75fcac7c2f0cacf2062ddef2a6281c3079536d725870a05435e089d71129a7651501b0cd22f478596c6dbf27c3677fbba8c75370346a0372ffea889fea9b640c0ceb86442394f618f21d03c013ed4dc0c1d120f538e3533d3768a990e12d14a105caa2c51efb534f3dac51ce784f70a97d39195b154dbd477bdaab6c6fd4e7b76ad159e15a8a387590dbad7c0011dfc0127735eb9d3936b626b1a4b91464296b2c812f255477f3a068c0b8692537d4ed14de6809b6b340aa66433d30c424c715b9038fb6458069d4c8bc207620c33b6610f2a885445cab15ecdfa581b95ad89a93b83c7fdce0ef29c5c75579d1036ad5185d828ce8e52ad90d1a8a701edd1f7ccf3bde69f7660f46e4df86834a0a71bf8d31eff9e5b86f789a4ab9f35a449403f5ab3049502d0e70328602026f6e73f231956cc6fd5333aff361cbfa98acd79cd40f72e8c5d5ff889ba4498e13836d56cf357022fab21f7b7aa31f036f89c3b68d5ad5a05bb174790d843356fddd3bc09fa7496f976cfbebf2963341ddabbb04ff256fbd70a18a9a02d6f41833406e66a33842c72c5c32a59b9c6c808e1c5f13a70380ebc043b3661ed6f1404438ac8584bc4fc9da67ca99da555abf79da97d1804fb47d4ea6c712d1fbe754478f15495d65ab31deceb16a6c1507be95dfddadcd36b81b732b8f650cc806d0313d345174d8dca5ab55171ba8a715c954f66b56395193d1e46bef5983664e133e44b9d6ecede67938b30c5970dd180b7cb4ad7ab98a1c8930e4e08f4659ac3bfa8ba19b6b5004c0df9a4ac52647dc3b7b0e014348b01d97ee5c35cd3c0f99c679982a2417b1c351c4470c37fc7d829367add2e3437ba19f3f97b415994995b52b7bba4d09eadd2e20fc05ba69976b4470954250c240647c640fc65859b1bdf6b94d6763dc4295a42784147a749b76eeb3974c6b42397c766c227534b29f6c707dcbdd10e4d808c9df2370faceb877e27d68d9a24027815eb52db6f8462c13d30efa84051a999ac9bb0bee42ed7d6847392f46802ab756f5cc07445236199117c065aff024f3125554b9d1b616b1812b445aa860e2a3fe312d9f057fec61104af129e38034916b5a95351655acc0a70237f55a72ea6c943c099297c515a15338cea82abe7d620f60d5dc0add6efbeb5586d3263543a7dfd1a1beb4108c8bc1bd3ed5e319a0cb4cf67d193532d7c68fa8a38904f96ff62bcab7c39de10772f0dcade95d6015336587579f104e60434ceff9cf7faff84a342d5b3f6c48407b99caa2f49773e62f0751df97bfb9ba15bc56a390ea3b634f3b6b7a170ca01ece298a7220ee1ba0c25c77287b9defe7d1a2cbfa41826a6bca78648b439c8e8f020f75cfb9296949998718cba119a99e797df18ec9ff733a7a471b6b4595f119e1959b97a785e9b87d8e73520ebcdfeea2aa1f242f795703a5eee299081ff09d1801c553e0e02d2d226dd898e838efc547108a15990b63cff91eb9f15c47e8419424ee915d4eb7d885ae62fabafd03ea2d5fe918ac55e7e5257d828c5541179565cc1c92cb349b1e204d7b36b8ca6cc7a25516a3aa3c1c7b34ad21626c72b8a915e9bded6d5ff1d7466f548dc42d0ebe2f8e7d814b5416ea21bc967c482e66981c8f477bab6aeb0ffd0b03c7a5f492901ca714d8b447d033f3b6f5ae1554ebc953ec25eecdc4f1fd36a0ffb2764ef92da15181385504318742619c1eec9137397d86de47b48e8c4538f89950810e0615fa46800b0209ebb9ae15fb2891f9636b5c60373ee63ddbc5d02e6e9f8fb01a9c80c05932e412d82324e3ea95c7336f7f4b2317eb01306e2f0c7fbe061a02deb904fa8f2e3d933044ae8112f64fe07f0be91a2f74a9ae15fd6ac2d9c5efaf2555b9eb5e0dd7dd697f2f8b6a7a4f1d331d7b35205ec89c7aeb077ac23c6e1b57d9269110773b2c173f1c516b0a4c28b6cdd7fd5640872a70bde69f326678b21f79402821b347d03a5e7b8268f7259942b011684d25bbf9c178f982827277158d528362061a91d0be82dfdeacb27bb6812e51c9d5eacbdde89b70ea340ed3583ca2490c8fbef3b724e818f168c34057567c2e7e0f6a85b51964fcd9c92b2f2af17a766d80adb75486c6896643c8ccd94e71bfb4f9849285e01ab0ffe582d84bb37917a313c81911a12af14b98859c3fded8b61b427a20ffb3aa7f9c1c6623b71b3122172d596d7bac389760fb0192a881e0c87aba385796ecc9dbb75cc41ff97ee889daa8f9742cd89034763e1f5bd0b906eb45730593c195d6fda2dd69272f0be5c79a694fd81f9020c9ea13da4c5ea86fdaebe501575849499ce4fa53332bfdfdde6212ef5beafa69cc90809eae5103b39e2ec97ef20fb8cffcde7d23f42983600ffa70e97ba3eee6f67c0ee7b39ebae31eaff4c15f2ceeeed04b05658cd87e3373786d8026d8492d38a24c90818bf1529c06f9fd1ee59e7b577d7f3ce05f1575fa9c0f4aceac9f4b218346114985c30e09bde92c18a26473d18d3de9cd6f795b28c49dbdcc62b9e3d1b6adfae7c41517653d91d18d1b1ed7cbf10e0ed4955d803a3743978e5287060c1baaf8f75ae098c8005ed1e7f9b0e52130c18c0fa8be7c275885cc3243509aefc6efeecd8354db58b1098f274fe2b8bea305bddf766d49d7347857187be4bacae848a4ac86ae4708df857a80463e9c9087e03ded2b17bd6a5a1a129487ace7dabfeb3a43b227d7180dd6bc8d61d8653ca656703dd3b6bd9efc3ca15c5b7ee84b6748cc312746fea530594985f68ee661c8a86cf31b67d1843f173ffd766bfb403b55419e43965620c9c8f4ba97962fbc6b18c542a105318abdca31dd494409fdb06494c6330f26de47c1bb44901598cda405cd26c6d846701fd87b0cc73544428e4fa9a04e8ddb250ebf598bb50e3ade15c5714324766e13e4fc8598a20327c934b44e662b017c0e39a1d95c97c773dfd536da13f8d5570648ae16366ec03a5b75099e555e2a7e3120dd2842225e019ac559c83a810c7c7e6c7922a0c86ae3f44738a1edbe4f236529be9956cc166456d74e7c5bc7c7c05e2638f2e62c7ed60d9b8982d66f0bd028149261b9815188af2783fb23c2aab1b1b0f75ad966021ceb6ab5b250f6eaa1f30201c062e2327c9b28d06ffb3d0d0e990e702159162758c07592f4cbab8b42cd69307e9836b008e03a9e887d8c3174b833b914dfa50162c04cf9c7265654a350442cbc41961940e87ae458ce49a31f215f313d5f23871c04dc8bc95bd1b9f6f674d127a7fbb6058f57e3dc822e720143828ee631d4d236ed2ab6470d447702650dd20b7b372d5aa54861a4ad8ba10c181d746075ebd2e90715e6806fe6f6ef14ef74b6b89ae291c7895ec6fddea94332cedea99b0c063fc838c0419c4f9861aa004e063dbf9036d4f2560d374b3e796aa8b13cfbddc2227001d045d74c509fc0bcf820eca711a006df17992b94eb3328bde0c4b50a1c314f9f06417e889e0362bb401eaacc2eb0cff1189528ce30b1e66b691a3c57acfd64d3dd7cf6998415ee2e88f07787b2b7d0b0a3701fd358e5ace78bd4f6352e8ab8cb64d24a956349829ef04686b81a3e0926cd279add03e3af9ce58917c07e64a8313725801548484f7a98b733ee19e8d4ad498ee4c3b33e260da4de9e13f6f640d4a972102874a2db1c87397dc8049ea1f5eff8f81275f1b03f4fbf54cf411b1b09ed37d7bca27f53d9c8b9009b74a09d0ce31d57382d76fefd6a718deddf351007330f158ba9ce41f2285a5e9946d4458dba136602adbc569695e6b840e7697b9940cc3848c74ca30c820dd4c351a1f7b6ebe43ebca366e87ec32e8fbce17d15006d7ce756032c5405d632f7031ba706a95740c27af50c7febede0d715a01307f893064377e1a5dba504bfe642cc03d4b3403934ce69e23c27116f2cf65dc0535a3379ef1bb3810a3f59455657bdddb23cb69894e557150a79f9d9ac88d4f598ced91e1e758ef6f5a15d587b5a4d199d78a122629d23e156cfabe1dd5b36da5e7792152a600680a7667c3d155e1cd720df6d170e41ad3ce6943156ee8f3ac4eb9bcd065f4cc5d635eceb81456e002985ff52ab718adbd3ce951727ec87a7898d18d63eff113f23ebd015126d33f36e9d03d3c52d979cfd50d0d85a3f30d0340efbd4c757dd1512ba3892111dd59b8cb1dd3dfe47e954df5a277d07f9b7ac58c7ee474bcb359bb8565d258bc9724ea90673d76b4b809945fb22af613efd42e3dfd6eae3806adcaf1cbdf21ba0774c85156e05ca4171e14c4e9cd2008db8754c15a4f91775955e3a9f24480e064e96649f7ae36f0eda5edc3eeaf40e5f62890d6cc88e252132e8b9d04a889495db4994e6b15401dc5f3765625ecb99b01847a1fd6af5a7cbe6a3020fdfb023799013079b01e7b1e88355a368333b727233e8d59295b1a7bc619b2fdbd6dac81ef8bd33eba8c357e3532075632b660351c3c2b86acd24e2c0b9d32b5e675c4b15f6608c36c697bb02a25f653190aeb326542a34434685e3fda23a7809d80a562233df7239eef4ccd9ddded54209e7e6d06ee0b6969f0515aafa58a8b922e07da37e683965aafb9e83f8ac8aa5b0deb379a8a76ea03972fcf6e55eeb38138cfe0a85d1987199ea40f62e172345a2a4aa6c97d0c81e662a4e0308ce9458d0aab6c3df5a6d02f19937d418fc46a96252c7bae7bbab74fce7cab511f6a2e2152deb117b199fb6c40940a0163f58a5be3b6faa45fe419d79b79779bdf5030a770ea1ec8c1c2c653d942a6625d8df29113eed19d7506661ce7bd6dd9c145fd2b17881ca30119b12493e468d038695a9c5b08750e3ee55f2c4c6e1dd725a2616c083d15d9edd50210bff877fe4ab29eb0a5929a64cd0cef3d8dbc21b0932f6cbadcdb411333b5b03a06d8425aadf210c4b3ef8d55d08cb1df6f54419afb414b22d9b2d54e09876b5e94a869086de273dd05acd055af7e5523be9eabfb32c885acac34be76d174472840e908483e2bfbc107dbc3edab9d0945651422e0b30d15be7b3c27ff81482a54c54722757e818bbc5d8946e7038125b4a3d646d6fc14293deee2c4a0990b22f4c58335b5e57e1d581865ce8545ef96691a789ab8cc54c1697d9dbd6f6cb03bf934409196b0a43afec779c6a51c821d15e5509bfc4606803612f452bb03befd1453d8aa12c78434ad6cfd7e4534d8e53907e5f7975cd56d0325a46529a88d50746d6933104e7bc74e25a33f9a530cacb16b3bb7e12e6ab099b2dc2b9b9546bc0eb8ac45560b", 0x1000}], 0x7, &(0x7f00000015c0)=[@sndinfo={0x20, 0x84, 0x2, {0xf6, 0x4f5fa382025c8d3e, 0x4, 0x2400000000000000, r1}}, @authinfo={0x18, 0x84, 0x6}, @dstaddrv4={0x18, 0x84, 0x7}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1=0xe0000001}], 0x68, 0x8000}], 0x1, 0x4008000) 00:16:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}]}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000008f37)}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2408000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000140)={{0x0, 0x8000, 0x8, 0xffffffff, 0x401, 0x4}, 0x3fffffffc}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f}], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000100)}) [ 234.718267] binder: 17271:17274 unknown command 536907575 [ 234.725847] binder: 17271:17274 ioctl c0306201 20008fd0 returned -22 [ 234.747233] binder: undelivered death notification, 0000000000000000 [ 234.762224] IPVS: ftp: loaded support on port[0] = 21 00:16:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000029000)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) 00:16:41 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x803, 0x5, 0x3, 0x80, 0x0, 0x3, 0x100, 0x2, 0xfffffffffffffffa, 0x5eb, 0x80000000, 0x1, 0x6, 0x4, 0x9, 0x6b, 0x8000, 0x5, 0xc000000000000000, 0xfffffffffffffffd, 0x8000, 0x8, 0x4, 0xbff5, 0x5, 0x1c09d000, 0x80, 0xb1c, 0x4, 0x8, 0x5, 0x8, 0x3e7, 0x4, 0xf8a, 0x7, 0x0, 0x5, 0x3, @perf_bp, 0x23261, 0x80000001, 0x7, 0x7, 0x1, 0x9, 0x9}, r2, 0x9, r1, 0x1) 00:16:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x80000080044dfe, &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) recvfrom$llc(r1, &(0x7f00000001c0)=""/56, 0x38, 0x2000, &(0x7f0000000200)={0x1a, 0x30a, 0x1be2, 0x1, 0x5, 0x6f4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}, 0x10) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) syz_open_procfs(r2, &(0x7f0000000080)='environ\x00') [ 234.906634] binder: undelivered death notification, 0000000000000000 [ 235.026699] netlink: 'syz-executor0': attribute type 21 has an invalid length. [ 235.052790] netlink: 'syz-executor0': attribute type 21 has an invalid length. 00:16:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0xffdc) read(r2, &(0x7f00000000c0)=""/106, 0x6a) ioctl$TIOCSETD(r2, 0x5437, &(0x7f0000fd0ffc)) ioctl$VT_ACTIVATE(r2, 0x5606, 0xe43) 00:16:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001540)=ANY=[@ANYBLOB="01002c7f7bb5b79b7de9b1ffe90000001e00fb004d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000002]}) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000001480)='/dev/input/mice\x00', 0x0, 0x2000) accept$inet(r5, &(0x7f00000014c0)={0x0, 0x0, @remote}, &(0x7f0000001500)=0x10) r6 = memfd_create(&(0x7f0000000440)="b4f6", 0x1) write(r6, &(0x7f0000000300), 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3, 0x10000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000200)={r7, 0x6, 0x7fffffff, 0x8, 0xffffffffffffffc0, 0x8}, &(0x7f0000000240)=0x14) getsockopt$inet_dccp_buf(r6, 0x21, 0xf, &(0x7f0000000480)=""/4096, &(0x7f00000002c0)=0x1000) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000280)={0x303, 0x33}, 0x4) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="2e0f019803000000c4c3a941a69ee100002a0f01ca660f6e130f865560e7898fe9c893a3000000000f01c8b9d7020000b8308a0000ba000000000f3064660f2fe426642e663666660f38812c79", 0x4d}], 0xaaaaaaaaaaaac85, 0x31, &(0x7f0000000440), 0x1c6) statx(r6, &(0x7f0000000300)='./file0\x00', 0x0, 0xfff, &(0x7f0000000340)) 00:16:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000009c0)=""/38, &(0x7f0000000000)=0xfffffffffffffe68) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400200, 0x6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0x1, 0x2, 0xa508, 0x0, 0x1}) fcntl$notify(r0, 0x402, 0x20) fcntl$notify(r0, 0x402, 0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0xc1, "b7e19da8b4a6a56835bb1c97f18fe2d5b05a34e976e58928f6b7a4c5a6dff044dd7a5c6012e983f72d6ea5afef9b9013aa45e110356822d7b01d660c18e9d1dd96121b1e56607f60f62e2c12ec366edd70455aab3d23b67d9912134670654f2400354192b801eb5911f04528bb70da6915d2686a8973af35117c62bd87af1ccf2a3709ec674ff1b370f68e3f35640af27ac127f1d0cc8ecf5f7bf6669dd7e26bc8f81ceaddb998e67c94c5d1dedf6206a84db53fe60ff57db2c56f4d2bd326d4ee"}, &(0x7f0000000080)=0xc9) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000001c0)=""/190, &(0x7f0000000280)=0xffffffffffffffaa) 00:16:41 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x400) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x8}, &(0x7f0000000200)=0x8) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000000c0)=0x5) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000240)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000100)={0x1, 0x0, 0x1, 0x0, "737972310000000020000000f60000000000000000000000000e000000000000000000004000e8ffffff00"}) 00:16:41 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070b7126c877077b9684efeaf0ba684b950aaa6c2c07165") recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:41 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10dd}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x3c, 0x43c, &(0x7f00001a7f05)=""/251}, 0x48) 00:16:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x7fff, &(0x7f00000001c0)="2957e13105aa5887ee1f164e") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x44) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x2) 00:16:41 executing program 0: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) sendfile(r0, r0, &(0x7f0000317000), 0xff8) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 00:16:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x7ff) membarrier(0x20, 0x0) syz_emit_ethernet(0x1ef, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0980c20000000800480000280000000000889078ac2314bbac1414aa832d0e75a9d1beb6d81d54144507afe000006bcc40cbe2ba4f56111013a9b8b801890300000000009078ffffffff"], &(0x7f00000002c0)={0x0, 0x0, [0xfffffffffffffffd]}) 00:16:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x81, {{0x2, 0x4e24, @rand_addr=0x5}}, 0x0, 0x4, [{{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e20, @multicast1=0xe0000001}}, {{0x2, 0x4e24, @multicast1=0xe0000001}}]}, 0x290) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000972ffc)=0x6, 0x4) 00:16:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='errors=continue,journal_path=./file2/file0,norecovery,\x00']) 00:16:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)) 00:16:42 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x51) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x10000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000003c0)=""/246) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000000280)=""/174) [ 235.897322] EXT4-fs (loop3): error: could not find journal device path: error -2 00:16:42 executing program 6: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x800) poll(&(0x7f0000000140)=[{r0, 0x400}], 0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="0000000000008000000000") r2 = socket$vsock_dgram(0x28, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r2, 0x0, 0x2}, 0x14) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) shutdown(r2, 0x2) poll(&(0x7f0000000040)=[{r2}], 0x20000000000000e6, 0x0) 00:16:42 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x53, "11ba986d6d66c2713aac4f10b393a104009f72916100baa5862af2c35e227cf33a3de1d0efbef64e4a00f466ee43ae716f38e8fb83c2aac52b910a87b752d31d602ef73387d84c211271485a75af6c72e0e92f"}, &(0x7f0000000080)=0x5b) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}}}, 0x6, 0xfe1, 0x49d4, 0x0, 0x58}, &(0x7f0000000180)=0x98) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000007b80), 0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000001c0)={0x1, {{0xa, 0x4e20, 0x100000001, @remote={0xfe, 0x80, [], 0xbb}, 0x6}}}, 0x88) 00:16:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/13) 00:16:42 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x4, 0xfffffffffffffffe}, {0x80000000, 0x8}, 0x8, 0x1c84d59f46636d96, 0x9}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)=""/51, 0x33) 00:16:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0xffdc) read(r2, &(0x7f00000000c0)=""/106, 0x6a) ioctl$TIOCSETD(r2, 0x5437, &(0x7f0000fd0ffc)) ioctl$VT_ACTIVATE(r2, 0x5606, 0xe43) 00:16:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mq_open(&(0x7f0000000140)='TPROXY\x00', 0x40, 0x1b7, &(0x7f0000000180)={0x8, 0x9, 0x7, 0xa7d6, 0x1, 0xa8, 0x5, 0x6}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) 00:16:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000055608013d716000c030000302ce0075e97dacba8e99ad76e2227e100aa0880b3da9846f2333525c2a96fb93254181e13ee071c71c69241d73dcbf251978d2c7c65c2837433e74f46f360d12638892d1cc2675bfe9a0ab194f250144ff718235d8e96b9064a794e0ac749d847317eb6c280e8ec5656898678c8b5f7ef0f38fee232771e0bb2c197198df97ae9b8f55c458b097021c839013f001b700a5818d59fe2e787c987c81d898b8669124a91c2fc6488b37bf4c2b2fc5016b537e2100198c2265bcd970c5be8cd74728088cb44dc07ecc01313fc1ce546d659f588"], 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000380)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@typed={0x4109, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) 00:16:42 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000060000000040000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2280, 0x0) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x2, 0x9, 0x8, 0x5}, 0x1e, 0x1, 0x0, 0x0, "a5312725e61ccf7cf4b14a0ce8ded3d3c29ad7476f00b41bad153425b0dbd1b4f60777166386735d89ce73cbeae3967f5b083eea7acd7bb4ecfc06e8b5636c0d"}, 0x48}, 0x1}, 0x4000080) 00:16:42 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x3a) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6_sctp(0xa, 0x10000000004, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = msgget$private(0x0, 0x2) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="000000008ad3aa546f6c0ab7e97332"], &(0x7f0000000100)=0x8) fchmod(r0, 0x188) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x73, &(0x7f0000000200)={r4, 0x10, "52f7dbf06482af9ea614ea71cc19231c"}, &(0x7f0000000000)=0x18) 00:16:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$KVM_IOEVENTFD(r1, 0x40086610, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x400, 0x100) 00:16:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0xffdc) read(r2, &(0x7f00000000c0)=""/106, 0x6a) ioctl$TIOCSETD(r2, 0x5437, &(0x7f0000fd0ffc)) ioctl$VT_ACTIVATE(r2, 0x5606, 0xe43) 00:16:42 executing program 6: clone(0x200, &(0x7f00000004c0), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000600)={r1, r2/1000+30000}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)) r3 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x6, 0x2000) openat$cgroup(r3, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)="706572736f6e616c697479005d82a7336489ce5bda0a0fd81d814eb15432b3e583f4f58ba51cf65347e346e484375f3b177c09b3ee9b0c6ce0e3cc7ec8ee067664c3c2f573c428867a4d951c87cc1fa9cae30a9ffbfbfacd2225d361be19813b9e68acf48d347c6b555a3e1966d01843c9d2ada1756f47af2b2c258d55e7f160c7de2af9fbec1f20bc0a3cc530f466713fdf5a6578d7861a5dae4285985a4a105addaf3169870d02f2cf8769d76091230874707ad3d5c6818d9477671c483acc99af30b48c4210512ee897a9e894cca176f070ec022efc6fe11517d648f1d3b6aa7d858f893e9cba3c4f497bc1b0cc3745ae9de49f89152074f7604f276665c232239ad8af449406ea4d17fd30a4aca89fbf9f88b0b67958b80634f40914a58f7f8ce6a61075436e6b685d8b97b1fb09822e1e8f4447ec62e4be7a9a587364747c3714dd79dc90a8a33a14eb14cbbf1cb7d145e4d29ea11518ee5c797b1a0b38d412d7cdfb3e12dcd5f780aed68f35d04446834d8cfaab2b1c871f54662ebf30c892902b6338cfb706d8db7273d97a816b4c23910cc5794a") r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2d, &(0x7f0000000040)="16c1faa56db81352b92990567a9dd19ed4192a107571525b043a9276108bdb2aa01c825c03", 0x25) pread64(r4, &(0x7f00009f3000), 0x36c, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1130, 0x3ff) open$dir(&(0x7f00000001c0)='./file0\x00', 0x27e, 0x0) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000640)={{0x2, 0x6, 0x8000, 0x7fff, 'syz0\x00', 0x7}, 0x1, [0x7, 0x2, 0x559, 0x9, 0x0, 0xfffffffffffffff9, 0x5, 0x6, 0x2, 0x25d7, 0x100000001, 0x400, 0x8, 0x8, 0x8, 0x1a, 0x97, 0xffffffffffff0001, 0x5, 0x8, 0x9, 0x3f, 0x401, 0x1, 0x3, 0x1, 0x4, 0x5d, 0xfffffffffffffff8, 0x100, 0x7, 0x34a, 0x2, 0x0, 0xfffffffffffffffc, 0x5c5, 0x9, 0x3f, 0x100000001, 0x26f, 0x1, 0xae7d, 0xfffffffffffffffe, 0x1, 0x8, 0x1, 0xb50e, 0x0, 0x5, 0xffffffff, 0x0, 0x3, 0x80000000, 0x5, 0xa74, 0x4, 0xff, 0xffffffffffff8000, 0x1, 0x0, 0x7e, 0xffffffff, 0x1ff, 0x0, 0xbc, 0x8000, 0x40, 0x9, 0x0, 0x5, 0x7, 0x9f5b, 0x8, 0x5000000000000000, 0x7e, 0xffffffffffffff62, 0x4, 0x163, 0x37, 0xffffffffffffffff, 0x1000, 0x1e, 0x7, 0x9, 0xfe5c, 0x5, 0x8, 0x3, 0x0, 0x0, 0x80, 0x5, 0x561, 0x100000001, 0xed, 0x4, 0x8, 0x4, 0x2, 0xfffffffffffff800, 0x7, 0x7, 0x3, 0x2, 0x6, 0x5, 0xfffffffffffffff8, 0x5, 0x81, 0x5, 0x6, 0x0, 0xfffffffffffffff7, 0x4, 0xba, 0x6, 0x9, 0x4, 0x4c2e, 0x2, 0x81, 0xffff, 0x6, 0x20, 0xa3, 0x0, 0x9, 0xff], {0x0, 0x1c9c380}}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000200)={@remote}, &(0x7f0000000240)=0x14) sched_setattr(r6, &(0x7f0000000100)={0x30, 0x7, 0x1, 0x446e, 0x0, 0x9, 0x7, 0x861a}, 0x0) 00:16:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r2 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) readv(r2, &(0x7f0000001700)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) r3 = dup2(r1, r1) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000040)=""/44) recvmmsg(r2, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 00:16:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="00005359a748f176", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00b1c476c78e1c85"]], 0x0, 0x0, &(0x7f00000003c0)}) [ 236.330553] EXT4-fs warning (device sda1): ext4_resize_fs:1916: can't read last block, resize aborted 00:16:42 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x101000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r2 = creat(&(0x7f0000000380)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lremovexattr(&(0x7f0000000100)='./control/file0\x00', &(0x7f0000000140)=@random={'osx.', 'cdg\x00'}) chown(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000240)='./control\x00', 0x3f, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="55513ea6f3d931ec8d13a48814e562328abe1dca1e64d6555e6701ccec5051e391f8cd8db35da7569af2d29ec2c87849ce081dba4640c767b5ff301cfd0db030db1a3772fa7181c44704b8dd2c3b13dffd61d270b6cf5dbc834f39188e5b09f56907ea", 0x63, 0x1f}], 0x280010, &(0x7f00000003c0)={[{@part={'part', 0x3d, [0x3a, 0x38, 0x3a]}, 0x2c}, {@decompose='decompose', 0x2c}, {@umask={'umask', 0x3d, [0x34, 0x32, 0x31, 0x31, 0x33, 0x34, 0x34]}, 0x2c}, {@nobarrier='nobarrier', 0x2c}, {@decompose='decompose', 0x2c}, {@nobarrier='nobarrier', 0x2c}, {@umask={'umask', 0x3d, [0x36, 0x37]}, 0x2c}, {@type={'type', 0x3d, "f98aa916"}, 0x2c}, {@gid={'gid', 0x3d, [0x0, 0x0]}, 0x2c}, {@force='force', 0x2c}]}) close(r1) 00:16:42 executing program 4: gettid() 00:16:42 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) [ 236.572129] binder: 17411:17417 got transaction to context manager from process owning it [ 236.580634] binder: 17411:17417 transaction failed 29201/-22, size 24-8 line 2843 00:16:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x3) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)={0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) [ 236.634752] binder_alloc: binder_alloc_mmap_handler: 17411 20001000-20004000 already mapped failed -16 [ 236.655316] binder: BINDER_SET_CONTEXT_MGR already set [ 236.662787] binder: 17411:17417 ioctl 40046207 0 returned -16 [ 236.673719] binder_alloc: 17411: binder_alloc_buf, no vma 00:16:43 executing program 0: r0 = socket$inet6(0xa, 0x807, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x38, 0x20, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x33}], &(0x7f00000001c0)=[0x40, 0x38, 0x0, 0x0]}, 0x8}}, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000240)=[@ptr={0x70742a85, 0x1, &(0x7f0000000200), 0x1, 0x534f, 0x19}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000280)=[0x0, 0x20, 0x30, 0x38, 0x38, 0x0]}}], 0x5, 0x0, &(0x7f0000000380)="5d79ad1737"}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x400, 0x4) uname(&(0x7f0000000000)=""/30) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000080)=0x20040) [ 236.679419] binder: 17411:17424 transaction failed 29189/-3, size 24-8 line 2967 [ 236.703672] binder: undelivered TRANSACTION_ERROR: 29189 [ 236.711485] binder: undelivered TRANSACTION_ERROR: 29201 00:16:43 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0xffdc) read(r2, &(0x7f00000000c0)=""/106, 0x6a) ioctl$TIOCSETD(r2, 0x5437, &(0x7f0000fd0ffc)) ioctl$VT_ACTIVATE(r2, 0x5606, 0xe43) 00:16:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000000140), 0x400000088, 0x0, &(0x7f0000001ff0), &(0x7f0000000100), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5) 00:16:43 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) r1 = socket$inet6(0xa, 0x3, 0x4000002) ioctl(r1, 0x4000008912, &(0x7f0000000280)="295ee1311f16e777671070b7e4dcdf5e654f1ee6e1b55082c1241f15464801f53d364a598e4c2baa7ecc2e7cdd0a97d0afd7712c4affaa220982f66e98fd97a4adbbaa84acaa5f804e0c8576353c55aa3eda866d642f01b58400a8b9b830f3d5b9ba448419d5103d3e2d058aa287c310209e3365840f27879803a96dfdec57510874dfa93a6bfad0f114ad6fe630778a980f66a6e57d58d6de99d98174f250ce6c7e5e91d8aeb63651") ppoll(&(0x7f0000000040)=[{r0}, {r1}, {r0}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8) 00:16:43 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:43 executing program 0: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) syz_fuseblk_mount(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) 00:16:43 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000016000/0x1000)=nil, 0x1000}, 0x1}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10) shmget(0x1, 0x4000, 0x800, &(0x7f0000012000/0x4000)=nil) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) close(r1) 00:16:43 executing program 0: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) r1 = socket$inet(0x2, 0x7, 0x401) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) 00:16:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0xffdc) read(r2, &(0x7f00000000c0)=""/106, 0x6a) ioctl$TIOCSETD(r2, 0x5437, &(0x7f0000fd0ffc)) ioctl$VT_ACTIVATE(r2, 0x5606, 0xe43) 00:16:43 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x9, &(0x7f0000000100), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x0) timerfd_create(0x6, 0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r3 = dup(r2) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x1000, 0x4) socket$inet6(0xa, 0x1, 0x5) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000011000/0x3000)=nil, 0x20014000}) 00:16:43 executing program 1: utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x852, 0x9}) capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x9, 0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000013c0)={0x0, 0x9}, &(0x7f0000001400)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001440)=@sack_info={r1, 0x4, 0x9}, &(0x7f0000001480)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000bfa300e8000000040003000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6404000000000704000001000000b7050000000000006a0a00fe00000040850000001a000000b70000000000000095000000000000007aef458b3589ea8a0296dc479eada8360d7c88a1fcabc1d4b3c0d9fbe8d655bc31721586cd5e94597ca3d094f6d8d2283c357506000000b2758349659ee53aee86807ee40a7b75858b819c8f71a20ace2759137935e0f9b6d50107cdfe34fe7854cc080fb9a9225d8d07aa277eed27b0e6cac18b05db0c42bf8fc647a1b0ac8a655a837f0f6f1b52dfc4c597905defe92244490ecd8b803bc79542932dabf920000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010001000000000001000080180000000300000000000000030001018d10feff0000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x702fe426, 0x1000, &(0x7f00000003c0)=""/4096, 0x41f00, 0x1, [], 0x0, 0x7}, 0x48) 00:16:43 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x5, &(0x7f0000ffb000/0x1000)=nil) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x10000, 0x2, 0x5, 0xe3, 0x1, 0x3, 0x837, 0xfffffffffffffffd, 0x4, 0x9, 0x8001}, 0xb) 00:16:44 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x9, &(0x7f0000000100), 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:44 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000008940)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"ff030f00d34892babf7b806e000200", 0x4012}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[]) 00:16:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d07000000761070") syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x2, 0x40002) 00:16:44 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8000) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = gettid() mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000053b000/0x4000)=nil) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x1) 00:16:44 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0xffdc) read(r2, &(0x7f00000000c0)=""/106, 0x6a) ioctl$TIOCSETD(r2, 0x5437, &(0x7f0000fd0ffc)) ioctl$VT_ACTIVATE(r2, 0x5606, 0xe43) 00:16:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_int(r1, 0x0, 0x24, &(0x7f0000000000), 0x4) 00:16:44 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x9, &(0x7f0000000100), 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = socket(0x9, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x2, &(0x7f0000002500)=""/4096, &(0x7f0000000080)=0x11b1) 00:16:44 executing program 6: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@session={'session', 0x3d, [0x37, 0x31, 0x38]}, 0x2c}]}) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x60002) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000001c0)=""/170) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x80400) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x1, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)={0x9, 0x10, [0x3, 0x3ff, 0x7, 0x5]}) 00:16:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0xffdc) read(r2, &(0x7f00000000c0)=""/106, 0x6a) ioctl$TIOCSETD(r2, 0x5437, &(0x7f0000fd0ffc)) ioctl$VT_ACTIVATE(r2, 0x5606, 0xe43) 00:16:44 executing program 3: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, &(0x7f0000000280)=0x8) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x7, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$int_out(r1, 0x5460, &(0x7f0000000100)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, &(0x7f00000001c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x100000000, &(0x7f0000000180)=0x4) 00:16:44 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x210101) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x9, &(0x7f0000000100), 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000013c0)=""/8, 0x8}, 0x0) 00:16:44 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80, 0x0) r2 = add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)="cf500884d9359b1ad98f924309c10dce508c553eed9cc97725f94e69b8ca1c1b07dada004d615743c85d7c63cdcd7422c61e5c99f1f5df51902595e8ccb3151776792fc06ff4ccffc75b1ffd1d173619d9deec630f114eab2ed272fbfb29b74d7c34337335032ed25451dad76d6d5c63ca18ae3d7edcfea0ce7804692d9427ab382c824d26f8bc18142721fe59160ea5452b0a37e48495181d4efd5018f300b5b9d01d5af40a71a27fbb37559b96090c5c5d3b97bcdac41003c1412917283d337036063515fd6d573f1587", 0xcb, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000000c0)) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x48) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) sendmsg$rds(r0, &(0x7f0000006fc8)={&(0x7f000001dff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000003fb8)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000012f46)=""/186, 0x16a7}, &(0x7f000001a000)=[{&(0x7f0000001f34)=""/204, 0xcc}, {&(0x7f000000e000)=""/211, 0xd3}, {&(0x7f0000013f5d)=""/163, 0xa3}, {&(0x7f0000019ff1)=""/15, 0xf}, {&(0x7f0000006fa1)=""/95, 0x5f}, {&(0x7f000001a000)=""/56, 0x38}, {&(0x7f000001bff7)=""/9, 0x3a4}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000012fe5)=""/27, 0x1b}], 0x9}}], 0x32f}, 0x0) 00:16:44 executing program 6: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@session={'session', 0x3d, [0x37, 0x31, 0x38]}, 0x2c}]}) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x60002) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000001c0)=""/170) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x80400) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x1, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)={0x9, 0x10, [0x3, 0x3ff, 0x7, 0x5]}) 00:16:44 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') fgetxattr(r1, &(0x7f0000000000)=@random={'osx.', 'net/ip_vs\x00'}, &(0x7f0000000040), 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x4000000, 0x80000006) 00:16:44 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x80, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000400)=""/207) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r1) r4 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)="b3", 0x1, r1) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5) keyctl$update(0x2, r4, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) keyctl$search(0xa, r4, &(0x7f0000000140)='logon\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f00000001c0)={&(0x7f0000a3dffa)={'sha224-generic\x00'}}) [ 238.573668] ==================================================================