ant=230, limit=127 [ 270.345359] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 270.346891] UBIFS error (pid: 12475): cannot open "ubi!szd?K$r)k7:]]\ֿ*骴]'(V}yi24b", error -19 [ 270.353846] attempt to access beyond end of device 04:04:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffff}}]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000240)="2a7928a4323a2fe0f619b154dc840b5b40ece29d7d669739941867ed1a1298b2e189ba3eabc0effbd46d3acd27377188831b38bd84616a84bbda63b046563cc402adfd4b65eff420b9703de39ca2cb2cf0d96d807c10a5f4743d0154b9490d174303e8f129807b2e7dfc722d3c5a7930c13eca827891c7eae6216170592e3082544ed95e3c8646eb42de925d7a70680d3a38c302269b8474f26f734fd20b0d17d9def659cf8a4445ff57a5d6cf130143", 0xb0}) futex(&(0x7f0000000040)=0x1, 0x8d, 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0), 0x1) 04:04:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 270.412333] loop0: rw=2049, want=230, limit=127 [ 270.428397] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:04:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000001440), 0xfffffc41) ftruncate(r3, 0x5cf4) 04:04:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883752, 0x0) [ 270.508370] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.529077] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 270.562029] EXT4-fs (loop1): Invalid want_extra_isize 65535 04:04:36 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0xa0040, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, r2, 0x800) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x40100) uselib(&(0x7f0000000200)='./file0\x00') [ 270.652480] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 270.660814] EXT4-fs (loop1): Invalid want_extra_isize 65535 [ 270.675899] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 270.691293] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:04:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) inotify_init1(0x0) r1 = accept(r0, 0x0, &(0x7f0000001400)) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_generic(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c400000370021042dbd7000fedbdf25190000000816c6000a010101e5429b"], 0x1c}, 0x1, 0x0, 0x0, 0x4008054}, 0x4000081) 04:04:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x2) 04:04:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 270.822723] attempt to access beyond end of device [ 270.837403] loop0: rw=2049, want=230, limit=127 04:04:36 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b04, &(0x7f0000000240)='wlan1\x00\x1b\x1a\xec\xb5@\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\b\xde\xbbg\xc18\x84,:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaa\x84\x1a\xa0\xb1\x9c,\xe8\xff^9P\xee\x8aG\xdd\x00\x0e\xd9\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xcfW\xdc\xcf\xe9\x8d\xe8\xcf\x9e2I[\x00\xf7\xb0KX\xa2Q\x12\x06/\xbe\x98x\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\x8a\xe3\x9c\x96\xf5\xf8\xb5\x19\twp\xfa\xa9\xd8\xbfSa\xb9V\xb3\xb1\x05\xa05\xdc\x12\x86\xb9\xf93\xac\x03\x1fXf\xfd\xde0\x83\x7f\x80\xddL[t% \x00\x00\x00\x00\x00\x00\x00\xf7\xb9X\r\xea\v\x83<\xa1d\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00(\xb7\x82j\xc2pDae\x1e\xbb\xd2\xba\x80\x972G\xd6\xbc\xf4\x99\xd0\xa5\xe0\xed\xb4[\x1e}?\x8bH\x06\x00\x00\x00\x00\x00\x00\x00\x00\xb8\x1a\x82\">#>\xb3\x0e\xb02Oeg\xd8\xff\xff\x85\xd1i\xfc|;\x05\xc6\f\x8bi\xb1\x91\xa5\xb5\xc2Saa\x9d\xd4}z\x02\xc5\x13\x8e\xdd\x93\xb5\xd1\x97\x8c\xce\xf6\xdeE\x91\x9d\x88 \x8e\v\xeb~\x98\xc2:L\xaf') r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r3, 0xe32c) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000140)={0x80fd}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x40}}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x7, 0x2bb0, 0x2, 0x2, 0x6, [{0x1000000, 0x356, 0x20, [], 0xb}, {0x9, 0x4, 0x6, [], 0x1c00}, {0xff, 0x3ff, 0x9, [], 0x1000}, {0x7fffffff, 0x8000, 0x100, [], 0x1085}, {0x5, 0x454a, 0xd1d4, [], 0x80}, {0xaa, 0x1c2, 0x3f, [], 0x200}]}) 04:04:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000001440), 0xfffffc41) ftruncate(r3, 0x5cf4) [ 270.947043] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 270.963546] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 270.988537] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:04:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 271.064126] kauditd_printk_skb: 2 callbacks suppressed [ 271.064140] audit: type=1804 audit(1603166676.423:26): pid=12545 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir055569288/syzkaller.PmQ1d6/292/bus" dev="sda1" ino=16251 res=1 04:04:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x3) 04:04:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:36 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0xffffffff, 0x0, 0x3, {0x8, @sliced={0x2, [0x0, 0x3, 0x3ff, 0x8, 0x5, 0xfff, 0x46, 0x8, 0x4, 0x4, 0x9, 0x3b79, 0x7, 0x5, 0x1, 0xfffd, 0x7822, 0x7f, 0x2, 0x0, 0xd6, 0x9a, 0x8001, 0x100, 0x2, 0x70, 0x101, 0x200, 0x1, 0x7ff, 0xc, 0x0, 0x5, 0xfffd, 0x4, 0x9, 0x1, 0x34, 0x8, 0xa5fc, 0x0, 0x2, 0x2, 0x0, 0x8, 0x6, 0x744, 0x2], 0x2}}, 0x1d96}) syz_emit_ethernet(0x12a, &(0x7f00000001c0)={@empty, @multicast, @void, {@ipv4={0x4305, @udp={{0x20, 0x4, 0x3, 0x3, 0x11c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@remote}, {@empty}, {@dev}, {@remote}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x0, [@local, @multicast1, @loopback]}, @generic={0x0, 0xf, "b3d4ace09fdd8d53710fb80c51"}, @lsrr={0x83, 0x23, 0x0, [@broadcast, @broadcast, @rand_addr, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "e390deb2acab4ed980efa7a0d9487c19e101513a53abf925bab18f09e2d4eebf", "5371c628a083ae1872d1de80e21fe9168884e06f111455aabb80e7e4027a1b1514baf032962e3d3d6b5f1ed205455549", "684db4e409e481230c7b6f366c5ce378b0dc342b5490c6f26bd7e098", {"efd935ab579180924588c00914fb5773", "60d57addb9b35ab1ab13c5c647730147"}}}}}}}, 0x0) [ 271.294678] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 271.300149] attempt to access beyond end of device [ 271.325667] loop0: rw=2049, want=230, limit=127 04:04:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x1) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000240)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0xfeffffff00000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) [ 271.343937] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 271.358274] EXT4-fs (loop3): unsupported descriptor size 0 04:04:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4) 04:04:36 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21e, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x8, 0x4) 04:04:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000001440), 0xfffffc41) ftruncate(r3, 0x5cf4) 04:04:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x5) [ 271.599950] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 271.638698] EXT4-fs (loop3): unsupported descriptor size 0 04:04:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6) 04:04:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 271.738989] attempt to access beyond end of device 04:04:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 271.760177] loop0: rw=2049, want=230, limit=127 04:04:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 271.833271] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 271.906284] EXT4-fs (loop3): unsupported descriptor size 0 [ 272.008818] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 272.038514] attempt to access beyond end of device [ 272.059943] loop0: rw=2049, want=230, limit=127 04:04:37 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x22002, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$fscrypt_provisioning(&(0x7f0000001780)='fscrypt-provisioning\x00', &(0x7f00000017c0)={'syz', 0x3}, &(0x7f0000001800)={0x3, 0x0, 'k'}, 0x9, 0xfffffffffffffff8) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x8400fffffffa) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xcbd, 0x4, &(0x7f0000001500)=[{&(0x7f0000000240)="edcaa46e4182902d19ba490c1e62368f009a323060578a81b7942513111a3455f13648d366ead6f01ecdc60ed433e030d3cce6f177b0eb984f44dc81aa25f635af4ef3c947b117c968cc56d7dce334961b104d8b1c997cbb6500b5239e", 0x5d, 0x101}, {&(0x7f0000000400)="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", 0x1000, 0x6}, {&(0x7f0000000300)="111e93728f49cc57e37f4abd14a6f85320c1c9b27b5dc24e10060f19110fac0f10d4177554cfdb1082fd14277d1eef24abdcb75a925c7722c77c3d9446d081b11fbac11233ca08f12c0e7128294db9ab89f4548c41190a56c1015ec8152b482b371f2c79257b7a835c33372978658f2ba5", 0x71, 0x6}, {&(0x7f0000001400)="6c142b4915e050a9d18f05889e80c95d71172447e051e31581a213511ee1940bb4df37eab88e47f9b09d625fa8ab1a14b15bd87b27a1ca41659134e4234a18b50936d28555bb90ef1290a8e551a903a4d6e14d9eb4b7e452356d929c572ae73c26cccca82c441d67d09107416bd7f8a5b0d603539d09df7933bbe7ce40206672c24fb0f63a5219caff5bfe50343e4fd2803e970b71305fb066f5f541bb7a53ee1028a0389c5993eb96f35b6155972f29cbb4f16dbf41b47bdc7571a23c9864fd30da33e4544ee6f2b143079a57766adcd0ec60c5a417233c4e1e287d632caf1b85e90f", 0xe3, 0x10001}], 0x81, &(0x7f0000001580)={[{@auto_da_alloc='auto_da_alloc'}, {@prjquota='prjquota'}, {@journal_async_commit='journal_async_commit'}, {@noload='noload'}, {@prjquota='prjquota'}, {@bsddf='bsddf'}, {@debug='debug'}], [{@pcr={'pcr', 0x3d, 0x37}}, {@dont_hash='dont_hash'}, {@smackfshat={'smackfshat', 0x3d, 'devices.list\x00'}}, {@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ion\x00'}}, {@uid_gt={'uid>', 0xee00}}, {@subj_user={'subj_user', 0x3d, '&[@(#^(/'}}, {@dont_measure='dont_measure'}, {@fsname={'fsname'}}]}) readlinkat(r5, &(0x7f0000000380)='\x00', &(0x7f00000016c0)=""/171, 0xab) 04:04:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x7) 04:04:37 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000300)='rxrpc\x00', 0x0, &(0x7f0000000400)="000000001b09a35cb435a89e3a50e1f384c30e38267665a8c61c1857bb95eb1cd93cf7d35eea", 0x26, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000380)="420b564879cf498d8464d3e35541515ec59a6855dc1049da3e5a72328abee70406e2bee5ae36b6e8f0f9564dbadb9d756a73854e8645ff3218ec133f9896", 0x3e, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="246961b1078fd8a3654a8728b14f878138e5f5bc6110e51d935b9b4ad1956dbcb447fa84531a72ec195e101b3b043d5557d9d0d7374e4cce1f96366dd0d76333d4f723561953b28ecf0d73cd43cf92c43fb49cf6a09fcee16dbe1cb4f1c763be781634d5fdb68eb9ed88bdb069f4cc605df23540c5f92a672a8b6c58de1bdfc5f31580d8837ea141d2bdae5a7563107c1427a46f520bbce994d4aa1e", 0x9c}], 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x3, @empty}, 0x1c) r3 = accept4(r2, 0x0, &(0x7f00000002c0), 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x400000001ffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000440)={{0x0, 0x3, 0xee, 0x0, 0x7}, 0x4, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x7e, 0x11, 0x3}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 04:04:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440), 0xfffffc41) [ 272.419128] EXT4-fs (loop3): unsupported descriptor size 0 [ 272.427013] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 272.501366] audit: type=1400 audit(1603166677.863:27): avc: denied { create } for pid=12631 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 04:04:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440), 0xfffffc41) 04:04:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x8) [ 272.612632] audit: type=1804 audit(1603166677.973:28): pid=12652 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir055569288/syzkaller.PmQ1d6/295/file1/bus" dev="loop2" ino=10 res=1 [ 272.732332] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 272.792452] EXT4-fs (loop3): unsupported descriptor size 0 04:04:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 273.007049] audit: type=1400 audit(1603166678.003:29): avc: denied { name_bind } for pid=12631 comm="syz-executor.1" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 04:04:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xe) [ 273.071027] audit: type=1400 audit(1603166678.023:30): avc: denied { node_bind } for pid=12631 comm="syz-executor.1" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 273.093404] audit: type=1400 audit(1603166678.033:31): avc: denied { name_connect } for pid=12631 comm="syz-executor.1" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 273.271647] audit: type=1804 audit(1603166678.623:32): pid=12657 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir055569288/syzkaller.PmQ1d6/295/file1/bus" dev="loop2" ino=10 res=1 [ 273.314008] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:38 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x22002, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$fscrypt_provisioning(&(0x7f0000001780)='fscrypt-provisioning\x00', &(0x7f00000017c0)={'syz', 0x3}, &(0x7f0000001800)={0x3, 0x0, 'k'}, 0x9, 0xfffffffffffffff8) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x8400fffffffa) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xcbd, 0x4, &(0x7f0000001500)=[{&(0x7f0000000240)="edcaa46e4182902d19ba490c1e62368f009a323060578a81b7942513111a3455f13648d366ead6f01ecdc60ed433e030d3cce6f177b0eb984f44dc81aa25f635af4ef3c947b117c968cc56d7dce334961b104d8b1c997cbb6500b5239e", 0x5d, 0x101}, {&(0x7f0000000400)="a0867e298749d76b15f3d43493ed7815bc80d2860c0efa376073d0de7b7524c72be8d8e033fc8611efaffe79324ad0544f0d7f27b7ef9c79c2edc962705fc148191bff2430dfd966f2c33e45b214ef6795c8fcdea369cce3bd19b4a0b1d92324c09e637f7f794500b1570eb0cfd271e9704b07c71b2a5da02593a721b44ce3d5d7ead728fcba222f685b1e9cf43192d94461dac229bce410a05712633e0ffee22572a5080e5ff21677d4935bb76f7c550b7583aa335947341b02c531c646a6736418a869561e0d96f0949b6b17454cb3c7f23dd9504c3c56eedb318c169fb2699ade01f4b902a4f8252c1c6c24b65c70959dea0cbae4bc99b0025f67d8fc198bffa2d73aaeaeb5090954c102d94a086d13a0cf82e1bb6bcc65fba9937b39a88ca78a39bdcc766d1cde4679373b6fa95e6716dbaa6cf56e776591d9fa8f8083f151b908e90d199b2192ef2b3991f38a241a9cc98a11d07a5d2e2b1856701db87119a291175925669900fadd1c02ceb716f3649ad10d34fd6b498c8cbe25db72c320c40c9d4aaa4e22758ead82f245ffbf28bf7c424b9fa4b671b9cf110decbc853fcbb99e056cde74bce24c6bb43c69c4bc6cf82f30579ad94587b7c8607ed98bef5aad8b9406ab5ee5d791e6e4de2b9effafb3097a939a26a547fe89746777fd4786f66c08ea974ab5777475536a971c20f239b314c23a345513f7c0db6538ed9dae583419d946f228b09d91983954a30cb637fc4dbfc9ea5efa8a09d54035de5d316e9691b5ee4cfc38c78f85f3e99324f7cf153e779b64528d946d008320c027d0e3318149d9a30e80a22786ab1a00acb6babd0dacc9c912c1c3ef500f892aab99c551d3e83c9051035fac44e83275f2ec299d25535cc60cd0d858912696e2ffcc45cdcd9446ed1a4805bf08f52fc1d09febc48ce72311103ff11de1b48d19da27e3ac2124059679affe8226fc54514e3baa5c07d14f9b8d7083fe44d861296220ec78a976574b305438869bd26749d6f721c8b5f1a6d1f18df94533c8b30289d6d7afc39dc20382c4e4f3bb0740bc5e22482028edfa38a2c7dbb385524dbc8fc5fb481206d8b108e96eae3058ba446221598c8d600d62f5eee163d83eacb8bcb5208d1a5b56b97ffa65a24e22f3fcd19b0abfe3cd0cdd272ec5de2f375c847226ec8917e36fc1906efab8235df4b55e11dd9e163de289a66de87a249f361aa283f1686bc3b5d21ed3c39d3a587d9ccb7a1ba60c3fb4a18bfb97dbe5ed74daff2ba9f614936f3b0c860814c73b85fef9da76b1c23c0bac7ff44295408be7807bd989f9dd2708b6013b7982116cd9a8b5a3b1f47d9c8234c192066ea0df6e6df4df5303816e6a50956a8d85cdfcef548efdf1faada7e1a1d7bd125e620d95880de2946c7304141c609f0feb8b3387dbc10519224f675334bc52d6f1df778d7f8718c04d8c0661b71aee328ff0ee160a2988f52c9face01e39bfb2cf2c09e3aa9f0faced9239bef33a86d4c64103ddab6870be9a21b581fc007d84da09c6203b82c70813a97a18c1549ca41948c6547d77abd9004b5217c5d4882fd51e5c4b9263b745f6775d300b3a43ff80b3784343d1da7f3f2834ad14cda8dc99dd6f37dbce3911ad5cfb8bb1da528b1ccecf8199d1cf41e86db0f7c2c8a1f30997e7fcaccedd0bf8fa9bdf192c211bc8405b8b9336359697a5a7f11b77c52bc9929b9784417af485ddba2cd337213e4a57d354615a1d7d7857de3477206ec21fac63deee21d3cabe8ef394fbe9dc7c1b5491cf6628f9a720539615245b51bdf09f184c6102a5b23a4754fecde3bad4fcee34c8dbbb3275c81fdba2ef279eec77685117792a16009ea2f7f7117271464da19452b9a2c0d862df380ab08133cc078ef40666813f208238e4b803c0e5713fe249827e5dcbe83101a3b3ba882f4f296c9683e34373f3ec07240320ae43375f2ed9a1adb3bc43d35685c026f91ca6d7bf5f31fff8f1689a9a7eee2c0f334a2bbcd16c0876d8f8f47a68d8b2dfa031ba542b54f3bfbd5859cbdc718830c35916668c9d5abeab7b2236dd248587159c3f6877752e17289d015a5b790fee3b6265220f3862ff5c2101c5925bb7cecefd2437ccad548d0313910cc71a41fe2982895a3161d8c897858dfa9a9f13ef2b72bca63b124a3fb1f384485c4c1660d5d3cf5d78c00105b49a2fd7c988c05fe92975db5ca2bcbb0e35f736892b3859b523b97357a6a5761b10ae468398cfce85d0a85a361c609c362c4b67f3546b4f901e583a16d0c86c9a626fea8b18745697d651b76fc90a961d197438635acea9bbbf3f1783a0ad6b389f9399e8423cdf60126468118440bd60aad50d1579faadcde2e8db9d0b9970b68c8a4f1c7aefaa930d53f2dc0cefd07feca26e93292c4f83ba7a81a8a8cb9f99bea3abe3a2461060997873b11e001103a1f38067e85fc986954fb7abba46099667c536086f46b8cbd440d459ea069c100a7dfc5043360a5aebcbf3b8657f23ceec81420389e3e2f132197157dd30b5d4908029d9b4cc350bf4b21732ce497fd549982b3977c4db8b9f666af4fd027cfa3a77e9039dc0e29e34814830bdfcda38878cd56b014ca61bd4cf1d5245c77941d99fa2da7f82ab4ba0243a2a9c455a445680e27c18b0bc0d81be708777d36d1fd5a9c4e859fc2f2b93c4857f4b843c0ce6384fda52826c953227912efccbc36cd7428b91f9b5ae25adb3f8bbcb260095c38a0e18c5fa2d79d570dde2048cd89039c46e07203bd41cd3f09d755b69bbb8b0ed45224eb15c9fad2610058cec3f9385c6c7af03508947bfc751145fd1bd55d7f879408de27b6f5d55afe9abb3387230014325347f7a02f79011416261df950484e6d40323d63b143ff647ac243c7b28b75eb38bbaa63c0898a60eb29bdc31f6c65d4e5f3be1d14a5c2a8d61e5711dd7a3f3a54966ff3ef0c175a356fc5e9dfbff0a45bb6b8fdfc26c4df5844affedca9353efacff7528a52f017e2a0e5ffeced43a42ee6fae1e08475f4d74dcf64dc89fdc2f93788590dcde3731887d87074eac734ca9b9e658a06f21273c069372031cc27b12ab388f4fa57f37d373e6d41a1ec52460c83a7ece08ea151b685c2de12a7e6283158a4cd11087adaa71273bff2350877c76d2aa6d8a5f6680f287d42ce850a0f0f76d1bdfc4a9b0b3f825de261fae0aebe3b09cab27d9d5541c32682ae40df23a3aaf5d5839f3bb821b6ac4fc801ebe14df128756e96d1d3033e1cb3773180f0152a791b596e89f134bbefb1ed49b00fa9b1a3fb47c4ac40fc39f7e25762e45ad28c177210208e5d36b7cd9e20eab63ec0131d47fc51b60a9f30c691bf7504d7cc5c67aabb624b274a719eb6f0d97dcd38ff1a7421786deafe0e2ef7ef7adee0e237aa2d0207a2e96f4b140e6f4d954f36f0325f646d234330478c27f38b0100d8b571adae89fde23173f1bfed987c3c7b8c70c5f6cf7c5fe4cb5c074bdf844a60c14daa20932875a76acb3aec3a6961340220c0b4297ff801890fde4c30caa84aba1666ff20aaaebbcfe6d0c7cc3a2235c8d9f4370f2a67c7764fd20b2b0a8bf9a095e50a4e2a4fb55b2f5f238fcd3ec68b485ce351bf7485baca3896b873ef9e8fbe678f45fc886ebec91b87d9566c15df254b7c69c748b52de43c1e6839e5083e3d9060690a996cd1977769eb7bb2728981fcdd1ebb4980cddaddb2633e0e26604296491067ec2888810ee01cc53715301dabaa1fed1d7b12242a3cdc0229779ccf940e826387a8b12d8b6db460d29f0f5c4fffbaddc14081189e3da9a22baf2aef4e66ce9293092a273c1897e6b7c9c6b1a8627de232923050aaf52c934c33de16c3c60eb22d35d4b8494aeffe7b3542a1c210256a76351c375528af33a0f99d0feea4374207c081fdea95810b5636a0441d5901947b17e2f0189cff7d54d5bebdc44c2a7c61a624b7f1be6d61171f918d7673ab9fe0d5883931f719b80e877b5869555e2c6686f96acc6daf304b4cc936870d75adfba0dc0197a091e855e2e78d11861774f6db031056370f06f8101208e01dfdbe5c5c836435b8391f2f6d785f058c08c6ed002d1d92df9e548c0f5ee5a12d1ae37b2a353c0840611cda618e4b671a241111c95ac41163ecdbabeb1b880758aac36fc1a09374fe421f335ea6816c708e0814790e1f4978f3d8624ebc62db902cc931d3dfbbe6b11d7fa30421716d0abda52cb430f7417462f9cc4b4e52484c33f9a03b54dc97c429c0e0b2ef7fb3c9c30ed9b1591a96a2cdee6aa13bec745bd77a825f4ca9f1759681d41bb85de2a756f3d5ef09a2eda1192bf8e15684b493c87a513cf23bf3c142b7d1e85d3bbe09ac11474ba0b3157c607aec00a83c1c92d5462def86c7b70d28477af5632035b7b82469bb87bcc953dab41e1ebcebb410b07f3c6d1ad52b81418af098b607033e384d73b78be297c58577d5aaa5d542574b7d4c97ca55a45b537de30bcdc664e719a35239e340c3d196dd32a986d9b7c0e17cd64fbd96e2899dd1d3ea18abf860633430315917fd606a0491bcd0a35e7b3bc798d253ebc1bcb7020ed29142bbec0818f1ba54ee9c03765494d311dd1b8ce7cb204ed85b241d868c61590ae250caafbb925168e03a5c24fc6ff00f3f7f6ea7844f5ad9e7584044f99d95807a5332fe7a83ac8688b2995c5e4baacd50c060899996063fb4980a44555fc7082a4ab345f5a035e53b76d3cfbdfd248a1f5bd3741246538305ebc4a01174890096e043d4dd16bfed716d38087e8e2b498079475c234c5cbb9049b8d13f99dcdc8137ee8d222551251c9388f2589a92262c7aaece2922fbe0cde9a17d83ff41031f3a9083a20435f296c3538b9ecaac4244d3ea9515443e3b7af155b9ecb02a36a86fcf45e847e96013dde19095f1f5e308b9f62ecf90b3959ed0367f89621a0be62f673218d7c5efe6bb600133016db8327fd6df833326f65d2f0d2050c6131e88f74f9df9948b12f9bf10e922678ce1124afb9e0f8d32e4edde8c6b585b06717baffd76bbfd5d7a13605c18b7384a086c1a800c204e63686d39d0190f527d1c2a5b8e05b64dc70d7128fb0400a0ae1940667eace63105128cffa0a4a070dca44de92ed24dd39f7e29a8a9b31ab2a06584e2c7be573c5359def703b9ec8a46792c27d03b220255ff994152e4ca10e05181150068ee5f178d18edd640c440f7ddd43616b01574c3bf063a5a1c6984a78d1fa20fe6b1818b0db993ebaaf6943ddc780c8c1efec0cbeb04decc19d7fb7d05fab9204e724562ce8b951f7c913ea7fcf636f23392771ca62d5455ae553417ef4e3d7ad48eb0a21b94421eedf44ecf242d29997a21bd1677ca3eb5da530a5cfcd659d8bc74495221f5835cf2cd1c7028d972ae3fce40e64ad24e48810d053bb9dfe6ebc50f8e41394bc0175e2789c99cc4482298fdeaa341f460b024add2744a37b7435925f52622219eaf776559ab807a0b163a4f4799e54cd914ad0490800c13bc80a32198ad86c669ed9340a0332ac8b7e1424203b2ec0c78435205975797498ca169d138420a879385b84491191aac346af61924444303fcad943df8db0739a7aa390668f7c99acaea6b80f2953e7d5386ecfd616f0c7ae19c6a3911ddbe55bf58af5b4b7c6c34cda00bb3b4c7fe3dd9464263c37a7f52148778172354d46795052b669e67da8fced1e9ad96372719eec12ce8c4b338eee7cdbda8a08113f807ceaece6ff891692ff8928a8d30f55ca59fb1045da965ffe713e2e4b30f88e2cfa16dd081e68", 0x1000, 0x6}, {&(0x7f0000000300)="111e93728f49cc57e37f4abd14a6f85320c1c9b27b5dc24e10060f19110fac0f10d4177554cfdb1082fd14277d1eef24abdcb75a925c7722c77c3d9446d081b11fbac11233ca08f12c0e7128294db9ab89f4548c41190a56c1015ec8152b482b371f2c79257b7a835c33372978658f2ba5", 0x71, 0x6}, {&(0x7f0000001400)="6c142b4915e050a9d18f05889e80c95d71172447e051e31581a213511ee1940bb4df37eab88e47f9b09d625fa8ab1a14b15bd87b27a1ca41659134e4234a18b50936d28555bb90ef1290a8e551a903a4d6e14d9eb4b7e452356d929c572ae73c26cccca82c441d67d09107416bd7f8a5b0d603539d09df7933bbe7ce40206672c24fb0f63a5219caff5bfe50343e4fd2803e970b71305fb066f5f541bb7a53ee1028a0389c5993eb96f35b6155972f29cbb4f16dbf41b47bdc7571a23c9864fd30da33e4544ee6f2b143079a57766adcd0ec60c5a417233c4e1e287d632caf1b85e90f", 0xe3, 0x10001}], 0x81, &(0x7f0000001580)={[{@auto_da_alloc='auto_da_alloc'}, {@prjquota='prjquota'}, {@journal_async_commit='journal_async_commit'}, {@noload='noload'}, {@prjquota='prjquota'}, {@bsddf='bsddf'}, {@debug='debug'}], [{@pcr={'pcr', 0x3d, 0x37}}, {@dont_hash='dont_hash'}, {@smackfshat={'smackfshat', 0x3d, 'devices.list\x00'}}, {@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ion\x00'}}, {@uid_gt={'uid>', 0xee00}}, {@subj_user={'subj_user', 0x3d, '&[@(#^(/'}}, {@dont_measure='dont_measure'}, {@fsname={'fsname'}}]}) readlinkat(r5, &(0x7f0000000380)='\x00', &(0x7f00000016c0)=""/171, 0xab) 04:04:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:38 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000300)='rxrpc\x00', 0x0, &(0x7f0000000400)="000000001b09a35cb435a89e3a50e1f384c30e38267665a8c61c1857bb95eb1cd93cf7d35eea", 0x26, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000380)="420b564879cf498d8464d3e35541515ec59a6855dc1049da3e5a72328abee70406e2bee5ae36b6e8f0f9564dbadb9d756a73854e8645ff3218ec133f9896", 0x3e, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="246961b1078fd8a3654a8728b14f878138e5f5bc6110e51d935b9b4ad1956dbcb447fa84531a72ec195e101b3b043d5557d9d0d7374e4cce1f96366dd0d76333d4f723561953b28ecf0d73cd43cf92c43fb49cf6a09fcee16dbe1cb4f1c763be781634d5fdb68eb9ed88bdb069f4cc605df23540c5f92a672a8b6c58de1bdfc5f31580d8837ea141d2bdae5a7563107c1427a46f520bbce994d4aa1e", 0x9c}], 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x3, @empty}, 0x1c) r3 = accept4(r2, 0x0, &(0x7f00000002c0), 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x400000001ffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000440)={{0x0, 0x3, 0xee, 0x0, 0x7}, 0x4, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x7e, 0x11, 0x3}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 04:04:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440), 0xfffffc41) 04:04:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf) 04:04:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 273.374197] audit: type=1804 audit(1603166678.673:33): pid=12657 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir055569288/syzkaller.PmQ1d6/295/file1/bus" dev="loop2" ino=10 res=1 04:04:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) [ 273.525891] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 273.548373] EXT4-fs (loop3): unsupported descriptor size 0 04:04:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x48) 04:04:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 273.835259] audit: type=1804 audit(1603166679.193:34): pid=12717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir055569288/syzkaller.PmQ1d6/296/file1/bus" dev="loop2" ino=14 res=1 04:04:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4c) [ 273.908025] EXT4-fs (loop3): unsupported descriptor size 0 [ 274.002804] attempt to access beyond end of device 04:04:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 274.081012] loop0: rw=2049, want=230, limit=127 04:04:39 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000300)='rxrpc\x00', 0x0, &(0x7f0000000400)="000000001b09a35cb435a89e3a50e1f384c30e38267665a8c61c1857bb95eb1cd93cf7d35eea", 0x26, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000380)="420b564879cf498d8464d3e35541515ec59a6855dc1049da3e5a72328abee70406e2bee5ae36b6e8f0f9564dbadb9d756a73854e8645ff3218ec133f9896", 0x3e, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="246961b1078fd8a3654a8728b14f878138e5f5bc6110e51d935b9b4ad1956dbcb447fa84531a72ec195e101b3b043d5557d9d0d7374e4cce1f96366dd0d76333d4f723561953b28ecf0d73cd43cf92c43fb49cf6a09fcee16dbe1cb4f1c763be781634d5fdb68eb9ed88bdb069f4cc605df23540c5f92a672a8b6c58de1bdfc5f31580d8837ea141d2bdae5a7563107c1427a46f520bbce994d4aa1e", 0x9c}], 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x3, @empty}, 0x1c) r3 = accept4(r2, 0x0, &(0x7f00000002c0), 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x400000001ffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000440)={{0x0, 0x3, 0xee, 0x0, 0x7}, 0x4, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x7e, 0x11, 0x3}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 04:04:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x60) 04:04:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:40 executing program 1: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x22002, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$fscrypt_provisioning(&(0x7f0000001780)='fscrypt-provisioning\x00', &(0x7f00000017c0)={'syz', 0x3}, &(0x7f0000001800)={0x3, 0x0, 'k'}, 0x9, 0xfffffffffffffff8) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x8400fffffffa) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xcbd, 0x4, &(0x7f0000001500)=[{&(0x7f0000000240)="edcaa46e4182902d19ba490c1e62368f009a323060578a81b7942513111a3455f13648d366ead6f01ecdc60ed433e030d3cce6f177b0eb984f44dc81aa25f635af4ef3c947b117c968cc56d7dce334961b104d8b1c997cbb6500b5239e", 0x5d, 0x101}, {&(0x7f0000000400)="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", 0x1000, 0x6}, {&(0x7f0000000300)="111e93728f49cc57e37f4abd14a6f85320c1c9b27b5dc24e10060f19110fac0f10d4177554cfdb1082fd14277d1eef24abdcb75a925c7722c77c3d9446d081b11fbac11233ca08f12c0e7128294db9ab89f4548c41190a56c1015ec8152b482b371f2c79257b7a835c33372978658f2ba5", 0x71, 0x6}, {&(0x7f0000001400)="6c142b4915e050a9d18f05889e80c95d71172447e051e31581a213511ee1940bb4df37eab88e47f9b09d625fa8ab1a14b15bd87b27a1ca41659134e4234a18b50936d28555bb90ef1290a8e551a903a4d6e14d9eb4b7e452356d929c572ae73c26cccca82c441d67d09107416bd7f8a5b0d603539d09df7933bbe7ce40206672c24fb0f63a5219caff5bfe50343e4fd2803e970b71305fb066f5f541bb7a53ee1028a0389c5993eb96f35b6155972f29cbb4f16dbf41b47bdc7571a23c9864fd30da33e4544ee6f2b143079a57766adcd0ec60c5a417233c4e1e287d632caf1b85e90f", 0xe3, 0x10001}], 0x81, &(0x7f0000001580)={[{@auto_da_alloc='auto_da_alloc'}, {@prjquota='prjquota'}, {@journal_async_commit='journal_async_commit'}, {@noload='noload'}, {@prjquota='prjquota'}, {@bsddf='bsddf'}, {@debug='debug'}], [{@pcr={'pcr', 0x3d, 0x37}}, {@dont_hash='dont_hash'}, {@smackfshat={'smackfshat', 0x3d, 'devices.list\x00'}}, {@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ion\x00'}}, {@uid_gt={'uid>', 0xee00}}, {@subj_user={'subj_user', 0x3d, '&[@(#^(/'}}, {@dont_measure='dont_measure'}, {@fsname={'fsname'}}]}) readlinkat(r5, &(0x7f0000000380)='\x00', &(0x7f00000016c0)=""/171, 0xab) 04:04:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x68) [ 274.765074] attempt to access beyond end of device [ 274.779243] loop0: rw=2049, want=230, limit=127 [ 274.787688] EXT4-fs (loop3): unsupported descriptor size 0 04:04:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 274.882090] audit: type=1804 audit(1603166680.243:35): pid=12766 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir396422499/syzkaller.THk2RQ/288/file1/bus" dev="loop1" ino=18 res=1 04:04:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6c) [ 275.040186] EXT4-fs (loop3): unsupported descriptor size 0 04:04:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x74) 04:04:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:40 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x640801, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000040)={0x54a, 0x0, "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"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000160a01170000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800024000000000080001400000000018000380140001"], 0xd0}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) dup(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340)='mptcp_pm\x00') open(&(0x7f0000000500)='./bus\x00', 0x2040, 0x11) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd8, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@setlink={0x28, 0x13, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x60, 0x10880}, [@IFLA_GROUP={0x8, 0x1b, 0xdfb}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x8094) 04:04:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x7a) [ 275.406529] EXT4-fs (loop3): unsupported descriptor size 0 04:04:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) creat(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 04:04:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) dup(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 275.725526] EXT4-fs (loop3): unsupported descriptor size 0 [ 275.755101] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x3000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 04:04:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf0) 04:04:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) dup(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002980)=@newtaction={0x194, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x0, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc}}}]}, {0x128, 0x1, [@m_tunnel_key={0x34, 0x4, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0xa4, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x34, 0x6, "a010d25bfb9b2968f420a7a4eef0ecf7bb846f640a2e21f35bdc1582763a26a20f2e4047b94632cf9bca1b6eabb388d2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x0, 0x0, 0x9d9}}]}, {0x7, 0x6, "1811d0"}, {0xc}, {0xc}}}]}]}, 0x194}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 276.110267] EXT4-fs (loop3): unsupported descriptor size 0 [ 276.127832] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x1ad) 04:04:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x6) dup(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 276.292734] EXT4-fs (loop3): unsupported descriptor size 0 04:04:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 276.346257] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x170, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf3b12a96c59bf3b5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000800}, 0x1000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}, 0x1, 0x74}, 0x0) 04:04:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x300) [ 276.502146] EXT4-fs (loop3): unsupported descriptor size 0 [ 276.516717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12872 comm=syz-executor.1 [ 276.572376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.708110] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.784615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.794657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12872 comm=syz-executor.1 [ 276.880377] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 04:04:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x500) 04:04:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) socket$inet6(0xa, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_mount_image$vfat(&(0x7f0000000a00)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x8000000010e00}], 0x0, &(0x7f0000000b40)={[{@fat=@codepage={'codepage', 0x3d, '855'}}]}) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x19312) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) [ 277.216123] EXT4-fs (loop3): unsupported descriptor size 0 [ 277.225636] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x3000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 04:04:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) socket$inet6(0xa, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x600) 04:04:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x7, [@volatile, @volatile, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '}'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x53}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x131041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000140)=0x3ff) ptrace$cont(0x7, r0, 0x0, 0x0) [ 277.409227] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) socket$inet6(0xa, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x700) [ 277.467394] EXT4-fs (loop3): unsupported descriptor size 0 04:04:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 277.583087] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xb98) [ 277.771609] EXT4-fs (loop3): unsupported descriptor size 0 [ 277.793022] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 277.986303] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:44 executing program 2: ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x2, @pix={0x9de2, 0xad, 0x41564e57, 0x7, 0xff, 0x93a, 0x5, 0x4, 0x1, 0x6, 0x1, 0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 04:04:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xb99) 04:04:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x5) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 278.687262] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 278.698553] EXT4-fs (loop3): unsupported descriptor size 0 [ 278.895985] IPVS: ftp: loaded support on port[0] = 21 [ 279.072271] attempt to access beyond end of device [ 279.077343] loop0: rw=2049, want=230, limit=127 [ 279.559320] IPVS: ftp: loaded support on port[0] = 21 04:04:45 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x28000, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000180)=0x7f03, 0x4) read$dsp(r0, &(0x7f0000000000)=""/60, 0x3c) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80000000) 04:04:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xe00) 04:04:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c0100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:04:45 executing program 2: ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x2, @pix={0x9de2, 0xad, 0x41564e57, 0x7, 0xff, 0x93a, 0x5, 0x4, 0x1, 0x6, 0x1, 0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 280.602526] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 280.615608] EXT4-fs (loop3): unsupported descriptor size 0 04:04:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 280.685259] attempt to access beyond end of device 04:04:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c0100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf00) [ 280.711064] loop0: rw=2049, want=230, limit=127 [ 280.740396] IPVS: ftp: loaded support on port[0] = 21 04:04:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) [ 280.765777] audit: type=1400 audit(1603166686.123:36): avc: denied { write } for pid=13056 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 04:04:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 280.903727] EXT4-fs (loop3): unsupported descriptor size 0 04:04:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf3c) [ 280.977738] attempt to access beyond end of device [ 281.007125] loop0: rw=2049, want=230, limit=127 04:04:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x5000aea5, &(0x7f0000000080)={0x0, 0x0, [0x4d0, 0x0, 0x3, 0x2, 0x6e0, 0x0, 0x7]}) r6 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) dup2(r5, r4) 04:04:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c0100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:04:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x1f00) 04:04:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:04:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x2000) [ 281.337284] attempt to access beyond end of device [ 281.343103] EXT4-fs (loop3): unsupported descriptor size 0 [ 281.372061] attempt to access beyond end of device [ 281.373070] loop2: rw=2049, want=230, limit=127 04:04:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 281.385408] loop0: rw=2049, want=230, limit=127 04:04:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:46 executing program 2: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000080)={0x9, 0xf34, {0x56, 0x8, 0x3f, {0x2, 0x769}, {0x93, 0xfd66}, @cond=[{0x4, 0x5, 0x8, 0x6, 0x6, 0xf644}, {0x8001, 0xfff, 0x7, 0x9, 0x1, 0x7d}]}, {0x56, 0x8, 0x6f, {0x2, 0x5}, {0xad, 0x40}, @ramp={0x9e, 0x6, {0x1, 0x6fc0, 0xb6, 0x2}}}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000000)={0x7, 'geneve1\x00', {0x3}, 0x8000}) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000040)="7f", 0x1}], 0x1, 0x0, 0xfcbc}, 0x0) recvmsg(r4, &(0x7f0000002040)={&(0x7f00000019c0)=@can, 0x80, &(0x7f0000001f40)=[{&(0x7f00000020c0)=""/102400, 0x19000}], 0x1}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup2(r0, r7) 04:04:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) 04:04:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 281.609135] EXT4-fs (loop3): unsupported descriptor size 0 04:04:47 executing program 1: socket$inet6(0xa, 0x1, 0x0) 04:04:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x3c0f) 04:04:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 281.769881] attempt to access beyond end of device [ 281.786302] loop0: rw=2049, want=230, limit=127 04:04:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x55c9}, 0x0, 0x400000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget$private(0x0, 0x207, 0x0) semtimedop(0x0, &(0x7f0000000240)=[{0x2}, {0x1, 0x2}, {0x0, 0x101}, {0x0, 0xf001}, {0x1}], 0x5, &(0x7f00000003c0)={0x77359400}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x2, 0x9}) r0 = getpid() getrandom(&(0x7f0000000140)=""/141, 0x8d, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x6004401d) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1f, 0x10800) splice(0xffffffffffffffff, &(0x7f0000000000)=0x6, r5, &(0x7f0000000080)=0x7, 0x800, 0xa) rt_tgsigqueueinfo(r0, 0x0, 0x0, &(0x7f00000000c0)) 04:04:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) 04:04:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x3f00) 04:04:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @generic={0x8, "6511d66daf2242c92c71d67abe46"}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, @sco={0x1f, @none}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)='wg0\x00', 0x6, 0xffffffff, 0x2}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c00010074716e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100005ff000000000008001f00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x4, 0x1) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @mcast2, 0x7}, 0x1c) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6000000, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) io_setup(0x0, &(0x7f0000000040)) [ 281.916852] EXT4-fs (loop3): unsupported descriptor size 0 04:04:47 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 282.096883] attempt to access beyond end of device [ 282.110588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.120810] loop0: rw=2049, want=230, limit=127 [ 282.271460] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:04:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000052716307d47c793899ec08ab361663991d90fa3e922d9b241a8dc167e03a5dc6db3a82f180cd123b5a36ed541dd5111aa62e585bd51b0d33b03eed88f104890f22f083cb7fe70a6246cd17db9efde4134da6989c69f30a89ac63831fd9abe17115da32681d6b46e94050dac3eed5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r2, 0xfffffff9}, 0x8) ptrace(0x10, r0) ptrace$peeksig(0x21, r0, 0x0, 0x0) 04:04:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4000) 04:04:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:47 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) 04:04:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) 04:04:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4800) [ 282.698028] attempt to access beyond end of device [ 282.710904] EXT4-fs (loop3): unsupported descriptor size 0 [ 282.711035] attempt to access beyond end of device [ 282.737878] loop0: rw=2049, want=230, limit=127 04:04:48 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 282.770157] loop1: rw=2049, want=230, limit=127 04:04:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:04:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0xfe48, 0x0, 0x1, 0x8, 0xc00, 0x8000, 0x0, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="890f1e0a420b197e0100020002001cff"], &(0x7f00000000c0)=0xc) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000080)=0x1) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 04:04:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4c00) [ 283.026976] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 283.136831] attempt to access beyond end of device [ 283.148770] loop0: rw=2049, want=230, limit=127 04:04:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000180)) r3 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000380)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1d1001cc2de850f1fffb2aed768634ef7e75effac2ac4c15e29fb3c18fafff8d198e312475fc22da2be3e05", 0x49, 0x818}, {0x0, 0x0, 0x10e00}], 0x2204008, &(0x7f00000001c0)={[], [{@subj_user={'subj_user', 0x3d, '-'}}, {@audit='audit'}, {@dont_measure='dont_measure'}, {@appraise='appraise'}, {@seclabel='seclabel'}, {@fowner_lt={'fowner<', r2}}]}) mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0) 04:04:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:48 executing program 1: setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x8}, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="66b9a70900000f32fd65673e3e670fda86ca0000000fc75c0066b9410a00000f32f30f09640f791866b9800000c00f326635002000000f30f30fa7e8baf80c66b86009978966efbafc0c66ed", 0x4c}], 0x1, 0x4c, &(0x7f0000000100)=[@cstype3={0x5, 0x5}], 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1e0, 0x9, 0x6, 0x301, 0x0, 0x0, {0x37a1821d313a1829, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_macvtap\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_ADT={0xc0, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'sit0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_macvtap\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x17}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x81}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_COMMENT={0x7, 0x1a, ',!\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffbff}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4054) semop(0x0, &(0x7f0000000400)=[{0x1, 0x3, 0x800}, {0x1, 0x7, 0x800}, {0x2, 0x0, 0x1000}, {0x3, 0x7f, 0x2000}, {0x4, 0xdf44, 0x1800}], 0x5) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x101080, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5c}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2d976ce8e9a41f64efae8df4a9b16fb3"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMK={0x14, 0xfe, "b8113aad8b4f85ece485f7bc0ad2d709"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6bf1925f78e5"}]}, 0x64}, 0x1, 0x0, 0x0, 0x8844}, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x5b], 0x1, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x914, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x2000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000880)={0x40, 0x2}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000940)={r5, 0x0, r1, 0x1, 0x80000}) setsockopt$inet_int(r3, 0x0, 0x16, &(0x7f0000000980), 0x4) r6 = openat$cgroup_ro(r3, &(0x7f00000009c0)='freezer.self_freezing\x00', 0x0, 0x0) write$dsp(r6, &(0x7f0000000a00)="3b272f5e8aa91a651e47714479d7ff61d9a1fa9654c4081c46109b35bced42", 0x1f) openat$vnet(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vhost-net\x00', 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) 04:04:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6000) 04:04:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:04:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6800) [ 283.677381] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 283.692301] FAT-fs (loop2): Unrecognized mount option "subj_user=-" or missing value [ 283.704930] attempt to access beyond end of device 04:04:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:49 executing program 1: mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)) ioctl$CHAR_RAW_REPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000500)={0x1200000, 0x4, 0x0, [{0x1, 0x7, 0x8, 0x7f, 0x0, 0x20, 0xa1}, {0x4, 0x400, 0x4a, 0x3, 0x7, 0x6, 0x4}, {0xea8c, 0x80000000, 0x8, 0x2, 0xaf, 0x1, 0x8}, {0xfffffffffffffff7, 0x0, 0x3, 0x7f, 0x8, 0x1, 0x8}]}) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="4ba446af5bd64f56ae59613282d1ff374f33da24235c8bb29b3c7cb91cdc20015fac000000d4ddc7000000042b0ff0797649bd4fc6a2716e44815a81a26ed27cfee727ea2275f93a297dbb1190543294c68fa502342370d29b52d9fd10048b359b012e6d00b51d3eaeec03fad27c000000000000000000a124813125ffa692afaf97a2bc831ef70fa114535505818c3c12a95625ae62daa04f6e1e2e92025304a0f3c0ce8abcb8655e4ac860", @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x576, 0x80019c) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000680), 0x0) 04:04:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 283.766384] loop0: rw=2049, want=230, limit=127 04:04:49 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x502, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, 0x0, 0x3c81b38815905c69, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x20, 0x1b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c6a312c7570706572646972075bd717c2611677"]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 04:04:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:04:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6c00) [ 283.938116] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f00000001000000020000000200000000800000008000002000000029c4645f29c4645f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x6}}]}) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r0, 0xe32c) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 284.077925] overlayfs: unrecognized mount option "upperdir[aw" or missing value [ 284.111909] attempt to access beyond end of device 04:04:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x7400) [ 284.155866] loop0: rw=2049, want=230, limit=127 04:04:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:04:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 284.197771] overlayfs: unrecognized mount option "upperdir[aw" or missing value [ 284.206783] overlayfs: filesystem on './bus' not supported as upperdir [ 284.219634] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380), 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @local, 0x4e23, 0x0, 'sh\x00', 0x1, 0x33, 0x40}, 0x2c) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x2, @ipv4={[], [], @empty}, 0x200}], 0x1c) listen(0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="2c747970653daa2b1a0d2c00"]) [ 284.309703] Bluetooth: hci0: command 0x0406 tx timeout [ 284.315321] Bluetooth: hci1: command 0x0406 tx timeout [ 284.341189] EXT4-fs (loop1): can't mount with commit=6, fs mounted w/o journal 04:04:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x7a00) [ 284.358880] Bluetooth: hci2: command 0x0406 tx timeout 04:04:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 284.405605] Bluetooth: hci3: command 0x0406 tx timeout [ 284.426273] attempt to access beyond end of device [ 284.427785] Bluetooth: hci5: command 0x0406 tx timeout [ 284.448072] loop0: rw=2049, want=230, limit=127 04:04:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) [ 284.469338] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 284.484216] EXT4-fs (loop1): can't mount with commit=6, fs mounted w/o journal 04:04:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x980b) 04:04:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x28}}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) [ 284.740643] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 284.764628] hfsplus: unable to find HFS+ superblock 04:04:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 284.816716] attempt to access beyond end of device 04:04:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 284.857903] loop0: rw=2049, want=230, limit=127 04:04:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="ff37", 0x2}, {&(0x7f0000001340)="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", 0x2cf}], 0x2}}], 0x1, 0x20000080) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x14000800}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="54010000", @ANYRES16=r2, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000001c0)={0x3, 0x7, 0x4}, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="60008200000506030e0000000000000000000000000900030073797a32000000000900030073797a310000000009000200fcc5198cd9d822ab73797a31000000000900020073797a30000000000500010000000000050001000700000009000200"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x400c810) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1004, 0x11, 0x0, 0x27) 04:04:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380), 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @local, 0x4e23, 0x0, 'sh\x00', 0x1, 0x33, 0x40}, 0x2c) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x2, @ipv4={[], [], @empty}, 0x200}], 0x1c) listen(0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="2c747970653daa2b1a0d2c00"]) 04:04:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x990b) 04:04:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) [ 285.000901] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xad01) [ 285.155839] attempt to access beyond end of device [ 285.187824] hfsplus: unable to find HFS+ superblock [ 285.194892] loop0: rw=2049, want=230, limit=127 04:04:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf000) 04:04:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 285.285943] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x41, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000000100)) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x618, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4044885) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0700008000000101000000084617001800660000c629dc0aef1ee2f2294d9078ac1414aa"]}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000480)) sendfile(r2, r1, 0x0, 0x1c01) dup3(r0, r1, 0x0) 04:04:50 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfff0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200ff8e002000210000005e07a27b4ef1776282a54e2403af1b83b26437a17466524523d9409da074f4dd53ec1af26fec223314f1296f21b5ca522ef1aa925748566d8147ddedd7df52509882ded2fdecd5c1c2411b30be2e3a5c6b7dd797ebbbbdb1989a0da15111695332206e62b5d7e509"], 0x2c}}, 0x0) r0 = socket(0x21, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x3, 0x4, 0x0, 0x0}) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f00000002c0)=0x3ff) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) 04:04:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x34000) 04:04:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x3ff, @local, 0x9}}, 0x0, 0x0, 0x3, 0x0, 0x32, 0xe15b}, 0x9c) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2600000003000000000000000000000000000000000000000500000000000000a76eb69a48c23f5a30b7c4835e5d5eabd800534d1f68b2c98a53fad666f4f7712f30372e5a38b4f143c2a45477875a0d0d5ccc4bac9368162e63050d94afbfdf8ff05a43d7dd193ecf7d6d13e0e4e3f45a1aa26900771bd67344825f6122de6747a5f280d3223e82aa66cec9094bd77d6df9744fcbead594"], 0x26) ftruncate(r1, 0xe32c) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 285.561147] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x3bc20) 04:04:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f465", 0x33, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x3) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup3(r1, r0, 0x0) [ 285.809742] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x400300) 04:04:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f465", 0x33, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x3) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup3(r1, r0, 0x0) 04:04:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x41, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000000100)) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x618, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4044885) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0700008000000101000000084617001800660000c629dc0aef1ee2f2294d9078ac1414aa"]}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000480)) sendfile(r2, r1, 0x0, 0x1c01) dup3(r0, r1, 0x0) [ 286.587553] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6b6b6b) 04:04:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f465", 0x33, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:52 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x4056, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70080700f4784d5ac12da724000705dffe0fe0ffddb6ae81e220ff9a22c910a17e912055be92d51511ea53b927353e65b16408ff3dd0c87a221eca2a5ab10076e4", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100746266004408020008000e00000000006b0001000014dfcfce4dc8e9609705e0378b4000515d734b8070c3f44ebf90cfe6f843a8dcc0f3610c509ed9554c1f53841545122aa6b1e7649d32679eb502003db79c6e841aa9020925a56988c6e059647b0af3fdc1bfb13f36167ccf0301fae4173326647751f83366156b0d45b35255bef68c3ea2ce252824ce3203e19d40c3f84da06528784aac64c814f77bcbe4e56326ab8987a449f9dd32f66cc99d79ef43f3b724cd23df26fe90b87b01c3ba018f8b0d23bc88b2fe6a0bc7ae3756ab1edfafe7998ac74aaf"], 0x870}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "6a6163b186da1bf5", "139006fb8513da2942035cbadb84e9d2", "2d1f38e0", "bb3d699244893ed0"}, 0x28) r4 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000200)={0x84, 0x5, [], [@hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @jumbo={0xc2, 0x4, 0xad}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}]}, 0x38) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 286.768057] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf0ffff) 04:04:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 286.825425] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 286.933427] EXT4-fs (loop3): invalid first ino: 0 04:04:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:52 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000548e00000000000000a63fd96e951861c8cd874070b57f8627d5ba17d521ba97f9ae42ee772f25925e04769e69d45ec25e38d34fc7f08871369d608df6068e7b177c088904ddc751423df50de59d1ce1b113b40cba0a2e356c2160b638f155c13ac7981fcc98", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x3, 0x7}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xa19f}]}}]}, 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:04:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x1000000) 04:04:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x41, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000000100)) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x618, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4044885) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0700008000000101000000084617001800660000c629dc0aef1ee2f2294d9078ac1414aa"]}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000480)) sendfile(r2, r1, 0x0, 0x1c01) dup3(r0, r1, 0x0) [ 287.429534] EXT4-fs (loop3): invalid first ino: 0 04:04:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 287.478263] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.512244] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x2000000) [ 287.554061] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 04:04:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) getpeername(0xffffffffffffffff, 0x0, 0x0) [ 287.634682] EXT4-fs (loop3): invalid first ino: 0 04:04:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x3000000) [ 287.768707] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 287.830468] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) [ 288.149098] audit: type=1800 audit(1603166693.503:37): pid=13661 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16033 res=0 04:04:53 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4000000) 04:04:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) getpeername(0xffffffffffffffff, 0x0, 0x0) [ 288.497172] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 288.509373] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) 04:04:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x5000000) [ 288.541696] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) getpeername(0xffffffffffffffff, 0x0, 0x0) 04:04:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6000000) 04:04:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x7000000) [ 288.779824] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) [ 288.842284] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:54 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) getpeername(0xffffffffffffffff, 0x0, 0x0) 04:04:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000", 0x60, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x8000000) 04:04:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) getpeername(0xffffffffffffffff, 0x0, 0x0) 04:04:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xe000000) [ 289.561164] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) [ 289.585214] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000", 0x60, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) getpeername(0xffffffffffffffff, 0x0, 0x0) 04:04:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf000000) [ 289.836311] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) [ 289.855227] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000", 0x60, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 290.189766] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) 04:04:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x1f000000) 04:04:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:55 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x71cc4d8a61fb8eb9, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='btrfs_add_block_group\x00', r2}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000680)={{r0}, 0x0, 0x0, @unused=[0xdd15, 0x0, 0x9, 0x40], @devid}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000040}, 0x80) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x64000000}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x22400, 0x0) 04:04:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200", 0x63, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:55 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:04:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x20000000) [ 290.697674] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) [ 290.718863] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200", 0x63, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x20bc0300) [ 290.968344] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 291.049372] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) 04:04:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:04:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x3c0f0000) 04:04:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200", 0x63, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:56 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x71cc4d8a61fb8eb9, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='btrfs_add_block_group\x00', r2}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000680)={{r0}, 0x0, 0x0, @unused=[0xdd15, 0x0, 0x9, 0x40], @devid}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000040}, 0x80) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x64000000}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x22400, 0x0) 04:04:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x3f000000) [ 291.238318] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 291.278216] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) 04:04:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:04:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c2000012", 0x65, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x40000000) [ 291.972559] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) [ 291.995457] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x48000000) 04:04:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c2000012", 0x65, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:57 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x71cc4d8a61fb8eb9, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='btrfs_add_block_group\x00', r2}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000680)={{r0}, 0x0, 0x0, @unused=[0xdd15, 0x0, 0x9, 0x40], @devid}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000040}, 0x80) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x64000000}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x22400, 0x0) 04:04:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:04:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4c000000) [ 292.220938] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) [ 292.228685] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 292.416389] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:04:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x60000000) 04:04:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c2000012", 0x65, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 293.026976] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 293.058543] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) 04:04:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:04:58 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x71cc4d8a61fb8eb9, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='btrfs_add_block_group\x00', r2}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000680)={{r0}, 0x0, 0x0, @unused=[0xdd15, 0x0, 0x9, 0x40], @devid}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000040}, 0x80) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x64000000}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x22400, 0x0) 04:04:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x68000000) 04:04:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 293.413877] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 293.425550] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:04:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6b6b6b00) 04:04:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:04:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6c000000) 04:04:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) [ 294.101177] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x74000000) 04:04:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 294.362201] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:04:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:04:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) ftruncate(0xffffffffffffffff, 0x600004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 04:04:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:04:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x7a000000) 04:04:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) ftruncate(0xffffffffffffffff, 0x600004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 04:05:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x980b0000) 04:05:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) ftruncate(0xffffffffffffffff, 0x600004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 04:05:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(0x0, 0x0, 0xee01) 04:05:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x990b0000) 04:05:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 295.585251] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 295.773996] FAT-fs (loop0): bogus number of reserved sectors [ 295.808200] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x9effffff) 04:05:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(0x0, 0x0, 0xee01) 04:05:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:01 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0xffffffffffffffff, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$sg(0x0, 0xfffffffffffffffc, 0x0) keyctl$join(0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x90, 0x3, 0x0, 0xb, 0x0, 0x0, 0xfffe}, 0x0, 0xfffffffdffffffff, r1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000080)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="20009407c7d300005cbe90910a15df791692096536b21740dcc64a75390887c1987cbf7f426f33c03ec3683aafc3c5998aedaed15308ebeb1d3fbeb3f7533ca4dd11383511bc8b49606590ec762ec9925d51d6280d1c3db1ef74befb1004af83", @ANYRES32=r8, @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 04:05:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xad010000) [ 296.412264] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(0x0, 0x0, 0xee01) 04:05:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf0ffffff) [ 296.808947] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 296.910086] FAT-fs (loop0): bogus number of reserved sectors [ 296.936969] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0xffffffffffffffff, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$sg(0x0, 0xfffffffffffffffc, 0x0) keyctl$join(0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x90, 0x3, 0x0, 0xb, 0x0, 0x0, 0xfffe}, 0x0, 0xfffffffdffffffff, r1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000080)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="20009407c7d300005cbe90910a15df791692096536b21740dcc64a75390887c1987cbf7f426f33c03ec3683aafc3c5998aedaed15308ebeb1d3fbeb3f7533ca4dd11383511bc8b49606590ec762ec9925d51d6280d1c3db1ef74befb1004af83", @ANYRES32=r8, @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 04:05:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xfffff000) 04:05:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:02 executing program 3 (fault-call:1 fault-nth:0): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 297.382209] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 297.407829] FAULT_INJECTION: forcing a failure. [ 297.407829] name failslab, interval 1, probability 0, space 0, times 0 04:05:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xffffff7f) [ 297.502843] CPU: 0 PID: 14163 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 297.510763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.520119] Call Trace: [ 297.522748] dump_stack+0x22c/0x33e [ 297.526907] should_fail.cold+0xa/0x2f [ 297.530805] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 297.535914] ? lock_acquire+0x170/0x3f0 [ 297.539933] __should_failslab+0x153/0x1b6 [ 297.544199] should_failslab+0x5/0xf [ 297.547920] kmem_cache_alloc+0x2b1/0x4a0 [ 297.552165] getname_flags+0xce/0x590 [ 297.555983] user_path_at_empty+0x2a/0x50 [ 297.560137] do_fchownat+0xe1/0x1e0 [ 297.563799] ? __ia32_sys_chmod+0x80/0x80 [ 297.567955] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 297.573339] ? trace_hardirqs_off_caller+0x6e/0x210 [ 297.578375] __x64_sys_lchown+0x7a/0xc0 [ 297.582357] do_syscall_64+0xf9/0x670 [ 297.586169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.591362] RIP: 0033:0x45de59 [ 297.594554] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.613458] RSP: 002b:00007f01cfc66c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 297.621169] RAX: ffffffffffffffda RBX: 0000000000020800 RCX: 000000000045de59 [ 297.628437] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000020000080 [ 297.635714] RBP: 00007f01cfc66ca0 R08: 0000000000000000 R09: 0000000000000000 [ 297.643012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.650283] R13: 00007fff01e5885f R14: 00007f01cfc679c0 R15: 000000000118bf2c [ 297.750569] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xffffff9e) 04:05:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:03 executing program 3 (fault-call:1 fault-nth:1): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 298.023991] FAT-fs (loop0): bogus number of reserved sectors [ 298.041482] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 298.048788] FAT-fs (loop0): Can't find a valid FAT filesystem [ 298.086059] FAULT_INJECTION: forcing a failure. [ 298.086059] name failslab, interval 1, probability 0, space 0, times 0 [ 298.164627] CPU: 1 PID: 14191 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 298.172547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.181924] Call Trace: [ 298.184522] dump_stack+0x22c/0x33e [ 298.188172] should_fail.cold+0xa/0x2f [ 298.192069] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 298.197186] __should_failslab+0x153/0x1b6 [ 298.201428] should_failslab+0x5/0xf [ 298.205145] kmem_cache_alloc+0x2b1/0x4a0 [ 298.209410] dqget+0x6dd/0x1070 [ 298.212727] ? dquot_quota_sync+0x360/0x360 [ 298.217098] ? map_id_up+0x249/0x2f0 [ 298.220882] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 298.225588] __dquot_initialize+0x3eb/0xd40 [ 298.229934] ? dquot_initialize_needed+0x290/0x290 [ 298.234935] ? capable_wrt_inode_uidgid+0x170/0x1a0 [ 298.240017] ? setattr_prepare+0x135/0x854 [ 298.244330] ext4_setattr+0x37c/0x25d0 [ 298.248276] ? evm_verify_current_integrity+0x87/0xf0 [ 298.253475] ? evm_inode_setattr+0x6a/0x1d0 [ 298.257809] ? ext4_evict_inode+0x1830/0x1830 [ 298.262313] notify_change+0x70b/0xfc0 [ 298.266262] chown_common+0x514/0x5c0 [ 298.270082] ? filp_close+0x160/0x160 [ 298.273987] ? rcu_sync_lockdep_assert+0x99/0x100 [ 298.278885] ? preempt_count_add+0xaf/0x190 [ 298.283222] ? __mnt_want_write+0x22c/0x2c0 [ 298.287567] do_fchownat+0x126/0x1e0 [ 298.291290] ? __ia32_sys_chmod+0x80/0x80 [ 298.295451] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 298.300826] ? trace_hardirqs_off_caller+0x6e/0x210 [ 298.305859] __x64_sys_lchown+0x7a/0xc0 [ 298.309969] do_syscall_64+0xf9/0x670 [ 298.313785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.318986] RIP: 0033:0x45de59 [ 298.322189] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.341102] RSP: 002b:00007f01cfc66c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 298.348827] RAX: ffffffffffffffda RBX: 0000000000020800 RCX: 000000000045de59 [ 298.356111] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000020000080 [ 298.363411] RBP: 00007f01cfc66ca0 R08: 0000000000000000 R09: 0000000000000000 [ 298.370692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.377971] R13: 00007fff01e5885f R14: 00007f01cfc679c0 R15: 000000000118bf2c 04:05:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:04 executing program 3 (fault-call:1 fault-nth:2): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xfffffff0) 04:05:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x24) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) pipe(&(0x7f0000000080)) fallocate(r2, 0x20, 0x0, 0xfffffeff000) r4 = dup3(r0, r0, 0x80000) sendmmsg$unix(r4, &(0x7f0000000080), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000000c0)) r5 = socket$inet6(0xa, 0x400000000001, 0xfffffffe) close(r5) mkdir(0x0, 0xd1259b5777c67223) [ 298.734572] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 298.741668] audit: type=1804 audit(1603166704.103:38): pid=14218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir055569288/syzkaller.PmQ1d6/326/bus" dev="sda1" ino=16499 res=1 04:05:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 298.807302] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x40030000000000) 04:05:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 298.937411] audit: type=1804 audit(1603166704.283:39): pid=14218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir055569288/syzkaller.PmQ1d6/326/bus" dev="sda1" ino=16499 res=1 [ 298.968502] validate_nla: 8 callbacks suppressed [ 298.968511] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x24) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) pipe(&(0x7f0000000080)) fallocate(r2, 0x20, 0x0, 0xfffffeff000) r4 = dup3(r0, r0, 0x80000) sendmmsg$unix(r4, &(0x7f0000000080), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000000c0)) r5 = socket$inet6(0xa, 0x400000000001, 0xfffffffe) close(r5) mkdir(0x0, 0xd1259b5777c67223) [ 298.978392] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6b6b6b00000000) [ 299.027296] audit: type=1800 audit(1603166704.293:40): pid=14228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16499 res=0 04:05:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 299.160602] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 299.183614] audit: type=1800 audit(1603166704.293:41): pid=14229 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16499 res=0 [ 299.210936] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 299.231414] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:04 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000140)={0x3c00, 0x800, 0x0, 0x400, 0x1, 0x4b1, 0x0, 0x2, {0xaeb1, 0x8, 0x1}, {0x339, 0x20}, {0x2, 0x0, 0x1}, {0xffffff80, 0x4, 0x1}, 0x2, 0x10, 0x10000, 0x8, 0x1, 0x1, 0x7, 0x9, 0xf7d5, 0x7, 0x683b, 0x1, 0x0, 0x4, 0x2, 0x8dafced97cb99731}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x8000}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf0ffffffffffff) 04:05:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x24) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) pipe(&(0x7f0000000080)) fallocate(r2, 0x20, 0x0, 0xfffffeff000) r4 = dup3(r0, r0, 0x80000) sendmmsg$unix(r4, &(0x7f0000000080), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000000c0)) r5 = socket$inet6(0xa, 0x400000000001, 0xfffffffe) close(r5) mkdir(0x0, 0xd1259b5777c67223) [ 299.338514] audit: type=1800 audit(1603166704.293:42): pid=14218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16499 res=0 04:05:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 299.464813] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 299.501849] EXT4-fs (loop3): get root inode failed 04:05:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x100000000000000) [ 299.538059] audit: type=1804 audit(1603166704.893:43): pid=14276 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir055569288/syzkaller.PmQ1d6/328/bus" dev="sda1" ino=16502 res=1 [ 299.577812] EXT4-fs (loop3): mount failed 04:05:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 299.695534] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 299.770063] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:05 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0xa0a, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000d0603000000000000000000030000060500010007000000100003006269746d61703a706f7274000d000300686173683a6d6163000000000e0003006269746d61703a6970000000533432fdf2da0c168cf4684ac1dbb3ded02cd4ec55d1c154b741bc323500d99e2db390f6c9b6adcf07b9e3b8bc6cdb0add0fcc1b85bab1c0a8"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) [ 299.905923] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 299.921730] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x200000000000000) 04:05:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000180)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f00000000c0)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000040)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000400)="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", 0x115, 0x4800}, {&(0x7f0000000140)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file1\x00', 0x0, 0xee01) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80002, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000002c0)={0x7, {0x4, 0x7d, 0x2000000, 0xdbd9}}) 04:05:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:05 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x55c9}, 0x44a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) signalfd(r0, &(0x7f0000000040)={[0x1]}, 0x8) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffff7fff, 0x208000) r1 = semget$private(0x0, 0x0, 0x0) semtimedop(r1, &(0x7f0000000240)=[{0x0, 0x32}, {0x0, 0x6}, {0x0, 0x0, 0x2000}], 0x3, &(0x7f00000003c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0x80, 0x4) r4 = getpid() getrandom(&(0x7f0000000140)=""/141, 0x8d, 0x2) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x0, 0x0, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ptrace(0x4208, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 04:05:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:05 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x55c9}, 0x44a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) signalfd(r0, &(0x7f0000000040)={[0x1]}, 0x8) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffff7fff, 0x208000) r1 = semget$private(0x0, 0x0, 0x0) semtimedop(r1, &(0x7f0000000240)=[{0x0, 0x32}, {0x0, 0x6}, {0x0, 0x0, 0x2000}], 0x3, &(0x7f00000003c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0x80, 0x4) r4 = getpid() getrandom(&(0x7f0000000140)=""/141, 0x8d, 0x2) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x0, 0x0, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ptrace(0x4208, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) [ 300.370122] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 300.394909] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 300.445649] EXT4-fs error (device loop3): ext4_quota_enable:5833: inode #3: comm syz-executor.3: iget: bad extra_isize 34906 (inode size 1024) 04:05:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x300000000000000) 04:05:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 300.558520] EXT4-fs error (device loop3): ext4_quota_enable:5835: comm syz-executor.3: Bad quota inode # 3 [ 300.657694] EXT4-fs warning (device loop3): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 300.683683] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 300.692220] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 300.760938] EXT4-fs (loop3): mount failed 04:05:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x400000000000000) [ 300.842479] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 300.881393] EXT4-fs error (device loop3): ext4_quota_enable:5833: inode #3: comm syz-executor.3: iget: bad extra_isize 34906 (inode size 1024) [ 300.898453] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 300.943636] EXT4-fs error (device loop3): ext4_quota_enable:5835: comm syz-executor.3: Bad quota inode # 3 [ 300.977453] EXT4-fs warning (device loop3): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 300.998954] EXT4-fs (loop3): mount failed 04:05:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 04:05:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x500000000000000) 04:05:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20e4ffffff02000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef011f00000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000003c0)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0xfffffffffffffe3f, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x200, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=0x6e) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2c4300, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x210080, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000340)=0x3) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000380)=0x8) 04:05:06 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x0, 0x18c, 0x5}, &(0x7f00000001c0)=0x10) close(r0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000001}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 301.332035] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 301.334419] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x600000000000000) 04:05:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x600004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 301.529134] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x700000000000000) 04:05:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 301.727374] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 301.814345] FAT-fs (loop0): bogus number of reserved sectors [ 301.822923] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 301.848095] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x800000000000000) 04:05:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:07 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) fchmod(r0, 0x20) 04:05:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 302.621396] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xe00000000000000) [ 302.681234] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f00000002c0)=@v2={0x3, 0x0, 0xb, 0x7, 0xf4, "1b33dacffe3e81c62ef7e25c4376a2bd4e9fc85660d4c38d605ecbfd0018952b3e0d9ed7a72774661b5f18fbaa86a73f0a8c5d1863c8ad38eaa74350ff479f4796f5747cd17bbe2a9d238c1e281e8f16ee0e4b23d6f68cad5f1df4b308171d8cdb2a089d32bc95a870ee2672b6a49a57d239aaa15bdf00be947df37f9319ac6b791147b0c76934916fc3a6f5e776b27d5c241e618270bb9be956f7bc49fba958c36270b32387933ed71c5756b9b37e7cbee959de1805efe01bba6b39f2a087c7382a71450310d8ac2e0e93914995836a63c72a9b0194f81863f52a392e4110c82684463aa797cfed5586bc4a1141cdceb3a1c9fd"}, 0xfd, 0x1) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x5, 0x2}, 0xe) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf00000000000000) [ 302.957761] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 302.962495] net_ratelimit: 4 callbacks suppressed [ 302.962505] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 303.002280] FAT-fs (loop0): bogus number of reserved sectors [ 303.029078] FAT-fs (loop0): Can't find a valid FAT filesystem [ 303.160110] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:09 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x131, 0x410c2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000140)=""/103) 04:05:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x1f00000000000000) 04:05:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 303.766255] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 303.810720] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, 0x0, 0x0, 0x200000000000004, 0x0) 04:05:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x2000000000000000) 04:05:09 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000280)=0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x26) ftruncate(r0, 0xe32c) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="01002abd7000ea550000ff7f00000500190001000000080211a289faf53b83e038ae70644e660000000000060010003200000000000000bd359673099a36080fab26e2955fb0a8b2299f953c9b2d721e5bca7e9a4b4d870559a41803c01d71e742f5f2a2f4faf4929dabebb0fc631179eb4267e1640056eb79cff8abd9c8fe12e5672218be871b6ea180665ac1f0ecee4967a7be0435e74a9d63bc5617b931cf53cdecb106001000ad0600"/191], 0xb8}, 0x1, 0x0, 0x0, 0x80d1}, 0xa810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)="1ac2bd898006b93a8740c00a559625a29f3de5f22fb752d02ce2b0c92e2393f96ecc4a6842883d21fc852a0670a5ae671212db27bace1fec5f553eebc0d5970b2674dd1dbc06383a945afaab100f60a2f23c16862fb93d24473f03731b66848a85eb55a328217cd662aca74d452efb68c05e593ac67b61ad341a28dbca43b79668b20502477dc95059c97efcadd563e22457d7f803ab0e755f7151d0525f0b4c813214fc6f576305", 0xa8, r0}, 0x68) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x290100, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000440)={0x5, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000480)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000640)={{0x2, 0x0, @descriptor="298fbf72cbbe0a33"}}) [ 304.020989] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 304.035491] validate_nla: 3 callbacks suppressed [ 304.035500] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, 0x0, 0x0, 0x200000000000004, 0x0) [ 304.116412] audit: type=1804 audit(1603166709.473:44): pid=14508 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464332049/syzkaller.ppnnbj/243/bus" dev="sda1" ino=16533 res=1 [ 304.160671] FAT-fs (loop0): bogus number of reserved sectors [ 304.191803] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x20bc030000000000) 04:05:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000140)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x3004063, &(0x7f00000000c0)=ANY=[]) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/136, 0x88}], 0x2}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x58}, 0x1, 0x0, 0x0, 0x240408d0}, 0x20004000) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="26000000030000000000b5000000713cfe6e4589690000000000000000000500000000000000"], 0x26) ftruncate(r1, 0xe32c) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0xff) [ 304.255073] audit: type=1804 audit(1603166709.553:45): pid=14508 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464332049/syzkaller.ppnnbj/243/bus" dev="sda1" ino=16533 res=1 [ 304.277572] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 304.351929] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x8}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "acd697d7a82ae8647b9470c6c4761fa9"}, 0x11, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 04:05:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, 0x0, 0x0, 0x200000000000004, 0x0) 04:05:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x3c0f000000000000) 04:05:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) [ 305.103390] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 305.114712] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 305.137040] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000), 0x0, 0x200000000000004, 0x0) 04:05:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x3f00000000000000) [ 305.301182] FAT-fs (loop0): bogus number of reserved sectors [ 305.318167] FAT-fs (loop0): Can't find a valid FAT filesystem [ 305.331777] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000), 0x0, 0x200000000000004, 0x0) [ 305.428423] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 305.558814] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000), 0x0, 0x200000000000004, 0x0) 04:05:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4000000000000000) [ 305.740264] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 305.768020] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x200000000000004, 0x0) 04:05:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4800000000000000) 04:05:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 305.967417] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x200000000000004, 0x0) [ 306.041309] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 306.149677] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x4c00000000000000) 04:05:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x200000000000004, 0x0) 04:05:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) [ 306.375125] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x0, 0x0) [ 306.482518] FAT-fs (loop0): bogus number of reserved sectors [ 306.516763] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6000000000000000) 04:05:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x42c, 0x3f3, 0x300, 0x70bd25, 0x25dfdbfb, {0x10, 0x1, 0x37, [0x8, 0x0, 0x800, 0xfac, 0x0, 0x9, 0x4, 0x8, 0xffffff11, 0x7fffffff, 0x1, 0x81, 0x800, 0x7, 0x81, 0x20ef, 0x10000, 0xfffffffc, 0x401, 0x5, 0x0, 0x1, 0xfffffff7, 0x949f, 0x7ff, 0x1000, 0x3, 0x699, 0x8000, 0x9, 0x100, 0x5581, 0x80, 0x5, 0xbce4, 0x6, 0xffffffff, 0x7, 0x6, 0x401, 0x1, 0xfffffffa, 0xab85, 0x2, 0x2, 0x7, 0x6, 0x3ff, 0x3, 0x1f, 0x2, 0x5, 0x9, 0x10001, 0x2, 0x7f, 0x1, 0x5, 0x2, 0x81, 0x101, 0x5, 0x9, 0x6], [0xb8, 0x7, 0x9, 0x5, 0x1, 0xfffffffb, 0x2, 0x6, 0x2, 0x4, 0x10000, 0x4, 0x2, 0x8, 0x6, 0x1, 0x20000000, 0x101, 0x400, 0xcc9e, 0x7, 0x5, 0x1, 0x0, 0x85, 0x8, 0xfffffff9, 0x9, 0x6, 0x9, 0x0, 0x5, 0x3, 0xe9f, 0x3, 0x3ff, 0x7fffffff, 0x8, 0x6b, 0xd7c, 0x2, 0x2, 0x0, 0x4, 0x8b3, 0x5c6ee814, 0xfffffffc, 0x8, 0xffff, 0x3, 0x9, 0x8001, 0x9, 0x1, 0x2, 0x603, 0x4, 0x6, 0x60b, 0x9, 0x1, 0x8, 0x8, 0x7], [0x6, 0x1, 0x7, 0x62, 0x715, 0x0, 0x8, 0x6, 0xc1, 0x6, 0x2, 0xdc06, 0x2, 0x34964e1d, 0x80000000, 0x5, 0xffff3ccb, 0x1000, 0x36, 0xeac2, 0x7f7, 0x81, 0xa4d, 0x2b09, 0x7, 0x100, 0x0, 0x3, 0x81e00000, 0x1000, 0x2cbdddb9, 0xffffff00, 0x40, 0x6, 0xffff, 0x2, 0x100, 0x1, 0xa8, 0x101, 0x20, 0x9, 0x7fff, 0xe2b, 0x7, 0x2, 0xfffff801, 0x8000, 0x28275d67, 0x1f, 0x1, 0x10001, 0x7d, 0x9, 0x276, 0x10000, 0x1, 0x540, 0x0, 0x9c8, 0x8, 0xa9ed, 0x2, 0x3], [0x8, 0x8, 0x81, 0x9, 0x400, 0xda7, 0x8, 0x20, 0x1, 0x4, 0x4, 0x7, 0xbf, 0xffffff40, 0xffff0b2c, 0x100, 0x7, 0x1, 0x3, 0x8ce, 0x921b, 0x7fff, 0x8, 0x6, 0x5, 0x5, 0x8, 0x37f, 0x7, 0x9, 0x8, 0x9, 0x6, 0x800, 0x3, 0x7, 0x80000001, 0x9, 0x8, 0x1, 0x138, 0x5, 0x6, 0xdb8, 0x7, 0x9, 0x1, 0x3, 0xbe44, 0x6, 0xff, 0x7, 0x3, 0x1ff, 0x0, 0x0, 0x7fff, 0x400, 0x10000, 0x2, 0x7, 0x741, 0xfb1, 0x1], 0x9, ['$%}\x00', 'ext4\x00']}, ["", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000780)={0x6, 'wg1\x00', {}, 0x2}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201a960", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2503000000050005000100000005000300800000002c0001801400020067656e6576653100000000000000000014000200726f736530000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000001c0)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4000080) 04:05:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 306.685106] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x0, 0x0) 04:05:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6800000000000000) [ 306.784500] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 306.887607] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14635 comm=syz-executor.3 04:05:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x0, 0x0) [ 306.934190] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 307.003834] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14643 comm=syz-executor.3 04:05:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x6c00000000000000) 04:05:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3f7, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file1', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048015}, 0x44800) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f00000001c0)={0x24d, "2214c393449f4c055398bf5bb05aa7fd6815e148bd5bb81ad87ac9a8be1a39e6", 0x1}) 04:05:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 307.334953] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x7400000000000000) 04:05:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x1050000, &(0x7f0000014a00)=ANY=[]) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x10000000}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r1 = socket$can_raw(0x1d, 0x3, 0x1) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r2, 0xee00) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0x5dc8fd30, 0x2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="a309ac8dbccb598dea6198a910d21e58893d453c2f2952e06ea9a2fcaf05d59b1d76c67a8d513a9369e7d81db5b6ff2ebba9970b4b0b722a3fbd95792646e63f98c7b17f515f2acce2efffb3b8e19cb1a6665cbc96041d74f61186c8f8af620db5f72d4b4c7de238a92de95fac57c17d70ffaeddb69a70612b9db364399098b8d5563a83770e90b13dddbb28fc3ff59d759d6dbab99942d14daea9b83f1a8ac73cd4336b9c4a8e31931a37829c2297605228784c537bb61a24a59607412f5929f42ee34135c9b4f53c93470c00e8353483f96da52e7750cf12e488b1bf0b911bb243291a16ff3f", 0xe7, 0x9}, {&(0x7f0000000180)="f70e9d34830cd9b9304317a4895db2b7ec06d9ded86bb71c4b6372cb3f47bb66f6", 0x21, 0x8000}], 0x10000, &(0x7f00000003c0)={[{']'}, {'ext4\x00'}, {}, {'-^'}, {'ext4\x00'}, {'ext4\x00'}, {'#-}'}], [{@subj_type={'subj_type', 0x3d, '#'}}, {@euid_lt={'euid<', r2}}, {@audit='audit'}]}) 04:05:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x7a00000000000000) 04:05:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0xc300, 0x0) 04:05:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 307.806066] FAT-fs (loop0): bogus number of reserved sectors [ 307.815861] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 307.843676] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="209bc133dcdf136b1d000000900100000f000000e96300000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x980b000000000000) 04:05:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(0xffffffffffffffff, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 308.113977] EXT4-fs (loop3): bad geometry: block count 1796464604 exceeds size of device (512 blocks) 04:05:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x990b000000000000) 04:05:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = socket$can_raw(0x1d, 0x3, 0x1) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0xee00) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="c98d6522", 0x4, 0xfd5}, {&(0x7f0000000180)="bd159cc152188ab0f14676dea22925b3a967980f470836c1d7a22407e4a2ac1c3cb85ac9b7c2e4d8fe00724fbfd8e75bfb636b4454ba9aba6040b0d5a99604c7ceee98183b2c5a21a276ac77f57b842bac4d861a3b349958", 0x58, 0xfff}, {&(0x7f00000002c0)="0e10efe999c87e2b686b59cac6a31b3a9a864315361f9679a3c6fa33075f88568f42316c1c07c806cfd6d23373b2adcd5a80d9e312183e2c6a761a067470fa2e1a41f0cd6f8ded6eb264d7e2c35c5d7d68411c874ce22c2a8a07030d576a3f5d5c7880dc90ab9734763295924afd41bb4ac3231406487ac59b5563a8bc827df47a30a158520ee04a06a7f16a72be6dbc7a39fe44ce0ca336c1404c8cc28ddc547698343195e5173f6c0c5cd64dfb44e0b30b16496b46382a02066ab7fd5beea1c7de1bed723dc98e9772a057921fd885f1b110e0", 0xd4, 0x6}, {&(0x7f00000003c0)="8e705035e4cb730c492726", 0xb, 0x2}], 0x100000, &(0x7f0000000480)={[{}, {}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@euid_eq={'euid', 0x3d, r1}}, {@dont_appraise='dont_appraise'}, {@subj_role={'subj_role', 0x3d, '.\'!%)'}}, {@smackfshat={'smackfshat'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}]}) 04:05:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x9effffff00000000) 04:05:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(0xffffffffffffffff, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 308.807041] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xad01000000000000) 04:05:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(0xffffffffffffffff, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000440)=[{&(0x7f0000000140)="b2b7817e2ff6b98a4a5719ac725d23c4bdd4e7ffa3c2aacc8a6d714301695eb66d57e5f736d6a4f11215fe1cf51da58e2a233ca63c4a967f33b0ba0770d5d56a2374b8c8b65e545e72299648589b60", 0x4f, 0xffffffffffffff80}, {&(0x7f00000001c0)="9953f7f0e86a52fd384956ced6d9f1a616b2b5c21f6fe673fe362ae96b4eba260829d9d6d2babf0e8559d265db08eb54252c9c97a891abc87dd363c846ae9796f1d6b26b3981766d4fbafe18778efe1810097db1352edb2ccb4807521394033d9f988ec755db27457b617a16e10542925bc9760429dc2e1186f781b3eec658eba78685acfead6b4d5d1e53b6988332cfbd55c7c21d77", 0x96, 0x3}, {&(0x7f0000000280)="dab5ba4fea4571310398a47e8e7d4d54bd9cb76c0a1b36001676d46092f2c82ee96ac8d8369c07aec7f86556eb7215e67bd86f5071312e3cd1d90d105c6a63806561191ffaae28398a08cfa060f9e4f517ed656065e92752e21a267c4c32e550ab3ad743d58a83186d6e67735f64d4da90ba246e8e89ac83e5121fbb44c2a205f26b84cba0eb725645b4131e42203c671154cce79d6d765591712de61efd7dcdcb490769f123ab2d37e81e0382e6d0676846d2fcb0678968e18f0639b53d0d295285c56d7376082f2689f5e1b4ec4985287cb9851a417e", 0xd7, 0x3}, {&(0x7f0000000040)="cdd4f663d12e09ff743deeaab62e5a071fc03d5c8c8b8af0eb4c665c4feaaaa268367accfb325424f60769f7a8ac3330f55f791e001818c78f1b07", 0x3b, 0x5}, {&(0x7f00000000c0)="f5154a84955b106fbf5432c3d4e3a658cf7865bc3f7f7356fdf5c37baf3a4d6307c05910a23d14734bf7f87e17949f12e7c815ed593586", 0x37, 0x7c}, {&(0x7f0000000380)="1d40eb753cefe1c3a294d2a7fb7c299fdaf592f0f048e8a7dc2b424e7202277fa61a2796b28ff20a39526904b27b9947f7058083e7960818e46fd74fc47e6bd3e6450587ee0d424bc0b4e6e5aed45cd22b3d729eb24abf0b9cf7e6d7c0e052b0f8fee026f3a04ff4bbdfc74f8f8313e71af99b78223595771699882b0c9d57983f4e85e35ff0143989adc3333e7217d5bf4a89fecba1a805e8b7278a92234ece58d34d633df52a6cc3d4", 0xaa, 0x40}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xf0ffffff00000000) [ 309.050495] FAT-fs (loop0): bogus number of reserved sectors [ 309.073391] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) [ 309.152865] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 309.240277] validate_nla: 9 callbacks suppressed [ 309.240288] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 309.242620] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:05:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xffffff7f00000000) [ 309.541773] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 309.619315] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) 04:05:15 executing program 5 (fault-call:10 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xffffffff00000000) [ 310.087769] net_ratelimit: 5 callbacks suppressed [ 310.087782] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 310.119996] FAULT_INJECTION: forcing a failure. [ 310.119996] name failslab, interval 1, probability 0, space 0, times 0 04:05:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203424d70de32dc785379877114fa9a85ec9ed0db2a4487d16cb1bb20eb41ec7d21c14b53e1ce66d2d095d77eafd7645b8b2c4cdc", 0x99, 0x400}, {&(0x7f0000000040)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0xfffffffffffffd6d, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x800004800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000100)={r6, &(0x7f0000000180)=""/87}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000003c0)={r6, 0x1}) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f00000000c0)={0xc20e, 0x7f}) chroot(&(0x7f00000002c0)='./file0\x00') [ 310.162428] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 310.212447] CPU: 1 PID: 14808 Comm: syz-executor.5 Not tainted 4.19.152-syzkaller #0 [ 310.220393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.229755] Call Trace: [ 310.232381] dump_stack+0x22c/0x33e [ 310.236020] should_fail.cold+0xa/0x2f [ 310.239920] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.245039] __should_failslab+0x153/0x1b6 [ 310.249303] should_failslab+0x5/0xf [ 310.253026] kmem_cache_alloc_node_trace+0x244/0x4d0 [ 310.258138] ? ww_mutex_unlock+0x2f0/0x2f0 [ 310.262381] __kmalloc_node+0x38/0x70 [ 310.266213] kvmalloc_node+0x61/0xf0 [ 310.269941] traverse+0x3da/0x750 [ 310.273401] ? find_held_lock+0x2d/0x110 [ 310.277489] ? __might_fault+0x11f/0x1d0 [ 310.281595] seq_read+0x8cd/0x10c0 [ 310.285232] ? __fsnotify_parent+0xd1/0x31c [ 310.289570] ? fsnotify_first_mark+0x240/0x240 [ 310.294159] ? seq_lseek+0x3d0/0x3d0 [ 310.297879] proc_reg_read+0x1bd/0x2d0 [ 310.301778] ? proc_reg_unlocked_ioctl+0x2c0/0x2c0 [ 310.306735] do_iter_read+0x471/0x630 [ 310.310625] vfs_readv+0xe5/0x150 [ 310.314076] ? compat_rw_copy_check_uvector+0x3e0/0x3e0 [ 310.319447] ? lock_downgrade+0x750/0x750 [ 310.323622] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 310.327874] ? __mutex_add_waiter+0x160/0x160 [ 310.332425] __x64_sys_preadv+0x22b/0x310 [ 310.336582] ? __ia32_sys_writev+0xb0/0xb0 [ 310.340852] ? trace_hardirqs_off_caller+0x6e/0x210 [ 310.345877] ? do_syscall_64+0x21/0x670 [ 310.349871] do_syscall_64+0xf9/0x670 [ 310.353686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.358910] RIP: 0033:0x45de59 [ 310.362114] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.381021] RSP: 002b:00007ff3ce7e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 310.388732] RAX: ffffffffffffffda RBX: 0000000000025dc0 RCX: 000000000045de59 [ 310.396019] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000007 [ 310.403307] RBP: 00007ff3ce7e3ca0 R08: 0000000000000000 R09: 0000000000000000 04:05:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0xfffffffffffff000) 04:05:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) [ 310.410580] R10: 0200000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 310.417851] R13: 00007ffefdef452f R14: 00007ff3ce7e49c0 R15: 000000000118bf2c 04:05:15 executing program 5 (fault-call:10 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 310.496267] FAT-fs (loop0): bogus number of reserved sectors [ 310.515388] FAT-fs (loop0): Can't find a valid FAT filesystem [ 310.557539] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = signalfd(r5, &(0x7f0000000100)={[0x20]}, 0x8) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000180)) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r6, 0x0, 0x883713, 0x0) r8 = dup(r3) ioctl$KDGETMODE(r8, 0x4b3b, &(0x7f0000000040)) 04:05:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) 04:05:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 310.824478] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:16 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000440)={@private1, 0x44, r0}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:16 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:16 executing program 4: ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000200)=""/133) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000400f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088003100000010001b020000b700000c001b4072dcf77b0019adc1b3f0351846ce8140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a3000"/192], 0x1}, 0x1, 0x0, 0x0, 0x6000810}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x200002d9}], 0x1, 0x200000000000004, 0x0) 04:05:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x40}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x175}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U-'}, 0x16, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 311.409220] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 311.436117] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 311.477777] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 311.477994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 311.504271] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x7ffff000}], 0x1, 0x200000000000004, 0x0) 04:05:17 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0x80000, 0x8, 0x3, 0x6, 0x8}}, 0x50) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x7f, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xd0e}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 311.621479] FAT-fs (loop0): bogus number of reserved sectors [ 311.627686] FAT-fs (loop0): Can't find a valid FAT filesystem [ 311.656480] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 311.685771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 311.830723] EXT4-fs warning (device loop3): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. 04:05:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x2, 0x200000000000004, 0x0) 04:05:17 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 311.919254] EXT4-fs (loop3): mount failed 04:05:17 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000200)=@alg, &(0x7f0000000280)=0x80) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)={0x2e, 0x3, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @hao={0xc9, 0xffffffffffffffed, @remote}]}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400202) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(0xffffffffffffffff, 0xe32c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f7de41aae91ec981b7b3bf9e8d"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={0x8c, r6, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x662, 0x55}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x8040) bind$x25(r4, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r9, 0x0, 0x883713, 0x0) [ 312.012671] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x2c) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x2, 0xe6, 0x1, &(0x7f00000000c0)=[{0x1f, 0x6, 0x8, 0x59}]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) [ 312.058214] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 312.247380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x5, 0x200000000000004, 0x0) 04:05:17 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1}}, 0x8040840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = socket$can_raw(0x1d, 0x3, 0x1) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0xee00) syz_mount_image$adfs(&(0x7f0000000040)='adfs\x00', &(0x7f00000000c0)='./file1\x00', 0x8, 0x7, &(0x7f00000025c0)=[{&(0x7f00000002c0)="1b99f007ca16339f1c2ee55734b1956783f178a79d9d403307cc19476036c0b6e8072eea56b59117112c3fc2394bdeadf1cc2b521e51e783d2e645b258a5b39233c6130056f1726db314b97b9af7cffdb63773a23b0280c21b6f4da009ebd8d223bbd66893df1aa847699cc74ed74cbdfaae1e01d5e42f48f359ad18e4ef8f0c03e8ce951f9d916d2e91d63290ccc21b3daef8eef9e3a51d0c0d039550006db0d7a80917e04031699f0c4f4360c20f668a8f5d69be5af375c4c055b6ae8da37f1ad86fd0b3618ed2aef83e30bc4a6e7e40f845f956e0c6c2e2e981520d89a17a3bdcbf62749d415c2b8b55beb5d7c12c4f54a438d4583a409f1948a3ca2d151e0a7e646082d9005f766324a227f6dcba2a7ad384d5e66da9bda4d5570c221d4a182e8bfb899956fb5bba076a88ce62a91eb309d14d9143a6d95cf42e0ba958ec9d37bf66e3bcd70ed204d4709fbc57ddff23f598734c2753fa6a7cbcfc7bf0b2af5e0f3c44b73c151fa1df3fd029946ad23661ca76c38134a51033a86c83107bccf05a4061a07f451f18cb7013ec4d3a9f9c5f6764a25b08689adb7aadce71db92da7a8b6e2bcd1a480e642d052650629ed493181bc1bfa11bba20f134a996fe0c7b9a1303d8ded17120bb8b1d7eec44e0e91e43caa349e63dbc540533b53a50122983bea73ab7bd94f763fcf7586f9f6dab54a6757e113d8c1e6ea4548491197e88ec7c16b3b6a7a89007ae7d9cd90748bb7033cb70ff48c18ebb7ec26c5da07465a3f9ab725111224bb367e9319be66294df8d6a11ac840c9e2738d3b1e803219f1912ee9d00582641df9c9c2e4dfdd68952fb1cf1087e5f25c42a1b03897276f02bc0aea6ec4482e0c1b16d92e274a32805add985ea43e139e93f7591e07c710021b88008da9260e5d36cf34b310247f74278924823512b65cb2315c77e8001b29cb558d60f0f1c221675727ccc2812057db58eefede88995af6e19def8741d753d27f8366a060ab8826fc8816691ac2b7d6ff83221d22a1e39a07bac8bef2caf7f3ee05b11787814eee4d1f5d178ff0b187ca14d58c3ca988db4fc6409474876c235e6a7e7b04adc62cf6664eb1ba8dbf2aad60a287b68fd47b63b211bf3e0b78b23955a42ae4100be78c931ea9e99ba5ef9d9723533faa49dc1f18aabd6c221f7532bac6dd810615cdc1095de3857c6d7ed6b29dda0726fe5aac9b24c587c3ae9d4d51d507ee183c8eb20f7bdb4ec4a7400a71c50aae85737ced48bdcfba22f238f462f8045fee8a3710dd83afe2f7bd26e4ac4aeb4ef5413de164c37ce3a065e26346a56f555ffd56ae06da47da4f74b1001802a0a7999de12f0632e7c862241c26cca050d8a68d47f97ad48cbab7f3fb3ea796a10163d60eef2d9fc3381076bde0f777741ebf68f4d8cc8e72b8b8b16e3e03c647912538e9cb343d16353799787a86f67a0d22ec593da4dc7a81cdc8fdef7a549036b6bcd9778fd62f79642eef583b5db9a9b238965352765fcddfefa56c7df40806b9506f12d0382fdc81c7906339030c92b5ea0941a612a188217c86cd23ce9faf67e06b161a2ae5cc14342eda022d185317a1d6346a2ba9413ed6eb545d566120c9c028a577e9831198f431f73f82e72f59cbf20ff6f713f8f81bc8da0f3b48ce425217623f6db5b9d488dc10c4a1cd4f6cff0b00c64490d588d027a173de8b51b192af16d69df1b6dd0b7f9b6eec4aceb3b4a4ca4d3d7d2a48ccf1b47570de64673a74a117829b9cccd37c0bbc40ccaf5eaaa543923dc442ac47ffd2732c8a2a6b61aa5140a49e9dd27406ebaf04b809b28c801197f6ce468d02f25769657f135829ddf71d3c2e51d5903871461ac53bbedda9619df8e0f2214b2e728a48706b9d4c40411c01791ab5c3cdbb2d857b8945a79d7e7fe7c8109e0991b548b54fa61b9139df824a9738f454daf14b9ed34d6594d6d154cbd5737b3ee19f8c99d39837830598461969a4b9f10030f8883a712cb15cbbc421d32ec77891d92a82c2916925eb1abab46346187d5e7390ecbc4ee4102320b012f32227436f8eaeaea8e44db79b96258bcc6484261d79768bbca39e3054be92a1dcc66e1d15e150798ad0422091ed881cf7901c81b154ac79c0ccfeae5b5224b7659349e3b82846979fc1f09c8c0a070f2164a88eab4677d281da27c20fa12b988eee0283742eee4fbc51a7a3bb96448fcf207aa939cef7ba3e2590a01348cb99e6e645d0dee017f71c3911bdbcc6f161210168ef3c15e9fe672fc482150ccf9eba21cc1401d171652690b22f72d1bb961cffba068428abb2b2629274ceeeac0ccc54f1e2344545dbc589fa3f1c66a7844549a26a971ced363385d0cdd6681e95d749845f6d8e35008ef3c18bc42cf3e3fe54f657ebcadc2725888b6277813d5c4c84c29f3a7242308c242f4f263d4ba5ef0766462d71bbb701c08623ebf5c1cedcfb3b7f8a6acfd7ac8673c6e5cca815c375ca9014557437a8e49c343088e4ac15ffbbd55bc08fe548131f16008acfda714a2c25f48cca13e6fcb0fbad524ea7e4ba34c0301f150334337cd6d8d64f2d4f6be9822ee31b391e60065c7e08d3c1aa07fd6c5daf3fd62ea55015413adb6736a3b9c1dc9b30d4a67ad3c6f14f04b5a3dd5968c1af427428c2816ed365b16e2c9ca5d30fa0d6397ee92d42410ac879dcaa02ac5ded9e1ac61a8c606bdc1ada5e91f53a538a601b1784679390aa5f98767684c0ed11556d91c0d2111ef26987a09d0d520a8b03a089c4ab6f0a4414bbf48c6e880d24702bdd3119b531f9dbc48530d99d808611258de1b906108b0911196a3647d5ba0b8f5f39439bbc321f3b7386fc4ba072e30a48d937c072a9fe7b349afe5c794ed846c9021a775eeb4d47e22e6d1a58fcad4c242c234246c0adb30ca89d8bb4a32b72f834a44c91d2ee1b0c78d05239b69ad1a6d263c1856b882be3bd890f737f6ca6096090a849f615cb61c689bec10a2900932d43ab7775f2410a809771ea2332c09697176fc1085e262a4c5c04af4981c45e4094911ffefe304c3f202a01fdf0928b168ce8d8959a97aa47533c7b55a7dc3066baafb9377601b0a472c41a6b818c443942246a920b70a9ef55c0e6c71fbc8d6652f72dee9123a97ca10f238be03a414bf42e30c5da31abbe82e2b0a8e7329e6fb5d8a3ee06982987131de2d661e6af7820d56cc81f4e6abbc4dd54c2f04f15300729f3cad7f67507e659c9e583720e1a650bed769decc02ae2da1745660dcf547482088c3789dcb4cda78cab3d2960537b497f82668cba62fecb0d606a2d338e58904263a1bb0647e86accf99e47682a99598e2d815b91be5d9d54f7b7058aa594c1312e923bbb1dabe57f50ef6113b23354363750738b26a68bfeb43719cd4792b4c21fa042d06f1c9c13c44cb607cb177d775f1c4dac35c14f0d1d270f029172fae1bc5744afa7b3b0dbab2bc671908c0bea84aeaca57a664f5f5b40280727f033736f57bf5e03481760294b388f1ec5265cdf4ccdb04f5fb0b009c56f137e9e3529094fb6ebae5ad0c04ec3bd4d2ac021b4bec8553a1eb176a842f1896b170bc17fcc6095b4ef8ca1eeba20821fe741262c6d5288838259f0d4dd860d36a9797f4ff22292793eb2e00e9771434ed909b67bd440ccbab6525e2d9dc0bb1b29698bd478a38ff6f0aac47518efb966872a04d261af1532028398ddb003e710afeb1bf38ca8c5e6901ac6ec3d3e8017952cf3ac7e76845a2827f4e22c9d139d36f48a14d3fa5d1c28b25b3f2a373f5e71943487a02abcbbb0b15642bea5f3987b8cacd90f8b0ffb253534ce69b3306f9339bcf10777b90b395674bb04bbcef3c54bf371dcc5a92d3cec5062821bd6bf1e87c14bc185720bba07f750f1fd998923bfd5254b1f98fce06951aea0ac4085a05776dac390ea0e3edac636781b0413f7da79592ab078f9acd2dbe229df35b2ad3b76538b4d1a751ab06378fe76adf862ee6f04bd80fbf534918d7cc507d7592ac7aa352a33de40fc117398e5ca0fa2f4b1ada4827c6a43ddd435249f7470334bfed653e3c70e4bcbcdff976557f4e97da11ddfaa58141d285c5d7e512201f185abd882816978f0d96a221c523b0dd48c17257fe3f8433927cfb4a02f560d770880741c8b60b4c00ae3bfbb99476abda711d698295b3104941b7e5fd1060e1e21c51ada6a5b2cce48c29a2c856f4dd604546aeb833332d6a71ed5c5aa65cf713719723ad24050dfd3c8eb14a9abd92e41c359d0fc0465d118462bcbadb7f554a09127343188bbdebe2f767ec5bfaee1f8ab492322083081b1ffb671524e8c949003b50df7d765f36fec32272241d65da2e0aed5ab3a9b1dcd22109cb436f5cccd993b4e517b414b54e5419732242b45e76ff0a374d11f7c9bdce1b25c93072a7316666c6cd7a68905547c881618ef874f0d7e92c4897bfdc86dbca9b7f777ec3a93dd7b2222eba67719313af46e58ab6af4fbdaa513d2a7a3b968c98d9579d6ee429309c0b0b3098b75fd4260ea6126e09464fcb00b57b56adf68d8ab52bde1e7bbe438374e9d33982cf92e53b816adf93dc897732041bcd91faec76b1586d2f30800e962179d5afeac00f262ce030675b13e56252f6c89822ef8054bd8fa4ac2864afa0bb8b016827e98da61914070d15d7a26bf4183d113f2fde032062f321bb59c409aeb0369e826babb2d113251d0938581d39104a2dfc05ec4430900e4e5642c605b2d364515b483128a5db0297ca2be865dfa7821b4b683f23382a9cb9d6e3ac4346edf5e57620359cd50b70ef4fc7f912ce5d1536bd136a6575bcb8cb2b55109efdefe86ae3be6bb1065efeadaa9a88b0c2e28203804860632cbc78373053a160e8364deb927425e939d387e989be715863b0480ddc0aa8cc6d11dad25b6e858b3ce5713836a66de20a04c3b92f59b8e905b5bb59fe59b5a4055b9ac59d1b04a00fc111b170b2bf0f268ea02fa2877f4d1b540b51ab34c304860350b96f9cdb9b6e9ff677d41ea915ca696a15ca91e74553cbd443200ce69d07faf6235ec27d481dc0fcc93ae2f835f7fdc339686912f83ddb1aa88cdfc5520fc92696b52ce57d23470d87bbad508602c3752a83f452874c0fe5e9b317020ca8fa260baa3d6f00f19c936513b2559b1d264a266d6816ccc74f0814e1de3659859f54702b9fa777892d9314f9e0868f82db97e7d618b0c447afcbbb8cec8aae21622ad8405e80a064d797d05899bc83a6e11bef373b8aef71e0000bb9ad9aee19ab7ab94fef853fd3cb409d55a48c095b6686cbaa459bcd23fcc1f8130142ec5a89c76df7070cdb18c01d2ced1209fc8a901149155ac656dd393c4d48fc4b9967c4fd8559d3248a594bedc2b1805ad1ab997259ffbe68dc51e9f5a36d61a95e40a987e5d40d155b2f27045712b3f2221f72da89ffe83ab04d398e8ec42658a98d652df3ba77ff3371128b05699c05f232403182aa9a8f3873ebdf30763b020d16a76f9d8f33950d134d780cd241be1c20af083be34ca963182fadd394f1b575fd1148057f3272c57cfded8b7f8c90086dabbd5da983bde088d35b9019e524b71f912aee2a9d1e6298ac002704bd152f8a24faf40328c45f48e7f2e23998bdf5ae429af1d3e37fd1dd66c5762bef4a70f98a9bc9804901549ce801feb1bf0a01c61432b121bbe398bc0c67a5b77eb3484b593672077fb8cebd9ac49e754d7535b803c8429cb7bbae8d2b25cec26de5846ceead8644ca2b873aa258cacd594cc8e3866bcdc8854aa4c2c3212c", 0x1000, 0x6}, {&(0x7f0000000140)="b73e8df71b11eb8103b0c858f77eb93778a5048849715eeafe4083367f382e94cf7a39c51b887d6437392ca18bf583f9a01e8636fdd76962b44f2050cd7680bd392f7779e9d8e8919919b9dfc51716d367fd6195c72415f8e7b58d26ad73c04ab16f92", 0x63, 0x2}, {&(0x7f00000012c0)="45dfa0d29341728a8e01e027955a163e696c277a95bcaee37c246a727d95b43f07c9be29b02fa4327229b6fbdb4c05958f33db1cf868085ae9b04620e67ba7546248d00f4efbc66927c08a8130fcfbde374f8ddd5dfb08cad17f2b4888c8f492412dd5ab763176d087201c", 0x6b, 0x8000}, {&(0x7f0000001340)="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", 0x1000, 0x1f11}, {&(0x7f0000002340)="b447b77136b30d26292c6adcc9aeccca05c9b76dc4d57120bed113854aa5dd80e8a1a40f8a26427fb1ad9cb3e480dbf20a64cf5a22787fb45edde7d64c92ec684c8f0e9d700c8a70c7b48263026ec151e34ec26745bc885525a7639b943e313ddb11de9dc5957eecd38ad1377ef64200bf3db50637074ee63c0be2176fc3", 0x7e, 0x24000}, {&(0x7f00000023c0)="a1d7fd3f88e4b43d9d7ebf4655fd9aa46b0959b6ba2bf291c62053136264061d1c9e68b7fe2ed16eff77113cf664aa1e7dcc6fc89cadf2b737e5a7617c0b2a8de34097e816d7c08b3190781d0ee8ee5d7caed0b326f306dd6875aa5e8824a490c13b27f761610776bc19f065a4c142a4bda698445f200cbdacfaccb041a0dc255b3f39222d715135d271d2f8ffd1abd698fa4e13f432d01b882b4c48b9bd7003e3645c8027ac69c40b41e802bf5702fb621c4ac28d3521e3a14bd8024b6c3fa02a6ba09278f2e88be68293d60976780bd1958350126d97e8fbc4b6971782a5d55806dc07527f808abdcf48e4584b55bbdd3d", 0xf2, 0x4}, {&(0x7f00000024c0)="e230aba8bb30a740591e82b840d04283bc20e37f2345f5c7af8cd705f37ad1bba2c26e006b05616ab0de6b7de20b8ea84a23ad3a55ae2c730936fc5c6fa4386e0ff0ed6dbe9ea5d0ef02da25387ff3e5376eee3d8749a97c76d154c83147bdcfc9b1135bf8f61a907749c9f1a4b4b6d4c614c47144fad8b69664d336eba513ac20afde7652f5f7f1e008abc0bf3b10637081a1829da7ba1714de122cc63b8352cb6088534b58a13e4efb52f6e771b616847910b9b78eb834444f0271720af28d9f70e946cd96179e3c34", 0xca, 0x2}], 0x1002002, &(0x7f0000002680)={[{'ext4\x00'}, {'ext4\x00'}, {']\\\''}, {'ext4\x00'}], [{@audit='audit'}, {@obj_role={'obj_role', 0x3d, '\\**}W{\x8a}{(.'}}, {@subj_user={'subj_user', 0x3d, '{&&'}}, {@euid_eq={'euid', 0x3d, r1}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fowner_lt={'fowner<'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 312.659843] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 312.690055] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 312.735826] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:18 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 312.814931] FAT-fs (loop0): bogus number of reserved sectors 04:05:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x8, 0x200000000000004, 0x0) [ 312.857515] FAT-fs (loop0): Can't find a valid FAT filesystem [ 313.002970] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="26000000030000000000000000000000000000000000000005000000abd800"], 0x26) ftruncate(r3, 0xe32c) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r4, 0xe32c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r7) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r1, 0x0, r8, 0x0, 0x883713, 0x0) 04:05:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f7de41aae91ec981b7b3bf9e8d"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8d0}, 0x880) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000027bd7000fcdbdf25010000000000000008410000004c00180000000173797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff4494f269216eababd8a832b5586200"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x9, 0x200000000000004, 0x0) 04:05:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 313.192601] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@any, 0x3}) [ 313.412053] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xa, 0x200000000000004, 0x0) 04:05:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746884754b555b4fc37b3e00000200616e0000000080000500070088000000140017007678676d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30ad7f654a005ef4aa10dd52c211aed3a856ebeeb1cbacef93b61c9070a61f2e3c5d4d6a557cb5baf7f868377ae530cd502a6f471769c53c74ab7cb5104e4d2024dc99f541be4995a93bb110208eafcaa476c053aad49c74af1273c78e1530ff53de126861c4524928215f4e8a28fba0b2f8627a804334b2fef3a04e07bf4d1038def034b213be17ae3d4ce1d4de0ffe0ce5aee4f14237b09e5bff2175fc40be9bb87573886845013f139ccd4f77ee2d64fe9676795ecacf2f7552891eb4bb3676fb7285aa18350f98664760533fb5bc676e02659ddef4629901b65a727464263b91408187d598187eac84cdab33119785689342bef8c885767b4eeb12b0a80f56c47f4e4040d096193261b3031a82e640d928e6c42a35f113ef640528fa59474d205ee258dda342bbedc6fa7bf484486c28849785350187f77b375c5c842be586ed509cfc4de358c1"], 0x1}}, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r4, 0xe32c) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x7fff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r5, 0x0, 0x883713, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x4, 0x508, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f0000000040), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x1, 0x88f7, 'vxcan1\x00', 'veth1_to_team\x00', 'veth0_vlan\x00', 'netpci0\x00', @multicast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0x0, 0xff], 0xde, 0x176, 0x1a6, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x1, 0x2, 0x806, 0x0, 0xa}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x4, 0x9, 0xc9, {0x1f}}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"ebb4f8e1fb89a56394d89555a74e182f533b507fbc414d2ceb74b25ce2f6"}}, @common=@log={'log\x00', 0x28, {{0x4, "6b45a427d78a15e9dc137dcceffc2d110fd0e9b02eb8f0d08a688a8f75b9", 0x8}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}, {0x3, 0x22, 0x5, 'bridge_slave_0\x00', 'syzkaller0\x00', 'bond_slave_1\x00', 'gretap0\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0xf}, [0xff, 0x7f, 0xff, 0xff, 0xff], 0xae, 0xae, 0xe6, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x800}, {0x10001}], 0x0, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x3, 0x809b, 'veth0_vlan\x00', 'ip6gre0\x00', 'wg1\x00', 'vlan1\x00', @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @dev={[], 0x3f}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0xf, 0x2, 0x1c, 'veth0_to_bond\x00', 'syzkaller0\x00', 'team_slave_0\x00', 'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x0, 0x2, {0x4d00}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0x580) 04:05:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x440000, 0x0) getsockopt$rose(r0, 0x104, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) sendmsg$AUDIT_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4) 04:05:19 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @remote}}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"a42d3c4bba7e5bc62f69653d1b6ff66b", r7, 0x0, {}, {0x3}, 0xe980, [0x100000000, 0x5, 0x20, 0x93f0, 0x8, 0xff, 0x4, 0x0, 0x0, 0x400, 0x1, 0x1, 0x80000001, 0x1, 0x3f, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000001c0)={{r6}, r7, 0x16, @unused=[0x7, 0x3, 0x7, 0x714c2649], @devid}) [ 313.926465] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x63, 0x200000000000004, 0x0) 04:05:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x8040, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002640)='/dev/hwrng\x00', 0x446002, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000002680)) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r3, 0x0, r5, 0x0, 0x883713, 0x0) 04:05:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 313.974907] FAT-fs (loop0): bogus number of reserved sectors [ 314.038959] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)) 04:05:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f7de41aae91ec981b7b3bf9e8d"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8d0}, 0x880) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000027bd7000fcdbdf25010000000000000008410000004c00180000000173797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff4494f269216eababd8a832b5586200"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) [ 314.284010] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 314.335386] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 314.350031] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:20 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x700, 0x200000000000004, 0x0) 04:05:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="00394570665dc38c0e13b6683fb87f875906313c2d4a02005fc6110670526eb874", 0x21}, {&(0x7f0000000300)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c7a6808890239fb4c7dde6a19b15d82deb44d3a98e09246741d7833b50c4f398e998b5b8b6ce13ea76e1e0f0be69bf7f48b48a61edcea7a4fdc8a6d70d7f1c3567aa8ee0ea7d5c14c498c2b5f5d51218ae83138e453163c3f8114e85dc32310a4b6fb469e19a09e90697a823918fa3eb7c0831629f66ae29a", 0x8f}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe9132c7215a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x68}, {&(0x7f0000000200)="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", 0xfe}], 0x4, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x1}], 0x1}}], 0x2, 0x240048c0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r3, 0x1, 0x5d0, 0x3}) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000000c0)) 04:05:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(r3, &(0x7f0000000100)='./file0\x00', 0x10a00, 0x8) sendmsg$IPSET_CMD_DEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r5, 0x0, 0x883713, 0x0) 04:05:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf50, 0x200000000000004, 0x0) [ 314.825629] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{&(0x7f0000000640)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40001) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x0, @mcast1, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000000e40)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$CHAR_RAW_GETSIZE(r2, 0x1260, &(0x7f0000000040)) 04:05:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x100) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6900, 0x7ff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f00000000c0)=0x5000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x410, 0x4) lchown(&(0x7f0000000040)='./file0\x00', r0, 0xee01) 04:05:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf52, 0x200000000000004, 0x0) [ 315.051192] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 315.098344] FAT-fs (loop0): bogus number of reserved sectors [ 315.126779] FAT-fs (loop0): Can't find a valid FAT filesystem [ 315.135234] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 315.144021] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 315.186892] net_ratelimit: 11 callbacks suppressed [ 315.186902] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 315.237081] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4102, 0x1006}], 0x1}, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x1000001bd) 04:05:21 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x80, 0xff, 0x29, @private1, @mcast2, 0x7, 0x40, 0x3, 0x1}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r5, 0xe32c) keyctl$set_reqkey_keyring(0xe, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x0, &(0x7f0000000040), &(0x7f0000000100)='syzkaller\x00', 0x200, 0x96, &(0x7f0000000200)=""/150, 0x40f00, 0x2, [], 0x0, 0x16, r3, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x1, 0x7fff, 0x81}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000400)={{r6}, 0x3, &(0x7f00000003c0)=[0x0, 0x7, 0x6], 0xffff, 0x4, [0xff, 0x800, 0x3f, 0x8]}) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf55, 0x200000000000004, 0x0) [ 315.725860] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 315.754470] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 315.755538] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf57, 0x200000000000004, 0x0) [ 315.863580] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:21 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000c00)={@sco, {&(0x7f0000000b80)=""/3, 0x3}, &(0x7f0000000bc0), 0x8}, 0xa0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x98, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0xfc00}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004) socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000340)={0x0, 0xee7, 0x8f4750b743f86fb8, [0x80000000, 0x6, 0x3, 0x21a, 0x88], [0x3, 0x9, 0xfffffffffffffffd, 0x5, 0x41, 0x9e96, 0xfffffffffffffffd, 0x9eea, 0x10000, 0x10000, 0x1, 0x3ff, 0x6, 0x3, 0x8, 0x4, 0xffff, 0x9, 0xf8ad, 0x3, 0xfffffffffffffffd, 0x3, 0x1, 0x9, 0x1, 0x1, 0x7ff, 0x2, 0x8, 0x7, 0x401, 0xffffffffffffffc1, 0x97dd, 0x2, 0x0, 0x7, 0x8, 0x0, 0x5, 0x0, 0xff, 0x2, 0x595c, 0x80000000, 0x7fffffff, 0x7, 0x40, 0x8, 0x7, 0x401, 0xe89, 0x3, 0x5e, 0x6, 0xffffffffffffff04, 0x7, 0x0, 0x1f, 0x9, 0xffffffffffffffff, 0x9, 0x1, 0x34, 0x3b31ad42, 0x0, 0x9, 0x9c25, 0x5, 0x3ff, 0xda, 0x0, 0x9, 0x5, 0x8, 0xffffffffffffffff, 0x9, 0x9, 0x3f, 0xc39e, 0x6, 0x10001, 0x8, 0x4, 0x6, 0x20, 0xf083, 0x5, 0x4, 0x0, 0x5, 0x20, 0x3, 0xcb9, 0xd9, 0x80, 0x400, 0x7, 0x101, 0x9, 0x3fc, 0xffffffffffffff80, 0x686, 0x3ff, 0x3, 0x3, 0x2, 0x1f, 0x5, 0x2b9, 0x4, 0xe0c, 0x4, 0x0, 0x5, 0x0, 0x1e, 0xfffffffffffffc00, 0xb4, 0xffffffff, 0xffff, 0x4]}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000780)={r6, 0x3, 0x2, 0x1}) 04:05:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) [ 316.132355] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x640340, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000100)={r6, 0x6c}, 0x8) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x82180, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f00000002c0)={r9, @in6={{0xa, 0x4e21, 0x3, @private2, 0x6}}}, 0x84) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x101000, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r7, 0x0, 0x883713, 0x0) [ 316.207818] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf59, 0x200000000000004, 0x0) [ 316.324710] FAT-fs (loop0): invalid media value (0x00) [ 316.385269] FAT-fs (loop0): Can't find a valid FAT filesystem [ 316.470776] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 316.527260] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 316.577245] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf5d, 0x200000000000004, 0x0) 04:05:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x710, 0x1, 0x5, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x3}, 0x3f, 0x3f, 0x9cd, 0x7, 0x9, 'syz0\x00', "124b845b7cd698cd26c11297486a3ba258e51d0f25cabc7a0b64987c3a2f79cb", "c6cd76c38c60e05d5f721ed992df1116f0b252fc9f21cf1f7205a134399db523", [{0x0, 0xfffe, {0x1, 0x240000}}, {0x0, 0x3, {0x2, 0x3ac6}}, {0x0, 0x40, {0x2, 0x9}}, {0x1f, 0x6, {0x0, 0x6}}, {0x4, 0x4, {0x3, 0xbd3e}}, {0x8001, 0x3, {0x2, 0x1dfc}}, {0x7, 0x8, {0x1, 0x401}}, {0x20, 0xffff, {0x0, 0x2}}, {0x9, 0x4, {0x2, 0x11a}}, {0x2, 0x5, {0x1, 0x1}}, {0xb4f5, 0x2, {0x0, 0x800}}, {0xabb3, 0x1000, {0x0, 0x9}}, {0x2, 0x6, {0x3, 0x2735}}, {0x80, 0xfe00, {0x2}}, {0x6, 0x7, {0x0, 0xffffffe1}}, {0x6, 0x0, {0x0, 0x7}}, {0x854, 0x8ca, {0x2, 0xfffffff9}}, {0x2, 0x2, {0x3, 0x8}}, {0x0, 0x1, {0x34cda4b993346152, 0x1ff}}, {0xffff, 0x3, {0x3, 0x8}}, {0x6, 0x401, {0x3, 0x800}}, {0x9, 0xef, {0x1, 0x7fffffff}}, {0x256, 0x2, {0x0, 0x2}}, {0x4903, 0x5, {0x3, 0x1f}}, {0xfff, 0x4, {0x0, 0x200}}, {0x7, 0x1, {0x3, 0x7f}}, {0x400, 0x2, {0x1, 0x20}}, {0x4, 0x7, {0x1, 0x9b47}}, {0x101, 0x81, {0x0, 0x801}}, {0x9, 0x1, {0x1, 0x1ff}}, {0x1, 0x8000, {0x2, 0x8}}, {0x0, 0x0, {0x0, 0x7}}, {0x7a, 0x1, {0x1, 0x9}}, {0x6, 0xff, {0x2, 0x8}}, {0xfff9, 0x77b, {0x1, 0x101}}, {0x9e, 0xffff, {0x2, 0x5}}, {0x0, 0xf801, {0x2, 0x8}}, {0x6, 0x9, {0x0, 0x6}}, {0xffff, 0x7, {0x0, 0x5}}, {0x6, 0x24b9, {0x0, 0x80000000}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x20, 0x95, 0x7, 0x1, 0x17, 'syz1\x00', "290f115ac97de6a70af8242f2d02126aa5c5965966aaee6eddec33f037c7f134", "8ddef3d8f43056193505b7e167ab74a78ac917cb88adc71bcbef84bbd86ba6ae", [{0x843, 0xfff, {0x2, 0x2}}, {0x0, 0x5, {0x1, 0x8}}, {0x8, 0x1f, {0x3, 0x6}}, {0x4, 0xffff, {0x0, 0x4}}, {0x8, 0x7, {0x3, 0x6}}, {0x6, 0x400, {0x1, 0x8}}, {0x3, 0x2, {0x0, 0x5}}, {0xb82, 0x6, {0x3}}, {0x10, 0xf86c, {0x2, 0x3}}, {0x81, 0x2, {0x3, 0x2}}, {0x7f, 0x6, {0x0, 0x7af2}}, {0x100, 0x7, {0x3}}, {0x3, 0x1, {0x1, 0x100}}, {0x3, 0x9, {0x0, 0x2ac}}, {0x8, 0x401, {0x0, 0x81}}, {0x1, 0x0, {0x2, 0xffffed6a}}, {0x8001, 0x6d0b, {0x1, 0x8}}, {0x100, 0x6, {0x3, 0x6}}, {0x8, 0x8, {0x1, 0x6}}, {0x7f, 0x2000, {0x0, 0x7}}, {0x1, 0x0, {0x2, 0xed7}}, {0x3, 0xb53, {0x2, 0x3}}, {0x101, 0xbe, {0x2, 0xfffffff8}}, {0x9, 0x1, {0x3}}, {0x200, 0x1, {0x0, 0x48e}}, {0x4, 0x3, {0x0, 0x81}}, {0x4000, 0x2, {0x1}}, {0x5, 0x5, {0x2, 0x100}}, {0x6966, 0x80, {0x3, 0x400}}, {0x6, 0x1ff, {0x3, 0x8}}, {0x1ff, 0x7, {0x3, 0x7fffffff}}, {0x7, 0x8001, {0x3, 0x1ff}}, {0x1000, 0x5, {0x0, 0x80000001}}, {0x4, 0x3f, {0x2, 0x6}}, {0x200, 0x800, {0x2, 0x9}}, {0x1, 0x3, {0x0, 0x6f87}}, {0x3, 0x25c8, {0x1, 0x3}}, {0x6a, 0x1f, {0x1, 0x4f5b}}, {0x37e3, 0x0, {0x2}}, {0xa7, 0x79, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x3ff}, 0x4, 0x7, 0x20, 0x8, 0x7, 'syz0\x00', "7510027bda03b75d9b3b06fe7c85cb8d4e14dc0b3baaee3c3f4affbdaa3569ff", "bd242081d551441b22fe7cb8b6ae9dbaa101b571b4676738fc33ad11b5bb77d6", [{0x3, 0x3, {0x1, 0x7}}, {0x9, 0x7ff, {0x1, 0x5}}, {0xfff, 0x401, {0xac42a8f1e6aa484c, 0xff80000}}, {0x4, 0x7, {0x0, 0x100}}, {0x3ff, 0x9, {0x3, 0x80}}, {0x3, 0x7, {0x1, 0x4}}, {0x7, 0xb3, {0x3, 0x1}}, {0x5, 0x101, {0x1, 0x3}}, {0x3f, 0xf66, {0x3, 0xfffffff8}}, {0xfff9, 0xfffb, {0x1, 0x1}}, {0x9, 0x7ff, {0x3, 0x7f}}, {0x8, 0x400, {0x2, 0x439a}}, {0x6, 0xffff, {0x0, 0x8001}}, {0x62, 0x7f7e, {0x54802f3b774483a5, 0x3}}, {0xff, 0x8, {0x1, 0x5}}, {0x4, 0x0, {0x0, 0x1}}, {0x40, 0x6, {0x2, 0x7f}}, {0x7fff, 0x9, {0x0, 0x80000001}}, {0x1, 0xd43, {0x1, 0x8}}, {0x400, 0x8, {0x1, 0x7f}}, {0xfffd, 0x6, {0x0, 0x7f}}, {0x0, 0x3, {0x1, 0xfff}}, {0xfc00, 0x40, {0x3, 0x9}}, {0x5, 0x1, {0x2, 0x6}}, {0x5, 0x7f, {0x0, 0xfc}}, {0x401, 0x3f, {0x0, 0x10000}}, {0x400, 0x40, {0x3, 0x2}}, {0xfff7, 0x0, {0x0, 0x4}}, {0x3, 0x81, {0x0, 0x1f}}, {0x4, 0xffe1, {0x1, 0x7ff}}, {0x0, 0x8000, {0x0, 0xb154}}, {0x0, 0x4, {0x3, 0x401}}, {0x5, 0x3, {0x2, 0x2}}, {0x6, 0x6, {0x1}}, {0xd6, 0x8cb, {0x0, 0xfffffff9}}, {0x0, 0x3, {0x3, 0x1}}, {0x200, 0x1f, {0x2, 0x4}}, {0xfffe, 0x2, {0x2, 0x2}}, {0x6, 0x6, {0x3, 0x9}}, {0x40, 0x254, {0x2, 0x4}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4800}, 0x20040000) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000a00)={0x17}) 04:05:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:22 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x210080, 0xcc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000028c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 04:05:22 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) [ 317.183166] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 317.222937] EXT4-fs error (device loop3): ext4_quota_enable:5835: comm syz-executor.3: Bad quota inode # 3 04:05:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf6e, 0x200000000000004, 0x0) [ 317.227600] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r4, 0xe32c) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES64=r1], 0xfdc6) splice(r2, 0x0, r3, 0x0, 0x883713, 0x0) [ 317.354487] EXT4-fs warning (device loop3): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 317.395282] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 317.424443] EXT4-fs (loop3): mount failed 04:05:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf70, 0x200000000000004, 0x0) [ 317.515383] EXT4-fs error (device loop3): ext4_quota_enable:5835: comm syz-executor.3: Bad quota inode # 3 04:05:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 317.557734] EXT4-fs warning (device loop3): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 317.617811] FAT-fs (loop0): invalid media value (0x00) [ 317.621249] EXT4-fs (loop3): mount failed [ 317.656657] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:23 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) r2 = dup(r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x358, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) ioctl$TIOCEXCL(r1, 0x540c) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 317.731818] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf76, 0x200000000000004, 0x0) [ 317.946034] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4dd}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000140)="8081000000180000d4f4655fd4f4755fd4f4655f00000000000001008000000010000800000000000af30100040000000000000000000000020000003084d6151fbc0c2c4e3cff8ddebcc225", 0x4c, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r0, 0xe32c) symlinkat(&(0x7f0000000040)='.\x00', r0, &(0x7f00000000c0)='./file0\x00') 04:05:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:23 executing program 4: pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)="4f09ae978b49d398e1392de7b9afa28b5d66a011fd", 0x15}, {&(0x7f0000000200)="cb6d4483f71deaff5d51a4d8ad9e7f3f6b8b739fdf753e5b785467a6b60622a411b283ad54aa3b1addef5929efe7f5ece1f6ea7137658ead7e167485c17e29d84b75e393ffe67cf22762c1b261154b306cf5271451139fdbb8880b6983fac3fa6649", 0x62}, {&(0x7f0000000100)}, {&(0x7f0000000280)='s_\t', 0x3}, {&(0x7f00000002c0)="32e063be", 0x4}, {&(0x7f0000000300)="56d903fc1a1e3012c8e0634b6d8343193bcc13cf28e7bb10e6d51a3b2567b63f4a536abf5460b41094da08af3044ee7abe043d25b104cd50a2bedec595c67a693be8a61df57e10ea437e0d839992045775ba7db8e12a6adb214c9ad12762311d", 0x60}, {&(0x7f0000000380)="9127f3aeb3cd13e87910b3a5db9335a0d0bbcc42855135357e18e68a8c5c2a87c04d7b1b9d409f977aa42265ba705d6e966226705ab518d4a7ed12ed637b37c3765236d9abab0f52886351b08597a80c5bf33fd36751bc6f7f", 0x59}], 0x7, 0x10000, 0x2, 0x1e) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf7f, 0x200000000000004, 0x0) 04:05:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) [ 318.517906] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 318.656525] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf85, 0x200000000000004, 0x0) 04:05:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r8, @ANYRES64=r6], 0xfffffffffffffeaa) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 318.837235] EXT4-fs (loop3): unsupported descriptor size 0 04:05:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf8e, 0x200000000000004, 0x0) [ 318.983945] FAT-fs (loop0): invalid media value (0x00) [ 318.989271] FAT-fs (loop0): Can't find a valid FAT filesystem [ 318.996742] EXT4-fs (loop3): unsupported descriptor size 0 04:05:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf97, 0x200000000000004, 0x0) 04:05:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) 04:05:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf9a, 0x200000000000004, 0x0) [ 319.297702] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4, 0x80, @private1, 0x9}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, [], 0x1}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x42}, 0xffffff81}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}, 0xfffffffd}, @in6={0xa, 0x4e20, 0x760991af, @dev={0xfe, 0x80, [], 0x27}, 0x1}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0xff}, @in={0x2, 0x4e20, @loopback}], 0xf4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) write$input_event(r1, &(0x7f0000000140)={{0x77359400}, 0x3, 0xa6}, 0x18) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3, 0x400}, &(0x7f00000000c0)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r6, 0xe}, &(0x7f00000001c0)=0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000300)=0x69) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r4, 0x800}, 0x8) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:25 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xfa3, 0x200000000000004, 0x0) 04:05:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x40, 0xfffff0a7, 0x0, 0x3], 0x4, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1410, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0xdd7df07464f89550}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x40014) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r5, 0x0, 0x883713, 0x0) 04:05:25 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$can_raw(0x1d, 0x3, 0x1) fstat(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r5, 0xee00) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000140)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000006c0)="bd88d60d9718c40077be8efe38f2eaa53e4cffe32158d44ea31705e63a94552af9fcc3908924879d00738bd75cf6e279bd0e6d14ea27ad156eea8e8c076f359a5f072e07eb4f78b3086153d6a6c55e50984f360c20a8750fdda78dde5b72791fdc4a6538773d99c813df35edbdce8506a1c980d4bc1e4a7842117bbe169db680e54e9551272b5329684851ae1be59dbf80", 0x91}, {&(0x7f0000000780)="8707d71aec0eccb6912b14becf68e94f4018e226c114ef19add03165a3690eee4a7b01bd756389f4761c242661f76877ea5675b3a88b80c3dfd5d54bcb25a25f0460139d92718c109e928d9a9cc5f6c910aa907dc7478b17f2eb55acf584e7009f838a2698ec71c4b740556884274b7e19f27d948a277da5ff7d66b86c4e1e6e1f0704b29b45e3dd1a05", 0x8a}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [r10, r0, 0xffffffffffffffff, r0]}}], 0xe0, 0x4000005}, 0x800) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 04:05:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xfac, 0x200000000000004, 0x0) 04:05:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 320.031701] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 320.054130] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa1400170000000000000006f2616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000040)=0x3ff) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) [ 320.218184] net_ratelimit: 11 callbacks suppressed [ 320.218194] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 320.244223] FAT-fs (loop0): invalid media value (0x00) 04:05:25 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000006, 0x8010, r0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3cea7ceb0003010200000000000000000700000a28000f8008000400000013000b0063d0540ed5e69283d857fe3f6c6c666f7277617264696e6700000800084000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x200040000, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000300)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b00000080000000080000005247abdd0eabb554c12df2b35c3f0e4fe95b46de3ccc31e66e9e0c487fc0ada943c61136fa37b4baa4145bf42d7dbd37a50afca3d05bf536886e5808b1800a2eded1d631e68552542e4a821720f649e0a7d567ff394f1ca027a85979f71c692c3185648e7d4ebf93a3b64b1088b005ebb14a461b29fe76", 0xd7, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x5048}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d22504d4de2", 0x8, 0x1}, {&(0x7f00000001c0)="148ad10a4183157c50fd3d5c3b527084b77454241d620cb69372014eabed8e43b8d898a921d0c259bc3d9b4c8b17a1cdde9c7bc015af5a9dbcff073d0d718fbade9cdd5811", 0x45, 0x2}, {&(0x7f0000000240)="64d2f9e739a0bd6b609332762d45d4532153f44ac941c43b0849f6c40202b439ca5e33ea9abdbcc2c68e9d6181ddd6e8", 0x30, 0xffffffffffffffd5}, {&(0x7f0000000400)="1d34dcbef2e2905815e06044813047f3bf30c3cb44e75c9824c4a2ca5258ff7705789576ea457be2fc966769de448b7a502b67ca3f5236daf361bc111b084988be057adf145cb59792b8396ed04cf1b289d80f747d5bbf9646d81e74be0a0f24c72b29087dacd49282c187d595d0f6598fbf255cfec376d049eb91c00e2344057816be8a66b4d4370ae6651b2482bbc2be2dcdc3207cdc185cb251efae3a72e19125437bf2ffccad99df1d8bfb83418d2915a22da4589a6ef89bb11942dc91eeda2a424103ea4f0ce43f265d0e9b7e215ece3dfa0f5e9fda841a797ff409eb6c", 0xe0, 0x2}, {&(0x7f0000000500)="44433ff6ab94fe9538429175f8ceebc6cc758ef92e6447b9581b08143b5852b1170a3ab8990257e295a693e884caa570e65b638b18206dc2297e017ab84203923aa6d07af78b804bb2d34586e45f468b5a1ec9c84dd87c50d3f911d9100d06646cd52a1677b530643eb53bc3b2841f585868edad6ff73ea4fa640ae23d534f31f07ccc2a73a2088d2744bd750ab05214d4cbd1de28fd3d297050ab29518e8427054e98ab2463c56f558e281b", 0xac, 0x1f}], 0x0, &(0x7f0000000280)=ANY=[]) 04:05:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xfaf, 0x200000000000004, 0x0) [ 320.292104] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 320.296606] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 320.379660] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 320.450657] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 320.464443] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 320.472549] EXT4-fs (loop2): Unrecognized mount option "<|" or missing value 04:05:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r2, 0x0, 0x11, 0x0) semtimedop(r2, &(0x7f0000000240)=[{0x0, 0x100, 0x1800}, {}, {}], 0x3, 0x0) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000200)=""/63) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e00000000800005000700880000001407000000000000003100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r3, 0x0, r5, 0x0, 0x883713, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x505000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000100)) [ 320.512731] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 320.726485] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xfb4, 0x200000000000004, 0x0) 04:05:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:26 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0xfffffffffffffd6a, {0x2, 0x4c30, @local}}, 0x24) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r1, 0xe32c) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x24, 0x3, 0x0, {0x2, 0x3, 0x0, '**-'}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10010000cc7b564ab1f45f3c8fcda3126cf80131ffcd7e6662b52f7869ce95031add8101f5a0ac474f0c6457878470113e3394ca4276d6473a1e2aa4bf44b98685109e0bed357befaff9a25669d8f8a3c56c5a10827392fab69514776e39c8322fa03e32642a28d52724afe756b51e967dcca17f929fda33621ba58613129743f86e332c5f502b34106b323bbc6c88b77a9bb87668a4c45f1b450ba9c62c9d4d2d4a09083005f0488da899782db6b20cc671b5f63ea98f6f69605a436bf32c97dedcd36d4d01e26868540baeeccefc8dc4b138c7db3c8cfe9a34db98c2c7e026dbfa1289e497ae123a10b7"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x0, 0x0) 04:05:26 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lgetxattr(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)=@known='user.syz\x00', &(0x7f0000001b40)=""/77, 0x4d) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) llistxattr(&(0x7f0000001bc0)='./file1\x00', &(0x7f0000001c00)=""/91, 0x5b) sendmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{&(0x7f0000000140)=@in={0x2, 0x4e20, @broadcast}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="8fb1eca4f19e3cf136a3d1957381ec2d55c9ccdae627356371ebd7ee68dc3404adef4ae066569300eb4e829e23e4d4c4bd630b096dbed8d0bac65781c0729766faab2ca8a3ead65740eee277853df4b4cc5ea6f6c0890517d50f6bb9efc041808fc4ceae33bbd28bbd30c69a6e80c0fc86c97cefe26db2a52d9e32db43b2b8f70aa85eb17b39f75d43ed3cd91d16e9074aaffff8c6926b461681d54a885425151402268410321e544cae57cb90a46e94f0f867174e3cdf371a18997ff4e193c52b4f05b2ad40a1b34c0711b9e7d3611ef4a5bdb82d6d1d034964220c549e3eb22d94f5c0c059b962116c1ce8e1028f", 0xef}, {&(0x7f0000000040)="1a4baa3569f10b62df8d0f1cc45d9b7e54ac24f703a3dc7b81ae39391daf0962", 0x20}, {&(0x7f00000003c0)="4a076022152f78b77d276fc0949a37f71f74f0f5f07145788f21a90af45e23bbef18c334be1f328b1e5317dd8b2e411e3a92517832ba85d893e5c90c4bc6327285baeb0474109c3dcdcc3129446a74f03a16776fc4a399e28ebf0d9f44fdb6afd30835825ad830e7d5909683256bd41f3c78", 0x72}, {&(0x7f0000000440)="24e9a7c3f8cccd52b2c4b2127bae3bb1b29e7fbc2100757c113b2ea369bd1da49538f1df715a3c8ad753224b01521bd8f7fd0b010573048771b2c1557e69343716c60e82e691e356ee8d753ae4e4380548968b3afe86f77f", 0x58}, {&(0x7f00000000c0)="c7527a529174a400b51885936ec98c4faeb56805f45c1213b68e1bc8fd3e376049", 0x21}, {&(0x7f00000004c0)="8bde0254c72c608ea196ea9fb1c3e02c1f76e95f7d3cfcff99ccf3a529a4c4cda2a780aa0954b9e2e9d6ef64fe0dbfc68c9b06e38be53f6b3e0d7acf065313f4afc656d7102b01f9618e137062cc274f373eb70aa682747bf9f0b8d0ae77f18ed509831e29fa21fbf51f519b259e886247b2", 0x72}], 0x6, &(0x7f00000005c0)=[{0x1010, 0x113, 0x0, "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"}, {0xc8, 0x116, 0x5e1ea568, "c8760273bed56f4ca402cfaa264af755e606dd85e247c4239c824795e496a03e7eada575b920caeb35d7db5d51ec4da61654ddcaf6cbe93d2043792cd919cda3d782c642250e0724ccefbf4b3c9509c923a96aa6f49b95a7b6fe0e5bb9e563d858cab563afc796573ab7af463baa8805eb4e0bf6f9c6f80415dff71291fcd71d99802a89d2389614fcea499e33c5ec28a835d8eb1ab550f407f39a7f8105496014d8131e334ad8b40ee33421d33abaad0f"}], 0x10d8}}, {{&(0x7f00000016c0)=@nfc={0x27, 0x1, 0x1}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000004d80)=ANY=[@ANYRESHEX=r0], 0x268}}, {{&(0x7f0000001d40)=@llc={0x1a, 0x305, 0x4, 0x0, 0x7, 0x2d, @dev={[], 0x12}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001dc0)="4e0ceb792bafe450ee9dae43e2d3a8ec174e38835cd922a3e0734eb3790e5b40233c510b4f1f70c172fef19b25dfc0b187d36f20b1b900f2b82510ba68f98c696c246b050e4a17ad3a5587701599fdde34cfc7b2f5e45b0dbfe4f4263a0192f688130faff2349d6d9d48adae5b59c25ccd2b6921002851cab25c23b78430e6352564fcfc666db6f7037836f3927872647cdbf3efeb8fa2d32289f18d59181bc9b4806a9c4d31fdf07638ffd1e669ac0830b21c19a7bdf420c3a8ba040b07c0468a31208c4c4233621c842ccf63ff0d9a6ebc9e4360fc84b00df11766736d1efd0191693b9c2e195bcd5b9138ef6e5609bc0a992907", 0xf5}, {&(0x7f0000001ec0)="4d9c7d5f7fb31d2f9b21d5385e7817c5bd87dee91978431fee8d269d3a51c5b28a30a2f23137dbbbdcd9e69f2104dca863e941c8312ecaaae8d61606b76c2e054b3e508c73e89c52988058436eca1b09a40e39b5ec4f5309867e4c01cd693b2b5aa98f5eb42e82635c8899054c05b7f00ed26812a947a73249e18380ee1defa93db2702042bd58834c97fab53dad5c1fa1a0c751e6f54aad9949df533fe5d10dcc5ff1e0b2230c7f9ad1f08eaa8abf0d3e721798abf428a8b04bcf8c9e17d09c097b88f7b913af4d3d335a73dcdda3191a76c53d91b356662c81dfbf88c9c31dcba3c14468a11fa081f3ba8faeff1bda12eae2a8", 0xf4}, {&(0x7f0000001fc0)="01b88fad8e2dcf5150bf513af798397647a23a28e8b2b3c3360608ef762ffc4a3f724bff8f313a1f3cff9dd8ffd85e0e3cb2e7e738d08b9834d1f51fe6644ff8b069c54bc80b431bf1e726dee9a1d16299339b3419ca87378931ccfb3d2e9c647bb911b1873e1ae7803b3deb61a77945a21671f778b0b2ba29c808ec72325c1b99b2940cf5df6fa897645d86e2200587ca6e9becd2a05fdf61a82e4e96ff036fdf57bcb7ab6f3da01545b15a2f4a735fb7d2054eee9d57920c63", 0xba}, {&(0x7f0000002080)="7aaf02414e6283", 0x7}, {&(0x7f00000020c0)="987ff1339851", 0x6}, {&(0x7f0000002100)="b0bbc0fbc1c13b856de4b729e4507c6f7c79a7545b9b2da755753e2e4a6e77e97ccb287e452d3fc1c696019654bddb069b7c74e2a51f51d33d6304783cc16a4b6e81232cfabf2bc0c788bf2221604441a6fabe53cfa6a6d487dfc10cfa7ef043d57192d74cd2659c3bc02c6c3bffe6f97cf9512a4834553ba626e95c9254824dfa42d300e7f6249fe84c795fcd57f8da1ea3ccc43c40537b8425af2c7af04ccbff9d8e4a0fff56dfa508192705daeb99332f3c0f32c97665445a6bfb1ea90d18f77298342dfabc180c80a525b811eaaf70a085a1a43fce642aa0f8bbc27f9c550760afff25758a4745237e", 0xeb}, {&(0x7f0000002200)="9e7de5351f071c58d982ecb5f2b28435fc135fc9e767d0eb2bf6a6525a454299417034913f40e9dfb0e5c22055d76ba2a8ffbc14735d9109f74d49f53c8f153fb82583c5aa7cbd2afe4c8d2688e24878c95aa16d6d038d2fde5f12b07b9c2430e912fcba51b0cb118fc7c94211b6dc340f927fd9553130ac49bfeffea4fe9d", 0x7f}, {&(0x7f0000002280)="6f5650526015958268df8271d5dd1e877a6fb3e0d847502f4e900891ab140e84058aef612eb747755f3a8770f807ce407c58cbb577f0048a828c15265c773b8b3e4b9d1e7c4a1e92df42e019ff63e9274b1b1674dfbd", 0x56}], 0x8, &(0x7f0000002380)=[{0xd0, 0x118, 0x0, "603f7115adff335f8fc7897383e30cd59e6c2c765896f79c35ea5ee3170e1912363e3f5d0b82830ee00ec0c54193572d97b7ce12034af5a164e4e15096c5f3d6dd463f94c25a04d83c6548200bdfcf7e12e048be128df16fecd76f11885778cb1fcccfa90c92fb506cda889f70f78813981a14bc0aafe0f68f5cf87a0ba803f0537793c85e514548cc36621c9acdbcb512710796fdac816cf60758a48c0b262eb0cd5d549f352d2cef6c1497512197d4957f9fd75c196a76d62fb0e3ba03"}, {0x68, 0x113, 0x1ff, "16607d0628b6e92059770efe1f5ca9d03d48743a3bac9b5c1dc48b69439910a54cba10fdd122e9f0e1e75a530bae1b18e55d65219d455fa834f908d01f960ba6e2ba9cff54bda5566411fdf979922de6bf6492"}, {0x10, 0x29, 0x3}, {0xa8, 0x113, 0x200, "1f03139caa13bbfa5af970d0665f612e33575db6f0bf0ef1f948095d2703d70257a043002a904e50f791ac64702351afade8b285ac316b73c418e90677f1945716ee30116297ec790685a5169030f0f397a9c0a2927ac5590bd9d5906ac13ea2896eb0ab8a8a6577d2502c0cfd9ff122ec591e0258d898b05860a07e84bfb9c5ab9d9472bd412f253a1a16cc1492c07eec6482a1"}, {0x98, 0x115, 0xfffffffc, "de892d3e0eef2d753d285c3757d882fbb02141510fd639dee0cfc84e8f6ddc47a6ddb3890e4136be7aa329664d2383ff86645039d67d83f9366cd7d5d47d1ea7f9644799d9b14220b566c026efb5ec5d9ed9703781e98a34b5ffe1ebf2664802e3492a88936c808e61c2682e51bbe06d5527fe45f3b5a977a422a6148744461dc3d86a91d608502d"}, {0x1010, 0x11, 0x10001, "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"}, {0x38, 0x102, 0x9, "523b4e894913c909a00d403fd9f2997488c7639bcf7139c59c2f27fb6a806ddac398b4815ab0"}], 0x12d0}}, {{&(0x7f0000003680)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x3, 0x3, "39c4aee2d70e5768f0c1e83b75bb89f6b2f9555873976809494d7890b17e63df7c4117ff74d6db3165b5ff92aa9cf99b921a83444898e0b65e4c05c01ff00b", 0x25}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000003700)="7500fb92316d36ebf8a05d9cc6abccd6365f81f566796121e31eafa1704ab6880f971d81dc1f13fc41b92d8a00843a4aa7ff745824e09ac3f16d82d74887817d1ae2988eb1ef5d3dbdfac4da68f875cb86ed4536d79504e4a57b91c4b6abfdf2951d3c007ddcc12960217cd51be3191901e8952e006b9eb46f2e60f9e79a75cb371256a85c", 0x85}, {&(0x7f00000037c0)="0479abe0729f3f4d36b9c29e4d0d15daaf65e079cf8fafdd3a1830010e6d81b7ea81f27aaabf2b8e9cf52804eeee9007e2b59034fe65ee97ebce9d464b7393a1ea8ded1c3e302e9463e85927f49522a323694dbeecc075a98dff9e012950f7a1f47755b6790418edd1cd42290af397615edc3137560de429f83704275f3858ab69de63a8a8defaab07f1e96993cd8b7f26cc71cddd0bdc85d685f1b4930f3e1f650885468d33de1c430639894d22300fc1217ea8e5e8f1377e0bdc55142cbd9942692ded808d09686e5129b823b4ba65f17c733c4dc847", 0xd7}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f00000048c0)="ab9e7ddd2fc97a2d16afb77e39401c5d09f912986600fba47a7b472df567b690c61ec793e47ae11dfa42135c0c5f87485ae68d8ce20fd16d11aaeee73d151244fea67755103c5805ef3dd823753d622668f5a2e4927a8d0a26d2bcf7ff6b5043b06da1ad889dba561556f302993bba7a8bfb7d999f9f14eaf8c3359bf93a3c855d8094e5f79d71920d1e5185af363f822ace5c2b31d7a734cd9a1f8db6642575", 0xa0}, {&(0x7f0000004980)="19782a35abca110892825d4a7089951f743469e0542fc1f7db2edd0a2767cae4eca6e9893b1695eb4d81b6c3486500e99129958a8d4b86aa4d62d5a7c4e442977e1b2b4047e5e58508a95cc643a4b7482261833207d2c40cfb5881c5991235717d1cb120a11a01c8c12c8e830ffdd897329fe15efa9da744c9c928e32f249bb2b04390f9", 0x84}], 0x5, &(0x7f0000004ac0)=[{0x20, 0x104, 0x2, "c8356e028ee249801b"}, {0x78, 0x112, 0xffffffff, "ed428114d925a3f37a476b52262f9688f83ca97b147eaa9ede5c366fd7ee3b6f56184855394bac6d4ea96c2ac93865c582653b57ea1f18a7cab4ec0801cec077f6c9dcbc2a3e9c94e968e1488a26cf1a3d2825ccf4ea43e631b9dde69bcc7495146868"}, {0x18, 0x104, 0x8, "1075c596"}, {0x20, 0x111, 0x8001, "61a0dd72ec54cb9c377083a7"}, {0xf0, 0x111, 0x1, "f5013bbe908463c832150d55895b2a46baf869102d99b2159c47c841d7cdd9108c0da42999dbddebdd35d1fbc458b63538ad8c9362e2dc2782f6e83af85c53dcd6a7b28b33ae8f20b56ac481e56d3341d2ce583e042d0aa083e539fe89b45b9ec04026186646a84febc85bee57ba67071675a59ccdd182a68047885be9cb643fc64f92f7249b1ba05cad38b0bae2bc31dcb497f1f49d70d292b5ea9d453ebcf0dc728b163c51a5ab55600896c247b77268738e5841cf18d23cd122e5b01ad23d839a3a61bef284e32cbf58164c9b095610abdcd39e6f6128d69a68d0"}], 0x1c0}}], 0x4, 0xfce18e67f1292922) [ 321.134705] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 321.172734] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:26 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}, {&(0x7f0000010200)="0000000000000000000000ffffffffffffffff", 0x13, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e4000010000000000000004000000000000200000000000000000001000000000002000000000000000010000000100000001000000100000001000000000000000000100000000000388c6451fecd45cd935f0a7419c15a97", 0x6c, 0x10320}, {&(0x7f0000010400)="00000000000000000000000010500000000000050000000000000000101000000000000400000000000000002050000000000005000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000020000000000000000801000000000000200000000000000006010000000000002000000000000000040100000000000010000000000000000701000000000000200000000000000005010000000000001000000000000000000000100000000006000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010500000000000030000000000000000001000000000000300000000000000003050000000000003000000000000000040500000000000030000000000000000205000000000000300000000000000005010000000000001000000000000000000000100000000006000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000040)={[{@user_subvol_rm='user_subvol_rm_allowed'}]}) mount$9p_virtio(&(0x7f0000000080)='syz\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40000, &(0x7f0000000280)={'trans=virtio,', {[{@access_user='access=user'}, {@aname={'aname'}}, {@nodevmap='nodevmap'}, {@cache_mmap='cache=mmap'}], [{@seclabel='seclabel'}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '^(/'}}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type'}}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, '$\xef'}}, {@subj_role={'subj_role', 0x3d, 'user_subvol_rm_allowed'}}, {@subj_type={'subj_type', 0x3d, 'btrfs\x00'}}]}}) 04:05:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xfd5, 0x200000000000004, 0x0) [ 321.202613] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x401}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="c7", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x2) ioctl$CHAR_RAW_REPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000002c0)={0xfff, 0x7, 0x0, [{0x6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x8}, {0x3b8, 0x8, 0x3, 0x0, 0x3, 0xc9, 0x7}, {0x9, 0x5, 0x6, 0x0, 0x5, 0x7, 0x80}, {0x7f, 0xe01, 0x7, 0xf9, 0x7f, 0x6, 0x1}, {0x7, 0x7, 0x1, 0x3, 0x3, 0x2, 0x81}, {0x2, 0x4, 0x10000, 0x3, 0x1, 0x7f, 0x9}, {0x8, 0x3, 0xc0000000000000, 0x2, 0x20, 0xff, 0x1}]}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) fstat(r1, &(0x7f0000000140)) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) [ 321.337970] BTRFS: device fsid 1a04a925-3b50-48a8-a78e-465f3f987efb devid 1 transid 5 /dev/loop2 [ 321.359636] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xfda, 0x200000000000004, 0x0) [ 321.446033] BTRFS info (device loop2): disk space caching is enabled [ 321.477962] BTRFS info (device loop2): has skinny extents 04:05:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 321.502680] FAT-fs (loop0): invalid media value (0x00) [ 321.512162] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 321.521941] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 321.524930] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee040000000000b2b50432b2ab8600fd00001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000040)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x34}, @alu={0x7, 0x0, 0x8, 0x63bb91307b46df49, 0x4, 0x8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x7, 0x3, 0x100}, @jmp={0x5, 0x1, 0x1, 0x5, 0x4, 0x2, 0xffffffffffffffeb}, @call={0x85, 0x0, 0x0, 0x71}], &(0x7f0000000100)='syzkaller\x00', 0x1f, 0xac, &(0x7f0000000200)=""/172, 0x41100, 0x0, [], 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x8, 0x3, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000400)={0x2, 0x20, [], 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) [ 321.610770] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 321.641008] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 321.737884] attempt to access beyond end of device [ 321.748934] loop2: rw=4096, want=2064, limit=267 [ 321.792495] BTRFS error (device loop2): failed to read chunk root [ 321.807246] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 321.889444] BTRFS error (device loop2): open_ctree failed [ 321.973968] BTRFS info (device loop2): disk space caching is enabled [ 321.981286] BTRFS info (device loop2): has skinny extents [ 322.090843] BTRFS error (device loop2): open_ctree failed 04:05:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xfffffffa, @local, 0x8}}, 0x6, 0x800}, &(0x7f0000000040)=0x90) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0xd0, 0x0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@private1, @ipv4={[], [], @multicast2}, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xff000000, 0xffffff00], 'sit0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2b, 0x81, 0x6, 0x12}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [0x0, 0x6000000], 0x3, 0x1, 0x1, [@empty, @mcast2, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x44}, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @private1, @private1, @private1, @mcast1, @private0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @ipv4={[], [], @private=0xa010100}], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x3, 0x1}, {0xffffffffffffffff, 0x3, 0x2}, {0x3, 0x5, 0x2}, 0x0, 0x401}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x2, 0xc1}}, @common=@mh={{0x28, 'mh\x00'}, {'Y%'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) 04:05:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xf000, 0x200000000000004, 0x0) 04:05:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000100)={0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r5, 0x0, 0x883713, 0x0) 04:05:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x141a00, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000340)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f00000002c0)) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2c00238006001900af1a000005000f00fc00000005000500a0"], 0x48}}, 0x0) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r5, 0xe32c) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x100, 0x0, 0x300, 0x170bd28, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x44}, 0x8841) [ 322.400851] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 322.424141] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.444899] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x10000000, 0x200000000000004, 0x0) [ 322.479012] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 322.508229] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 04:05:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2, 0x0) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000280)={0x10000, 0x4}) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000020000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400830}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x48, 0x1402, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}}, 0x8001) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x3000, &(0x7f0000000140), 0x2, 0xffffffffffffffff, 0xa}) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000001d000100000000000000"], 0xb8}, 0x1, 0xfffff000}, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000200)={0x0, 0x0, {0xffff, 0x8, 0x0, 0x401}}) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x10000}, 0xf) 04:05:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x7, 0x3f, 0x7}) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f47d5fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4070041daede551a50000be6aeaa0d6", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfffffffffffffeba, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4755fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d}, {&(0x7f0000013900)="111fc0d901000000803a0900805109000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) 04:05:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xfffff000, 0x200000000000004, 0x0) [ 322.676056] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 322.713281] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 322.780106] FAT-fs (loop0): invalid media value (0x00) [ 322.796458] FAT-fs (loop0): Can't find a valid FAT filesystem [ 322.866866] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.901608] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.937336] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:05:28 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xd4, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x150}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8000}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xe4c7fa46ff742755}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) r6 = accept(r4, &(0x7f0000000180)=@l2tp, &(0x7f00000004c0)=0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x11) 04:05:28 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$ax25(r2, &(0x7f0000000280)={{0x3, @default}, [@bcast, @remote, @null, @bcast, @bcast, @rose, @netrom, @netrom]}, &(0x7f0000000300)=0x48) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xfb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000340)={'sit0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x9, 0x8, 0x0, @dev={0xfe, 0x80, [], 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7800, 0xaecd, 0x5}}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, &(0x7f0000000500)={0x3, &(0x7f00000004c0)=[{0x81, 0x81, 0x1f, 0x6}, {0x6, 0x0, 0x20, 0x6}, {0x5, 0x6, 0x5, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000540)) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, [0x7, 0xffffffffffff8001, 0x3, 0x68]}) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x180800) 04:05:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0xfffffffffffff000, 0x200000000000004, 0x0) 04:05:28 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x336, 0x2, &(0x7f0000000040)=[{&(0x7f0000000140)="9223a7dfab75d8fb69b3665bcc96c5cffd83a8bcb57dbd83871909da9eec256d9cb227ef10cd7b6f193da48ff516025c6f611d45b7df6767065b3eb15ea204936f2a39cef7490a", 0x47, 0xfe6}, {&(0x7f00000001c0)="4455cd81ac0b56dcb1b18b73c61c70653002ef628e2631330ba76cf86b2e6a95028ccef38ddcc019296649f0caf0da4f6777e05744ad741ee471c3eca10d994b0a6b7a92ebb93f5f93f66226889b1ef5c25678d8ef2eee7eabb58c95792deba918d59a5412b906df3ff57e177504877e3cb84ba40e98f3cd01c40e38eb2bb7628e47077ba04dff53b006dd58d869662cfcfcb26da7595a3556c9b9f96f", 0x9d, 0x9}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="ae141ed6545cdf66b943535c636f235b930d781ecca1b476c70bfd1bc3b8e0bb827854d528604a5b5b2becb9aa9f3b40a1be58aacf908290ef3eb33cb69588433bab0cadf8be030eeed594332997a333085a420cc29d8dc805c4ea02e4f3f0dac764aeb1d3eabbfe63cf0447847af20a0cc0f22e69c7403d32ae9eb67e7fc25fd599199e3446ae44f6bef56f2585d11d87c509a3f0f2a31e5bb1d07599e165e2a1cbf3bb109286c6d56f6cf0cec9293487cb8fcc8d647d344d00939ff788941c63ad4261925023612155a4562dbc123efcb41aa2120eed6d01dec9d6d6b7f0e3636f256911d71b", @ANYRESHEX=r0]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000140)="0000000000d300000000000091b73ef4674113b90012adf10a0ff8cb23bd5f", 0x1f, 0x4e4}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x2fffe}], 0xa00030, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) [ 323.512042] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:05:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x3, 0x0) 04:05:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0xbb, 0x1f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x5, 0x0) [ 323.787733] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b6c00000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x63c}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) [ 323.846205] FAT-fs (loop0): bogus number of FAT sectors [ 323.853707] FAT-fs (loop0): Can't find a valid FAT filesystem [ 323.988919] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 324.105216] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 04:05:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r4, 0x8, 0x20}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072ad3f35fd0a82fb51f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30ec1f5fe7cfeadee7716013a59f5d1c143eccd15aa586b52b23fb1b17d22342212dea3b0b9964de06e1dd0fce555eb966e6c52673ae55f682532b2d72ad3a952789461e701e66a236e960e883c228e7522b3f35c687637d24d07802ed8edc15eefa230ad0e31ba3e6f8950ee6ea45df64468d2bec25491342c57002b25f20000000df7e397984c9af03b98775375ecf30eb55e60427b075503872e9d6ad197e6972e709f31caf123086"], 0x1}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x8c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa6e}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4840) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfdc6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000140)=0x5, 0x4) 04:05:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x9, 0x0) 04:05:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x10000, 0x20000) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 324.679342] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x12, 0x0) 04:05:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000180)={0x0, 0x5, 0x3007}) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x23, 0x800, 0x0) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100000000000000000000000000e4d7e2ac9753fd428113ebb2b6ae014027bc81c32bb30fe00aae4c80449b86e3222dfa7665ad4bbd1d215393160525c170955245cc426687667da20f9148a077a6f2de3a545d34c89dce9892ed80f757fc9e3c15137b7591a47a3cb143b47d14abd74ea406f88e1ee1b0b77aa2f7dcea0e8581db0bf9a18bc2ad791a7f9a5f932dc849084aa84f865f2f307de98accf6e19cad", @ANYRES32=r6, @ANYBLOB="02210000000000001c0012800c0001006d6163766c616e000c0002800800012002000000"], 0x3c}}, 0x0) 04:05:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x0) [ 324.964242] FAT-fs (loop0): bogus number of FAT sectors [ 324.986310] FAT-fs (loop0): Can't find a valid FAT filesystem [ 325.066153] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.103101] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:05:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 325.161877] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.232453] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:05:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x2) 04:05:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local}}}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)="829e5daa1f7de879ce5b012774af64693d632d210b6a6785b3a53a4fd475be0c7dd0f2b9401155dddd2c266d4e2a991a9d9aa49090fe8cf2c867f8b03b1ded9d37ff15f58362baa8e91240da0a5cde9bc5e46c6631518d8391066b3826f19b9f7fd3b99c4917f1975d139052af7ea1d56c31bb93da8c5e6b0208482e623d73e6323172c2915a67bc6b15ef265189f0eddbdb77ffe27e1fa4a2ac62d10bcc43dbf13145bd334672f0aee4232bb14d6d27af47f844432c5aa8f7968baab9b0b85c14df26f6283a03879a1ff477564af78a", 0xd0, 0x40081, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0xffff, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}) 04:05:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400001719000f000300040000000000000000000f002ea2", 0x20, 0x100000001}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000140)="8011b7df81000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000492d92fb7a83a96d1ba6800000000000000000000000200", 0x47, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000805) [ 325.795516] validate_nla: 1 callbacks suppressed [ 325.795526] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 325.826244] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 325.839511] net_ratelimit: 15 callbacks suppressed [ 325.839521] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 325.850845] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 325.892480] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 325.896690] EXT4-fs (loop3): group descriptors corrupted! 04:05:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x3) 04:05:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r0, 0x0, r3, 0x0, 0x883713, 0x0) 04:05:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x4, &(0x7f0000000580)=[{&(0x7f00000002c0)="a35244daf9b668d7e31cd43921c992284ebce3818bbce18acc3f6f674c67899245c85dc4a77bec86e0bc3cf6b33b766b66da137f16cb5ed94812a23ec262fe1ea12a3204daa6f16d315d66bfd94795be5f7c2ca0179e93f336ac0b07593fb739270ec809596193bfda3914dadf7938dc3603a5073fba95c04278b66fba75270cf41f67eb62bd055f67f3af77ce81b3fe3f25757e1bc086397262edd3934651f488e40665c0edac18db41f033241cde4a8286ffc60618b4bab909a77a88739e45af55df08e47926d1600289", 0xcb, 0x800}, {&(0x7f00000003c0)="deb28a3bd91d2df1a33cb23e684e59196cea57d84d4f392bcee2c2ab1445fd8db278410048b8b09ee44e4257c08824e08d696080056abe9c3ffc61e487b4e4caa1ce26d5c7b1e6fe6ea89421f5dc2160b6d8bc7529c4c70483af15cbf3d8198025c8d191dd0e784f35b0f0900d79e800ed18a927af1eca922225d22388b3024da4d44dc5b82188e0ace1faae9b9dd5e12b84a4408ebe04a90e9c990e69f926d3c046b906c5eddd5edb787b085f7a62e9d22af0875392ec2f2930e4695b76247687929a511def4c80ec5d738026afd0dba277d94d002d7a50ab8f1e10a7fcaefdebcaee88", 0xe4, 0x2}, {&(0x7f0000000140)="8d93aa5eff1873fdc90204698a941c49f10be641d40347c655c9f71588b4b41e6ad1a223d33f2b6b42887170d2833f19c8b34b7e5787d189e333f7301a5e0cb750ebd73e276cd9fe22101f0d1ce1e7f0d5993ba4994274c77e158f9aaaa54db9f269b0933386d860bf88c64a16f0bae279b3ce0bd809f06f8e2f9233", 0x7c, 0x3f}, {&(0x7f00000004c0)="022fa165bca9d53fcc84cd88c34ae8f6af9ca87a04e67b252914f17575cd8dfb040dab30e28d5baaa93e0a496a7f1e609d0d0e717ffe255110972fdfd7c7bdcd4fadcd9ac302e4909a52e3e1e272f979b43004389af6d1ae91284f86938e7bff1c78ffccae83ae25c8811cd2fc5350e779366a0ff90b34d38f62c8451e6f06085f7f89c9c138c519358ebeb29038b19dbaae333f41b87424ffbb28", 0x9b, 0x3}], 0x2000, &(0x7f0000000600)={[{@nodiscard='nodiscard'}, {@barrier='barrier'}, {@order_relaxed='order=relaxed'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10, 0x80000) 04:05:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e00000000800005000700000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140a2f87a9ce7ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a3000"/197], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) [ 326.092196] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 326.171162] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 326.211913] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 326.314779] FAT-fs (loop0): bogus number of FAT sectors [ 326.363041] FAT-fs (loop0): Can't find a valid FAT filesystem 04:05:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x4) 04:05:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="c40000000906010100eb000095703dd78ad1a8b42cbba9c9763335010bfdff1d000400070001002600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c00060053cac916f293c986090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b91000000090012000040000000b700000c001b40000000000019adc1b3f0351846ce01cef70400000000322a3d9cbf3d0900020073797a30813c8ecc52c998c51beb44a5f7d490efd641f2de057aae15020f152476d9cf701d4506980a64725e6ecc69c1280175e8e4"], 0x1}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r4) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @multicast1}, 0xa, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth0_vlan\x00', 0x0, 0x6, 0x400}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r5, 0x0, 0x883713, 0x0) 04:05:32 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) 04:05:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 326.858122] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 326.902242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 326.917138] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x5) 04:05:32 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000005b00)) sendmsg$nl_crypto(r0, &(0x7f0000005d00)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005b80)=@upd={0x130, 0x12, 0x120, 0x70bd29, 0x25dfdbfb, {{'cbc(cast5)\x00'}, [], [], 0x600, 0x400}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x2f}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xfff}, {0x8, 0x1, 0x7fffffff}, {0x8, 0x1, 0xfffffff7}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x4f2}, {0x8, 0x1, 0xa0a}]}, 0x130}, 0x1, 0x0, 0x0, 0x4805}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 327.148750] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 327.164424] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:32 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5ad002e2, 0x181180) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x40, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any'}, {@access_uid={'access'}}], [], 0x6b}}) 04:05:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x6) [ 327.211674] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 327.229179] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 327.292648] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 327.387266] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 327.443085] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x100, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000042b1ad784a91b73ef49cd944c4be6ae8a0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000002300)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000024008000000010000800000000000af30100040000000000008c0000000000380000300707888d7b30260ddc0d22ecb740990230f712f250a011610e18664785aaa434b1691fe063ba5766a71797b0eee6ef66ca92f7a4c019a8cf1e0fed0d3d94d6304f10d14624cb3b1203d33abd2e752f1a65c720f11b321e7c7f7f21b6a9284b8e65c51c886ad01f8060b76456f7a08f4121a4699b38082c7a9b248f67b82232a0e7be1f1e8dac3d013e031c3df65a0c0ff17deacf14344af910636c2b", 0xd9, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, r0, {0x7, 0x1f, 0x2, 0x820408, 0x8000, 0x6, 0x1ff, 0x53e9}}, 0x50) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000002400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003800)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000002480)=""/237, 0xed}, {&(0x7f0000002580)=""/172, 0xac}, {&(0x7f0000002640)=""/133, 0x85}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/219, 0xdb}], 0x6, &(0x7f00000001c0)=""/25, 0x19}, 0x103) r2 = dup3(r1, r1, 0x80000) accept(r2, &(0x7f00000038c0)=@l2, &(0x7f0000003940)=0x80) 04:05:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x7) 04:05:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000d90000000f0000000100000000000000000000000020000000200000200000002cc4645f2cc4645f0100ffff53ef0100010000002cc4645f000000000000000001000000000000000b0000008000000038000000c20200006b04", 0x66, 0x400}, {&(0x7f0000010200)="05000000000000000000000000000000000000000401", 0x16, 0x560}], 0x0, &(0x7f0000013000)) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x25, "7e5a4d107a4cf1560fc839f7d72a0fed009026e4a37e82787880f4001873388dd85c4813f2b160e5624e4dc52faa1b24b6981d1176521124ac09dcaa0c889edb05f3fe83e062f89dedc61641d2e4272654375638802b3cd3f3af1023d9eed5350ecfde31fef9ea9c2d11f58e43bd686a3a58c80ae72f1b31420a6835aee293d5"}) [ 327.923158] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0xa) [ 327.980084] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 327.987647] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 328.004140] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="260000000300000000000000000000000005000000000000005e5d5eabd80000000000000000"], 0x26) ftruncate(r2, 0xe32c) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000340)={0x4007, 0x5, 0xffffd60f, 0x69a}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x666}, @NL80211_ATTR_CRIT_PROT_ID={0x0, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x301}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x562}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1331}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa66}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x48884) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r3, 0x0, r11, 0x0, 0x883713, 0x0) 04:05:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(0xffffffffffffffff, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 328.147471] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 328.172643] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 04:05:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x10) 04:05:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xc0, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000000c0), 0x4) [ 328.218827] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x4, 0x9, 0xfa, 0x0, 0xffff, 0x29931, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x20, 0x8000, 0x9, 0x6, 0x3, 0xcd, 0x3f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) [ 328.443619] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 328.444022] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 328.489298] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.566927] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 328.589531] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. 04:05:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x3f, 0x81, 0x6, 0x1, @empty, @mcast1, 0x7, 0x80, 0x6, 0x8}}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000014c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f00000002c0)={0x11a0, 0x13, 0x4, 0x70bd2b, 0x25dfdbfe, {0x26, 0x9, 0x81, 0x1, {0x4e24, 0x4e22, [0x101, 0x4, 0x2, 0xfffffffd], [0x800, 0x8, 0x7fffffff, 0x1a80], r2, [0x10001, 0x7c]}, 0x1f, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x20, 0x1, "b17fbfe2482ca4f4463ebeda9dda5b727433213fcd3eedff8ef01c73"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "ae7d07cd34efa462ebdb729e32dea3762b44abb3cd32f62e52c690706fdb80136e012335bf49ab3d583b4174c589dc30bc4c5a5968f70e7513e2a8d4100a8bb472044c3b25911b8e338e1449425e33197eec79e56bc93d597fa981397bab52d2da0db18375aac01628e2f0b523203184634bdc335fd755b242a744d2ece6d200396cdd749a82e5a11d95a5b624d35559c375"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "a6707a60f184e896ea0e97fec92da5ac5cd4eddcf2db59d82bdcf89169a98707ea38007bc0eec73d7dc6d22f0eb6206f784b4900673bef915ce4f88642c6f56cedf4a529861fc3845fe1286ab823daf47ca9b22068e2180d59d4674f95dcd54a6a40f5afc2b63bb5521384b7178d9037398e5cf39a3307ab0793a15c709ab8e76994823aac871b448410a35f6fcff05d791eb25e11b2d6ec70863c16b05eb965e6e5496a4189476f08a1f1c547158faffc2140a523e13098c459e6a1d6f9fb139bccca9ec65c7b6350ac687c2e3e4ed51deca3edc3e8edec607b5bebf2a30e61dc61b8eddcba8fe4abef52042969ec1f28abef0a065471d4ae587c615405c30fceca0181994f881b476a404ba39970088839f31a6bbe7b46cbcb4bf1e0ca34560b9a009a56a11326ac8ef4bc194ddbb84735de1412161d47721900e605d6a4b22320f010f3bce6bec72c5a05b6c95ddc744117d33c593ea1b53840535c4c2056f83370d2495269c3489bdf59f48e5cb57efe4acb13e125ee8eca3f852943002a2469503fbd21a731c16015c499aa51ceaa5e8ef397ef8c9991d237294b082519c35cdbb27ac23296cfb9b2e00bf79d774083c0a5dcb5bc68aed6dfdfc4d505ac2335bd73607474de15cb271a907b5be7ef0e6afd7c6ad2a6a7fb6035af246da19bad5d13c944fc5cee83b11b359ee0679c1ed57d77b8ea4c310549bbfb37df0001d080ff159208e3d9fb94a2f37093f69de31343dfcd680708c050ac15e0f2efb109726ec6be9056547d4ec09ca1e05d39fb4f24ba8826777189c254936eff1d5f8c08cafbe51757b3508e9b68ea78c247c8d614e34816aa34f1f2e0d78ac7044cefa2085724ef28b04c370a8002f87c2be50f62aea32a95a0402c48037b9546ee7e790bb9db1fa2b461fa4e3b49b379756e69b87badb30315b9e6588a8f163fc2508814135a73ec7ab93df04d26fca1c2767d449593cf8b6a360848bce14108b83633825b186a0f7b338ef66d540d3f3a7f2958a7671f7b72b62897b44862c47b7249168498af56b64b5bcf04a082e7bf4d0c6ec5a0316ce22a9a6179ef04c74ce6881607be27f3ed22cb90d08be7dc214275a3e1452acd3dc09c6a9cef842fc26881da9f5b30b9b3703d7eeb64b610dc54f73657b4abf0d2af694164aa02bdbef1e92bde4a6dd166c38decbd808e27c94e960e1f6cb9c5b030b2e3a02cfa478d494970636c645d15753c957a48924f3e3f090dc7d36bbaf4fb3e17d5b55903172c7f6604c2c9d72494fc4696de34dd7ccc938c21d72292bcb547ff25e0fcd69a657e5c75626b7a2f6fbe9d21e86b8a81d924c46e51fc2924bb0d9a3d6d7df4d43348c796ff5618264a90fdd61996c006030147638006f9dabbb8b8396d7e31a88bbfe7794e99e0db877bc14106170d220a66e00511314029ee75a6d729b945449b008631f7360026940aa6591767444a0c8b65ccc326d6c9cc029065d5370b12dfb6d61756233f9964da2de6f7d6743d2d65fe457201d8b414a6eda2580551be3967c07a5310997484ca9fdf45119edb946f60e4c9969ed7af7e89249d808ff74a4eaba0275092c144d2a5543422982aa08c293dcc736c1d652152766c374358b0aed0cb582abf3843bcdab9b51292ff67503aef2b393b60e6e890b495fc946a84968e71382fd5e24b51b0ea9da2449e707a62a48b0da06b21509627e8ecb87923e27ce95d7aac755bc58d9c35eaa8dae495f76ac194f758539393796c5f843e800ebb228323bb5ad409f402ece6f4a011433b942d51ae99c2df05515846d95dab1f793b79fdacfa67dfc2cdd4cb7cbcc1e0961a0182a1362fddc7879a1f1f7a7e8ee67d37d2a20958c26fe47315718a3b375d3e37d196f6c1fc8f7648bb51e68643e996f4c9b8230fe3aa8d2540c59fcaa82d60acc0f3c30fe6448ee40c5e8564ab761e0bbc83c0a33f4e150c79a2d26ded2ff1caf58d525eaf6f94d864e500ac7b2c846e8527dd5be30cb62c7d14984fe705847648fc6fa1852184bb73d184e8932e845cfd9ffeeed3a61042bcc6e20192b5fa2bfee005952ef1dce5e4308de8e1dece08e82215a8b7cadeb9372af78331a95055186fa8b3739a43f53902d45a4b9ab93499b88c55992971ad4adb50d20c30934415e071a1d42ed4fec2805a1e6eb99e00a7811d585f01eebce3c7b3826f8dcb37a2226707011c304ac99faf058977957119a9ecc62cb3e01e5a25227cc5f2678430ad5dc210fcdd63a5bdfd4a23b1abd717ad1d71833d968d55de5b4c6749fbc834f3a798b6bbd4476a8561a050d92496ace787ceb53f5bf529576a10c9783a45e1864fc233a5244c178c8188430585150a8ef22d8b95666b4ca21265abc09f86463a3b83488665bb7d3b4dff0f62599510bd803a406566955a4e65f34977f71afad44f7d78f74391d2b41030ac32dd4bbec024d83b8226ff7d0fd01a111eab4175068737fa2d3716fc8fdba653fc017a1550b3658e2d505588396924943ac5f26ffa9f74e54ebe6e41b460e7607e68c319f82bc252bfcc774361f1d4811245aba013a36eef86e9da745cea96fe59ea46e4187e2c959d521bf2a48445fcf3382a6872fc7f5aa52040a299a53138e7758b408b8167b612e8c45845cf4186b8defd85b170fd77d496dc67b3897ac5a2c3f8752f5a865b83909fc4274741366bdba738e31665963dd97b15a3d5f9f747af0de7eade1232181839bea2c7b9e5813d57ab0150eebd02dd22bc3329564f42b4693e6a4a1e2ed6aba6811d05f62c6f0e1a88d4cc667ecf4972f4dfb3116a6882b49dbb778ecb8d03bd33a522fe609dfdd3d9101ed347d05b8be57dbc4c47968d306952626b43b059b42a95dfc3acd8734a7784f1388712e8c3260c22fc521997c2926ee9721bf5907b3424b5f29d5ba967a31f8d59b42fa4b1a7d049d3b34f1b2eceb6bc5a38ce4020056ce01b3f4fae02b58dccf2c7d8938c1dc7fecfdfb528d2e3f4c796a8cc536a1cf36bb262cc2b8b6bb22d56958b11ab45b2643dfa25b8867fa30acffe659079a31b36f90891d9661bdc375ba38cce593f732cd0b8ccdcf45124aa4318775b34a038209aec5ecce0ba45acef0e0f7bbef7bbeceb6a91585404c973d32c53903300187f909f4a0ae95ce50300da021d162be2bd56cf5106ba0110a382a6dac572c95ff07d89a4ad643aed7eab33f0da1a49b52d6503e6b30762cb3eaa69ae3ba72df7e2680ce61cd46ba4d5aaf1a96cd7f07894ee25056d8407f8be329deda843128c006c744a339197e1eb616a5f86632f445562257ba66727c8f8c9dcdb2e21c178ea5bf25e91913456edb68770e43db0e112341841c9c35268f25a1f172e1bc687eb930aa4a898cc8269ace4673a951f7cdbcb31cb8f458496747f156103540d3687e5503fd159992211f956e84005d68eb13553f2d7be7e9909ccf9f6a8c0fdc4b929c4f1f644664da404e939b8fece466a598162e90c6b3bac6302f7d3d403c6fc73a3488fde0575c6eaa8c22ff7e78a93453262437f19b66c5f846aa2e23d7223f3c1abf93f9d187539bf7f55da169f58e7c438b1954e19ffb0c34c2a99bd116e13e7403d5e09b2bafcac46d0f7db564e32aac14f5b3eb5c304809c4feef4f66fc15e3420f658d45f3c01e7609c23c59d6ad4f6fed14d0f6fb7ef6e1cba085242b500224f7f78459c40993766139f7dc431f27f8ffae496c13167e0250fd28fa4be0c8c8c414844a17a6d08db5428e9833eaca1673a07b6f584a175e36eb9d56f7927da32336512f029aeba12aa25570a3a346c6d9f10557c4ac796094671b6a9f18401f58c4b4b8bd0a58c83c588fc9398dfecc3d9392ee44cd03ca3d4f239f9cc25aded55be999242ee13a318876804f7985cce0e810f44c550393cd2121d849bd60cc85e5c501210eb52c3e2556a42dbbf9e9f4a63485b8eb11ab4f6133739454691196bdbfb080ec03f0a2155a9fcd9a5409542277c86e74f3c7ad1105ae7ed7cb5abab4142b69d079eb27bd0b14c3e1365ef2106fb560517c7592afb1342260e825b39becbbaa3a8c989666f36b7469cb32ab14bb6ef05eed4df940b82e6d1180e53fa9eba41b2dbd4b81588667ecac47a10943906763e67164bede02855f889e032fe1cf31760e428d813b30e3794f5cd4159fc5edbcc05dddcd3230fb3fc99c6fea2f5fd0c04baacd3ba2784eac2324ec547f53ea6abe8d3a8494c74909d3d8785905ca3dac8b40ad1c251cd052a97b5f371eb3318a7a3f168b04f0f4d543769b5683193099bae903e1260c452d78eadca47f8651d0b079313c1a60e9306ccb6e30698074c44c76918823c7d90bba7309d85a7875f0a0693130ee8511da021341e9bb7ee672eaa7f34615ca39f1a50bf35c462ada13a07a980f0edf3a50eea0ca58d3a7b3516856ca170c954fb075fc018a952be7c7df0d2634677de4a9f87da11336305b29c4cbeccbaeb59b49093676a91b061bec24f2bc2ac0bf728ddffe470696898437825c8b36fb37e9329ef87b17f0e8caa07ce00e2e165f6c438b6444dba9f989e74036cf17b51e841a57b28c0e239b72f74e5e0bca649cc42f74fbf8f0e8c96b814b3c428d032d0b23d3ea4c28c4651287c3e97798b97c0472d04cae95983db5dc762b69c8d08594a82c1a408c5beadddd132b7d6b0c80ab5d7d9833a16938436c2988a599bbe3aa772f3908f1c347c541c816a3d0abc364ab66995855c1e39c94e1ea9ac9a76ec49b5fcf043a0abfcb4b768e651477fe03f7527191e911475bd8d8dcb8cd65a30cf65ac895709d5950ae6303962b5a703994299782bf3a55acc3cbcfaf3b8f074b7efdf1d1c39b0eaed02d8c68fdc14d24730453e13abd466fec56102a6935e58363b43ee067765bf9d5a3f7ff3af83f6a4a2ac4ac0704bc93053d1576652181c3c61ece1f598718f9d8c49e200fcfe37ba59b3cf235e9c7b6a0a489df5450dc89607716053c81403d5202affb208f988c83c1d71a3df7f5eb10ca416ab2c9acf543cfa4624e5b75fa862a43e8ac09cbb56e348bf47fec3cab2987e0671fe34b3cde8259fcb2f54392f1f9540d4a60f4ed8e4f97820ebbf0f450927532d8ed8c260e16b5d06719037e16d40865afcaac341801fb1597433b4976248a6f8b20bd2b8cd23f26117f73180c420a08c33e5ed379c1b9090ef1021dad14f49bc9f3337bf417236fed37b0565d2d0d008dc090d14d924feb8d427171997810c28ec80b4ec98f07b02765875a1066fe2f2948704662048e87c40f29ad522c7e1efbc037ffe0362c4f3132ec7462025349ede3063bcc43bfe15599e232be94b159deb56b2c84dc11e61d3c05a3db9360b4a003d35a696ebe2c9bb60587cfae8dd6e65868db1b7c4cff1b26b2a65800c87f810225e080b804800c37e55d3abcf95badca8de60d10b08a181b5f33f97783bacbbca77aa1da7b4ad57c60d4de3e4bd100777c28c1788bc05673de78b83a1a0dec54e1fef65ac55b68a4deefe4324dc136256f4460224287717221085ca191e57c1bdc1a991505e08f49b2ef4194f7a3b4a6d8c5f2a2cabacc46c653e5c3c8c5479d57dee28d6f8931c0c4453837c7c6b7fc853c311c9679e63d1dbcf817ed353a7ccbf2a13b10f0d17eb16022ed1fbb84cc4566913aa9ff151d6fd80065c2a9797c09dc1977c8eb8996dfb03031b19ec8e53e8539ce15837c6438b2604b0dbf1b1bd9de30e8bd5c93539bf209fbbdc9ea9587471e985f1592e7bfeb3bb7adc8cf25b2b2f5d01853f3c7b9b7d37d873da112d5f"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "531be21c8ecf92b814623714a02f673dfc1ffe88356d80b984617e1c7dfa7dc25b9b2d78e296c60a8f40fea9882c9b84c5eff4309a4ccd7895a35ceaabd03b6ee9f551a282af9db01eacd78ec26c263ae2d4a904d08b1d8c748baacf311c8e5d2dcb4e8a5924204b99457159a24d976cd3"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "2d3c355f5a86dd692453eeb29309d77815420ad3e2c322dcd11769"}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x4040}, 0x90) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0_to_hsr\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 04:05:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xfff3}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x48) 04:05:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(0xffffffffffffffff, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000200)={0x0, @motion_det}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000040)=0x2) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) [ 329.087394] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 329.136688] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x4c) 04:05:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r4) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESOCT=r0, @ANYRES64, @ANYRESDEC], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r5, 0x0, 0x883713, 0x0) [ 329.204312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:05:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(0xffffffffffffffff, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 329.359291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:05:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x68) 04:05:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000000140)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x4}, {&(0x7f0000000180)="f374908a1ad4a0a4793e5f2d72600b24cab3f5812bd0f3c4db8610ef64d911d4a34ac2d2243e", 0x26, 0x1}, {&(0x7f00000002c0)="bfab5bfd85f77a2baaca4b9869020dde638b00281513c17e2c58295c763521b8bfc38cf0e03baf19db00c0547ed07ea330082490390d6a1c0dbfb89f75b7d3216adfd17c860b31313222b9c0d292a74c4fea31652f4969123f5aea5b04890c87b75a20e0cde2ec", 0x67, 0x6}], 0xd4080, &(0x7f00000003c0)={[{@usebackuproot='usebackuproot'}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@space_cache='space_cache'}, {@acl='acl'}, {@check_int='check_int'}, {@acl='acl'}, {@subvolid={'subvolid', 0x3d, 0xffffffff}}, {@ssd_spread='ssd_spread'}, {@subvol={'subvol', 0x3d, 'ext4\x00'}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) pkey_alloc(0x0, 0x2) 04:05:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vcs\x00', 0x4040, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f7de41aae91ec981b7b3bf9e8d"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000001780)={&(0x7f00000016c0), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24004040) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r7, 0x0, r9, 0x0, 0x883713, 0x0) [ 329.902284] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x3f, 0x81, 0x6, 0x1, @empty, @mcast1, 0x7, 0x80, 0x6, 0x8}}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000014c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f00000002c0)={0x11a0, 0x13, 0x4, 0x70bd2b, 0x25dfdbfe, {0x26, 0x9, 0x81, 0x1, {0x4e24, 0x4e22, [0x101, 0x4, 0x2, 0xfffffffd], [0x800, 0x8, 0x7fffffff, 0x1a80], r2, [0x10001, 0x7c]}, 0x1f, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x20, 0x1, "b17fbfe2482ca4f4463ebeda9dda5b727433213fcd3eedff8ef01c73"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "ae7d07cd34efa462ebdb729e32dea3762b44abb3cd32f62e52c690706fdb80136e012335bf49ab3d583b4174c589dc30bc4c5a5968f70e7513e2a8d4100a8bb472044c3b25911b8e338e1449425e33197eec79e56bc93d597fa981397bab52d2da0db18375aac01628e2f0b523203184634bdc335fd755b242a744d2ece6d200396cdd749a82e5a11d95a5b624d35559c375"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "531be21c8ecf92b814623714a02f673dfc1ffe88356d80b984617e1c7dfa7dc25b9b2d78e296c60a8f40fea9882c9b84c5eff4309a4ccd7895a35ceaabd03b6ee9f551a282af9db01eacd78ec26c263ae2d4a904d08b1d8c748baacf311c8e5d2dcb4e8a5924204b99457159a24d976cd3"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "2d3c355f5a86dd692453eeb29309d77815420ad3e2c322dcd11769"}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x4040}, 0x90) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0_to_hsr\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 04:05:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r5, 0x0, 0x883713, 0x0) 04:05:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x6c) 04:05:35 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r0, 0xe32c) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x2}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="d3e4b423ac5cee75afe40420c7fd5cac41ac6bc7061a3dbaa276ffdb2eb59c72ae71a3a0a693b1ed66602fe81a261e97d5ff7cfee8c156a985a5ce07a3577c5d39a444c48ecdcebb72d18524fd21353601c6f5cb87d735fb414e80b386cb5e58b45109a1c256e5c69ca93f2aa513a75a1911ff71a5f58a18335a9577ee5860997777278c8875ea8c32be1e25ac6a24bc494450f1436502c1405b65d82642ddd95c8839568c0d317b3338603ea49e8760f71d7277551353a61c5b1e31"]) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0xffffffff, 0x50, [], 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) getpeername$unix(r0, &(0x7f0000000440)=@abs, &(0x7f00000000c0)=0x6e) [ 330.396783] Bluetooth: hci4: command 0x0406 tx timeout [ 330.515054] EXT4-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value 04:05:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x74) 04:05:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x8a7, 0x3) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) socket$inet6_sctp(0xa, 0x1, 0x84) 04:05:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x14040008}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x80000000}) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x7a) [ 330.852399] net_ratelimit: 15 callbacks suppressed [ 330.852409] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 330.933068] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 330.948617] mmap: syz-executor.3 (16051) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 331.040171] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 331.075846] attempt to access beyond end of device 04:05:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xc0, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000000c0), 0x4) 04:05:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000008000000000000000000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f00e10000000000e3ff000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000ff021df3f243451355b0b0000001000000000000000b000000000400", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1004}, {&(0x7f00000000c0)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f00000002c0)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af30100040000000000000000000000020000003023818fc4b1469c8bc7d53275c4753597b1dc5a897c83bf2edb77264d8dd3e85ec2e084f47701eff9ec0a3593432a41274ccb715b7c7eda0df2f6b7467143fa84b4c842e0ef12a6f7b8c18368d0fa2e0a9074ad4d8913631af0b88d4e14321e63e6b73c6d3d6b0c6664f5d4df92e741d3f6f72a560063a33064170e9fb96f67d399a5edfb5f339f6129d03740ca1fab6e1e5f214820f9803afe36c464c5ecca628fc78790742790c30f244d579ccbd830c4", 0xee, 0x1f}, {&(0x7f0000000040)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./bus\x00', 0x0, 0xee01) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8010, r1, 0x2f3c0000) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x30) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'U-', 0x7ff}, 0x16, 0x2) utimensat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{}, {0x77359400}}, 0x100) 04:05:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 331.087938] loop0: rw=2049, want=230, limit=127 [ 331.107855] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x300) [ 331.208408] validate_nla: 2 callbacks suppressed [ 331.208418] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 331.259450] ================================================================================ [ 331.268277] UBSAN: Undefined behaviour in fs/ext4/super.c:3763:25 [ 331.274608] shift exponent 65507 is too large for 32-bit type 'int' [ 331.281033] CPU: 1 PID: 16070 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 331.288915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.298268] Call Trace: [ 331.300866] dump_stack+0x22c/0x33e [ 331.304510] ubsan_epilogue+0xe/0x3a [ 331.308253] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 331.314485] ext4_fill_super.cold+0x33b/0x4ea [ 331.319031] ? vsnprintf+0x2cc/0x14f0 [ 331.322845] ? pointer+0x850/0x850 [ 331.326402] ? lock_downgrade+0x750/0x750 [ 331.330559] ? ext4_calculate_overhead+0x12f0/0x12f0 [ 331.335685] ? snprintf+0xbb/0xf0 [ 331.339032] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 331.339148] ? vsprintf+0x30/0x30 [ 331.352933] ? __mutex_add_waiter+0x160/0x160 [ 331.357521] ? set_blocksize+0x163/0x3f0 [ 331.361608] mount_bdev+0x2fc/0x3b0 [ 331.365246] ? ext4_calculate_overhead+0x12f0/0x12f0 [ 331.370361] mount_fs+0xa3/0x318 [ 331.373774] vfs_kern_mount.part.0+0x68/0x470 [ 331.378377] do_mount+0x51c/0x2f10 [ 331.382023] ? check_preemption_disabled+0x41/0x2b0 [ 331.387051] ? copy_mount_string+0x40/0x40 [ 331.391299] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 331.396211] ? _copy_from_user+0xd2/0x130 [ 331.400379] ? copy_mount_options+0x261/0x370 [ 331.404883] ksys_mount+0xcf/0x130 [ 331.408462] __x64_sys_mount+0xba/0x150 [ 331.412464] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 331.417055] do_syscall_64+0xf9/0x670 [ 331.420901] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.426093] RIP: 0033:0x4608aa [ 331.429290] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 331.448191] RSP: 002b:00007f01cfc66a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 04:05:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000040)={0x4c, &(0x7f0000000200)=""/76}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x5082, @none, 0x2, 0x2}, 0x8c88a9491c725be7) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000280)={'syz0', "ab5a5e88fd4ca4ca169b9f57deccbcdab8a00efa02c865ab0ce51e859f8b45221fafea335731c1a571ea88244f8dbb8d249facec5b4034619c8049f52eb0d6400c0c6b1461a45ff58c4f718b3fb2c97874efda3237b7"}, 0x5a) 04:05:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 331.455907] RAX: ffffffffffffffda RBX: 00007f01cfc66b20 RCX: 00000000004608aa [ 331.463178] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f01cfc66ae0 [ 331.470452] RBP: 00007f01cfc66ae0 R08: 00007f01cfc66b20 R09: 0000000020000000 [ 331.477726] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 331.485010] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014a00 [ 331.492317] ================================================================================ [ 331.526019] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 04:05:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x500) 04:05:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffffffdeffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756d61736b0480e84830303030303030303030301c130159d39ad05c302c646f733178666c6f7070792c7569643d24f5f69c68c177ef2af76afe47b6de1ad796165551fb9a992c5fdd5c23a711d8c77265aa36d4898e4b22aadbc58f81ad7025adbf94bad101314bc950217a9d6a9990715a2f9222f5986d03c1bca36f76520a74e923fbf202cf7f957f052d322bbae86adcb0f93202", @ANYRESHEX=0xee01, @ANYBLOB=',\x00']) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0xa}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 331.608887] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 331.678564] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x20}, &(0x7f0000000040)=0x90) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r6, 0x0, 0x883713, 0x0) [ 331.741795] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x600) [ 331.863603] FAT-fs (loop2): Unrecognized mount option "umaskH00000000000YӚ\0" or missing value [ 331.897146] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 332.024612] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 332.057335] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 332.066191] EXT4-fs (loop3): unsupported inode size: 0 [ 332.123702] EXT4-fs (loop3): blocksize: 8192 04:05:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) 04:05:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:05:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x5, 0x0, 0x7}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDENABIO(r7, 0x4b36) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000f06010200000000000000000200000706000b00046a548f9628cb8421e600000006000b000300000006000b00010000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r8, 0x0) write$binfmt_misc(r5, &(0x7f00000002c0)=ANY=[@ANYRES64=r8, @ANYBLOB="9b588194d5131205a16cd6223a95dcfb010c113cd5b89e72da78d1a476cc07598c11fbe83fdddaa0c135da5b1cd32a61cd0fb124f7ed5fedcaba732abc79cd5f70e8bb1f1bd1048e080f27996eaa6460406992e304894330eb10ece2662280214fbaefe42513fcdf73b9c4180326fff738ca9166a08d5f1f70cab3f8c4ddc346e897860f540ab1be245a8ccd2a617b7de6c2cd6e7961abe00631ab06e9fdfd898b8d9ab7c30c52348c2fa3a6a7287db9f154f2b1fcd7eb8ab5e6b3edcf7a415a741fb67a81b633e771583e8de46f4048f9644e9281c8988fc772a6cb65525e06"], 0xfdc6) splice(r4, 0x0, r6, 0x0, 0x883713, 0x0) 04:05:37 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r1 = syz_open_dev$sndmidi(&(0x7f0000001700)='/dev/snd/midiC#D#\x00', 0x3, 0x402000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000001740)={0x0, 0xa362, 0xfffffffffffffffa}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001540)=0xd73, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x56000, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x1f, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x7fffffff, 0x1, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc10c5541, &(0x7f0000000140)={r4}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0) r6 = syz_mount_image$ubifs(&(0x7f0000000140)='ubifs\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x3, &(0x7f0000001480)=[{&(0x7f00000002c0)="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", 0x1000, 0x7}, {&(0x7f00000012c0)="631b1616a961f44d71c9ab2034dc8016729e66f8503969441021036a4ccc9cea8d9574e0060526b201fe0c0f874c4630ffdd97fb0ceeb149be7cbb5c4fd664ea3b9647e0c858c31396e408d28a3d7758758af1548e6f1cc5ec5e4087938c3db93915e996adc6deed1531e592468331e6c6b5f1dafb6382a12262f627950ae0be4a88889e9f09a94afc1f7ff554843a13dcce713bb8cadbe36f5d0b57489d275209750b6c1c449f03da32c0dea2ef883b3c15f0797688f6321e117df47ae876770d42bdbe59209e705191d94224d65cfdaca1830e", 0xd4, 0x934c}, {&(0x7f00000013c0)="48c61675932eda351e2ef25cade6f010896f93860232c88f419c57cff42a769fdb3423726285df947fda8bca10356f32e6211d0731edaf8b7d68d5ba7026959efe60845ca0c68faa00497c856a8287cc962a215bed39fa9f07c51f6b07224857b895fe1d6892ede395bb27cf8ad4886415fa1c126ca59a5814a4a5442d2cff5670", 0x81, 0xfe}], 0x20044, &(0x7f00000017c0)=ANY=[@ANYBLOB="636f6d70723d6e6f6e652c617574685f6b65793d2f6465762f687772ad3c9fe208a77e3db86e67002c64686e745f6170707261359729ac9c5d52d52c736d61636b6673726f6f743d2d2c657569643ce5cb90bd00acedbf6ade2cd93e4e3870de300840be8d74594b80f176566d2faf9e0ca343bb7ee43843206b5917509f98c1eb0ea9ab754d6be80ec4a708aa8aa9bf322a174234194e69633834f33c4b3f8a9dcd877cbe775ab9de9caf963e43aa8dad2871de176116e0ea56ac05f818451f06e2a02ca85a7695b3b81ec4ed6f5de1585263e90b5aa8dcf9cd5f70", @ANYRESDEC=0xee00, @ANYBLOB="2c646f53745f61707072616973652c6673757569643d6163373805fe34332d316462632d663862642d303562002d34363966805938372c66733078303030303030303030bcff0000000000006d6561737572652c00000000000000"]) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r6, &(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)={{r7, r8/1000+60000}, {0x77359400}}, 0x100) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x541102, 0x0) ioctl$RTC_WIE_ON(r5, 0x700f) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000001580)={0x5, 0x7f, 0x4, 0x140000, 0xfffffff8}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001600)=0x3) 04:05:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x700) [ 332.416419] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0xa00) 04:05:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r5, 0xe32c) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@ipv4={[], [], @private}}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) [ 332.453306] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:38 executing program 3: fchmod(0xffffffffffffffff, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 04:05:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/99, 0x63}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/67, 0x43}], 0x6}}], 0x4, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 332.499652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 332.668613] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 332.693046] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 332.695909] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 332.714659] FAT-fs (loop2): Unrecognized mount option "umaskH00000000000YӚ\0" or missing value [ 332.793453] attempt to access beyond end of device [ 332.810935] loop0: rw=2049, want=230, limit=127 [ 332.832388] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 04:05:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@map={0x18, 0xb, 0x1, 0x0, r0}], &(0x7f00000012c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x9, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x4, 0xfff, 0x2}, 0x10}, 0x78) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000001280)=r4) fcntl$setpipe(r2, 0x407, 0x100000) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 04:05:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x4800) 04:05:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @dev, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "197737", 0x0, 0x0, 0x0, @private2, @empty}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900220073797a30"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r3, 0x0, r5, 0x0, 0x883713, 0x0) 04:05:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:05:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x1, 0x282040) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss, @mss={0x2, 0x80000000}], 0x3) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) 04:05:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 333.235693] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 333.264188] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 333.281797] attempt to access beyond end of device [ 333.294059] loop0: rw=2049, want=230, limit=127 [ 333.343512] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x4c00) 04:05:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:05:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r2, 0xee00) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) setresuid(0xee00, r2, r3) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x4) 04:05:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c41a00000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 333.593341] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 333.626117] attempt to access beyond end of device 04:05:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) [ 333.657783] loop0: rw=2049, want=230, limit=127 04:05:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x6800) 04:05:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r1, 0xe32c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r2) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x1}}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x1}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfdc6) 04:05:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:05:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 333.934902] attempt to access beyond end of device [ 333.963355] loop2: rw=2049, want=230, limit=127 04:05:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30368655a4729274151d292d672d4697620aff2299f67ad316cbdf635b92faa4dc37b20d18494ee3d2381132760188be8a8a88448e8cf35098890dd291ed3c539f00ae797de70b9d65af625581ab705963d819c663f51bd0de88e21b5806a26466bc0f076338f6fc62f00db5d2d97af2f1b771c4045825f7ed599d237abcfab8121d7b59121a1e20ac63b84dc74f75cd292802bb"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x1e5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r8, 0xe32c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = dup(r9) write$FUSE_NOTIFY_INVAL_ENTRY(r10, &(0x7f0000000180)={0x26, 0x3, 0x0, {0x5, 0xfffffffffffffe79, 0x0, '^]^\xc2\xd8\xa9zE\xdc\xf4\x908*\x1b([\x9c\xddq\xa8\xa3\xa3\xa7d\xa0\xd3\xed\x97j{\xf9\xf0\a\xce\xea\t\xc0\xcd>\v,\x86\xb5i\x10\x1f0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfdc6) 04:05:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x7400) 04:05:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}], 0x3, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000100)=0x8000) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfdc6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @loopback}, &(0x7f00000003c0)=0xc) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x5) splice(r3, 0x0, r5, 0x0, 0x883713, 0x0) 04:05:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x7a00) [ 334.507948] attempt to access beyond end of device [ 334.537522] loop0: rw=2049, want=230, limit=127 04:05:40 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="2f646576ffff6f6f70300036692c8c5be7010a0c1fee4cce16261783fd2aa2cbf1c27a34e7f91d63e3e561da0400c901d7cf402defa767781c80929f78f90354aae46ff03d9325f36f12ee15c61853e69bb5229baf9518dd4850e9887693f6d594025425574c8349f1f3336bfaf21c81fa34ba879c817698e9f2f022128959e7d35e7da45004b167f863f5f43333415861db9b7effa0c8d9e9a5f06762341797735d77c9a05a3b0f2ab8c49837d612bd9e471c65991079d27cedcc754f87d710c42acd02e44d49e7adf07ade28846d25db295b804fe1244b2aaf17446877dd37e67592a36eec"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='xfs\x00', 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) init_module(&(0x7f0000000000)='xfs\x00', 0x4, &(0x7f0000000140)='context') mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYBLOB="082ac8120bbb003e00d33f59", @ANYBLOB="9912ccfee4861c907ebf3635da14abf62d38f0da0950136923cd8be01bbe77da04b14ad124c2dec705fb946efb9e8e151f112a7c1fbb801ec6c98ee0121a88298a7868c100096627dbd66d1206fe794ddcfe2380cf00"/98, @ANYBLOB="103228c73261137c5b577531dccd9310f2e2435779c69ffa48b8b659a22d62487492a48a5097919b52131de7d5a6da2fefcaf4a0a8c6931f12ffa1eafc2ca9a08fc036ca49823b254c01a1cff098f390c80e71bbd80ccfe626b12c79c4488fcf5dd406c40da91546dbeaab51ac64f4b4850dcd587ae117cf6431751cd28ca203e2530caccfcaf348f93a6b358d81c8df4fbe5542", @ANYRESDEC=r0]) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x4e21, @multicast1}, {0x6, @link_local}, 0x2c, {0x2, 0x4e23, @rand_addr=0x64010100}, 'veth1_virt_wifi\x00'}) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{@uid={'uid'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffffd}}], [{@measure='measure'}, {@permit_directio='permit_directio'}]}) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000180)=""/23, 0x17}, {&(0x7f00000005c0)=""/204, 0xcc}, {&(0x7f00000002c0)=""/37, 0x25}], 0x3, 0x8, 0x0) lchown(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote}, &(0x7f0000000280)=0x12, 0x0) pipe(&(0x7f0000000400)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000300)=0x80000000, 0x25d) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ocfs2_control\x00', 0x445af3632e1c7333, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", ""]}, 0x14}}, 0x4048000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000440)={{@my=0x1, 0x4}, @hyper, 0x4, 0x0, 0x9, 0x5, 0x1f, 0x7ff, 0x7fff}) 04:05:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}], 0x3, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) [ 334.630133] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:05:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000100)={0x1}, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, '^]^\xab\xd8'}}, 0x26) ftruncate(r4, 0xe32c) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000200)={0x9, 0x0, [{0x9, 0x4, 0x0, 0x0, @msi={0x8, 0x0, 0x1, 0x1000}}, {0xffffcdcd, 0x1, 0x0, 0x0, @adapter={0x400, 0x1, 0x8, 0xa397, 0x3}}, {0x7, 0x4, 0x0, 0x0, @adapter={0x200, 0xfffffffffffffff8, 0x4, 0xfffffffe, 0x3e7d}}, {0x3, 0x2, 0x0, 0x0, @adapter={0x0, 0x1a91, 0x5, 0x5, 0xfffffff8}}, {0x6, 0x3, 0x0, 0x0, @msi={0x10000, 0x2, 0x0, 0x70e57d2e}}, {0x0, 0x3, 0x0, 0x0, @adapter={0x8, 0x80000001, 0x6, 0x2206, 0x8}}, {0xa9e, 0x1, 0x0, 0x0, @irqchip={0x8, 0x7}}, {0x80000000, 0x3, 0x0, 0x0, @sint={0x7, 0x9}}, {0x3, 0x4, 0x0, 0x0, @sint={0x3, 0x4}}]}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r6, 0x0, 0x883713, 0x0) 04:05:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x100000) 04:05:40 executing program 2: epoll_create1(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f00000003c0)="86989eb8f581103eeabe2d5e162b183e1777ec6adc7eb8cdfc93319519a5c2b01235f29b9f90345cf0c96ba11f1144e0fb07daf2e6a6f28e587108bc015442968710255252c44898396a7ff32eccb8b9523dcb081cd3b736c06d35fcac2d6fd66a815a6a2dd35475ce88d78cd757e7b682b0981b29cb20dab0838d1d705a8bc91093a8033e043b8994160f8b535465ca7e7bb0293ebca3fb5b8d94e9b50e6c3df2056c7cf31d4d78d78c0ab33cf905f158c868fdc91d69b79e5d9121b3353959899eaaf01506c03070b9a951577771efa1f4e507c4844216152bed209e4a061efc2f37d4a0ee520780bf30959e8a9701", 0xf0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1292a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 334.896650] audit: type=1804 audit(1603166740.253:46): pid=16307 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir929337295/syzkaller.BqKHJk/431/bus" dev="sda1" ino=16773 res=1 [ 334.905965] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 335.005700] audit: type=1804 audit(1603166740.363:47): pid=16321 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir929337295/syzkaller.BqKHJk/431/bus" dev="sda1" ino=16773 res=1 04:05:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080284efffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000440)={0x1, 'caif0\x00', 0x1}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)=""/61, 0x3d}], 0x1, &(0x7f0000000280)=""/10, 0xa}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x4008000) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x1000000) 04:05:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}], 0x3, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 335.192154] audit: type=1804 audit(1603166740.363:48): pid=16307 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir929337295/syzkaller.BqKHJk/431/bus" dev="sda1" ino=16773 res=1 04:05:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x2000000) 04:05:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000000906015f3329293864d58485d29cad2ce70100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30cfc84a638214fc486ce381e70ddd1d6bf19786c5338be0d25447e2801849023a031b61e1947713e1b3d2"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) 04:05:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x3000000) 04:05:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}], 0x2, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/195) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010b00070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000000000000000000090000140017007678636d6e3100000010001b02010000090012000040000000b7e4ff0c001b4072dcf77b0019adc1b3f0351846ce0140ee040000000000000004323d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x30a, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1ff, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80088c0}, 0x40000) [ 335.791539] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 04:05:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:05:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x4000000) [ 335.868934] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 04:05:41 executing program 4: ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000200)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x1000, @mcast2, 0x101}, @in6={0xa, 0x4e20, 0x4, @remote, 0x80000001}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x88) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="59e03d221dbe119cb816dd7212cdcbc6ff37571046b9f3e38c914372608a707d1c4af442d19126dee44d7eb0411b035ff0f25ea8e1cb17bbc30a69af4072b60ec867573749e680201395bf0249561f3077", 0x51, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x4890}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x5, &(0x7f0000000040)=[{0xc0, 0x1f, 0xd6, 0x1ff}, {0x3, 0x20, 0xc0, 0xffffffff}, {0x3, 0xff, 0x3, 0x8}, {0x100, 0x7, 0x8}, {0x3f, 0xf5, 0x2, 0x7fffffff}]}) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r4, 0x0, r6, 0x0, 0x883713, 0x0) [ 335.986010] net_ratelimit: 21 callbacks suppressed [ 335.986020] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 336.019200] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 336.123779] attempt to access beyond end of device [ 336.134022] Unknown ioctl 1075331408 [ 336.141407] loop0: rw=2049, want=230, limit=127 [ 336.623995] Unknown ioctl 1075331408 [ 336.629110] Unknown ioctl 44672 [ 336.643230] Unknown ioctl 44672 04:05:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}], 0x3, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x5000000) 04:05:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}], 0x2, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006000000000000000c00090000000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r4, 0x0, 0x883713, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000200)=""/246) 04:05:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) [ 336.760130] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 336.786070] validate_nla: 2 callbacks suppressed [ 336.786079] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 336.820293] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x6000000) [ 336.933639] attempt to access beyond end of device [ 336.975758] loop0: rw=2049, want=230, limit=127 04:05:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4(r1, &(0x7f0000000200)=@alg, &(0x7f0000000000)=0x80, 0x800) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddfffffffffffffe000000f200020000001c0006002e00000000000c00090002000000000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d6e3100000010001b02010000090012000040000000b700000c001b4072dcf77b0019adc1b3f0351846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008460) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfdc6) splice(r2, 0x0, r5, 0x0, 0x883713, 0x0) 04:05:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) [ 337.102968] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}], 0x2, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}], 0x3, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 337.150586] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x7000000) [ 337.316094] attempt to access beyond end of device [ 337.356752] loop0: rw=2049, want=230, limit=127 [ 337.389054] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 337.451288] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:05:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0xa000000) 04:05:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{&(0x7f0000000b40)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}], 0x3, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:05:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}], 0x3, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 337.650772] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 337.656601] attempt to access beyond end of device [ 337.689849] loop0: rw=2049, want=230, limit=127 [ 337.694510] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:05:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x10000000) 04:05:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:05:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}], 0x3, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 338.066884] attempt to access beyond end of device 04:05:43 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) r4 = accept4(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000000)=0x80, 0x80000) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e8, 0x7, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xe3, 0x7, 0x1, 0x0, "cc07b5584c6bd5c01f1f10b8e8cbae33bd317ead0b98862c9d1e4ae2404dd96485cdbe1c0446c29b6fc51774b91415d9dbf054f4adeb22c618f66d7a6d4b6c142beb9f17f3b649b9c8f2667387d70beade475389c4c6ecc492cad7e0fafa8ade6ad0666f459e82d978ccdfe8cc4d6d13af727a805e81c539416b734c9d4c397f49f61aa23687bdf5e34151f62903dd37f42c54cc419e08f06c6afcca3c521d56ed23c8fa9917986017361ddf121521eaf69a7bd6c4132c07abe52c389be436100c8fa35eb62b30e9a7b3989bd12851c3cbe2f3350f8ceefca800147f9cc82c"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@queue={{0xa, 0x1, 'queue\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x16f}]}}]}]}, @NFTA_RULE_USERDATA={0x6e, 0x7, 0x1, 0x0, "264bcc768fe52809dcec32b9157fbf4e4773ee1dd24509810fbbc185f4bbb51e5e1b0f319a17d15dff574386f8a498b44dc7aa73ec3a267c5fef0f75790c57a3b7ef6d19a04ed5d3504d10cd43ca3354cfe918641fe5c31038408200b1ac81f21370dff76b5907ca331e"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x81}, 0x4010004) 04:05:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x48000000) [ 338.112314] loop0: rw=2049, want=230, limit=127 04:05:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:05:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, 0x200000000000004, 0x4c000000) 04:05:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/140, 0x8c}}, {{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/103, 0x67}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/243, 0xf3}], 0x9, &(0x7f0000000b00)=""/54, 0x36}, 0x10001}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/215, 0xd7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x9}, 0x9}], 0x3, 0x43, &(0x7f0000002880)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x84}}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) mmap$fb(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000000, 0x30, 0xffffffffffffffff, 0x55000) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 338.530783] attempt to access beyond end of device [ 338.583280] loop0: rw=2049, want=230, limit=127 04:05:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 04:05:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f000000