0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:20 executing program 1: keyctl$link(0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r0 = socket$l2tp(0x18, 0x1, 0x1) sched_yield() ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(r0, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r0, 0x9, 0x7ff, "ec55a940817f7eb31282961a9a65c0f28b29bde4f0e68d71b23679908780ea7d363c7f"}) keyctl$set_reqkey_keyring(0xe, 0x6) pipe2$9p(&(0x7f0000000040), 0x800) 00:15:20 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000780)={{{@in=@rand_addr, @in=@local}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000940)={{{@in=@local, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000a40)=0xe8) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:15:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x0, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 651.865009] libceph: parse_ips bad ip '::0.Qnullb' 00:15:21 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000780)={{{@in=@rand_addr, @in=@local}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:21 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) socket$packet(0x11, 0x0, 0x300) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:15:21 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x2ce, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x319}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/128}, {&(0x7f0000000300)=""/254}], 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 00:15:21 executing program 1: keyctl$link(0x8, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xc0000, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) memfd_create(&(0x7f00000001c0)='syzkaller0\x00', 0x5) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x4003, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0xc451, 0x50003) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x10000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$notify(r1, 0x402, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='syzkaller0\x00') [ 652.277333] libceph: parse_ips bad ip '::0.Qnullb' 00:15:21 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000780)={{{@in=@rand_addr, @in=@local}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0x0, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 652.545139] libceph: parse_ips bad ip '::0.Qnullb' 00:15:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x5, &(0x7f0000000180), 0x4) 00:15:21 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000780)={{{@in=@rand_addr, @in=@local}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:21 executing program 1: keyctl$link(0x8, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x20}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) [ 652.948131] libceph: parse_ips bad ip '::0.Qnullb' 00:15:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x14) dup3(r2, r4, 0x0) dup3(r4, r3, 0x0) tkill(0x0, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:15:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0x0, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:22 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x1}, 0x50) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000000000000000000000000000b00000000000000656d316e6f646576656d3100000000000000000000000000000000000000000001000000000000002c00000000000040000000000000000000000000000000001c000000000000002b73797374656dcc6370757365746367726f7570246367726f75701500000000"], 0x90) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 653.330876] libceph: parse_ips bad ip '::0.Qnullb' 00:15:24 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) dup2(r1, r2) tkill(r0, 0x15) 00:15:24 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:24 executing program 1: keyctl$link(0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) ioctl(0xffffffffffffffff, 0x7, &(0x7f00000001c0)="d3857bc4f09c94afc79ae3bd0f8553546d27a716eaaca1a0b19b47d90371bd6ff60f8ba6c848e889c6acc16902de82b59fa2f096230f3d0e8e2cc9d0b2a236ccbb8dd36eb03bb5c0240879f9bae89af06a216f5b30174a402d38465118c3579a8b65ee1348d136f3315c35f599308f5b11f19b9ddad42185ed2ede883345914e52195f2e1e88e20a1f5e67d8e96af6df078f143bedc07942a78ea790f483ad4e189e4da0a3d158d80ce4dc3e38c796b7dc8719ff06402822dac82468f78f4024889dbef262e1be1bb1b9ee601fce70e89a31e6c32d4301ba0f1e642d34ff9a6be1fe41") mlockall(0x2) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x9d, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 00:15:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0x0, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, "e03aa1fd1bd2d075875d26b526c3e51d00c7d2e12ca873219ba62caedfaf2723"}) 00:15:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x14) dup3(r2, r4, 0x0) dup3(r4, r3, 0x0) tkill(0x0, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:15:24 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:24 executing program 1: keyctl$link(0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x42, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xdcd, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x9, 0x30}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000200)={0x3, 0x3ff}) [ 655.610756] libceph: parse_ips bad ip '::0.Qnullb' 00:15:24 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f00007a8fff), 0x2fe, 0xfffffafffffffffe, &(0x7f000006ffe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x18, &(0x7f0000c86000), &(0x7f0000000040)=0x74) 00:15:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x0, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 655.924892] libceph: parse_ips bad ip '::0.Qnullb' 00:15:25 executing program 1: keyctl$link(0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x12, 0x46, &(0x7f0000000040)="06d036c55fc3a438cb8e8be62001fad2db1e833b4bf54c9137d2f0712f5d6296a66082731c9b813bc83d00a733585f5935df52a39e7b834ba27d84afc6ae0b1b06d6baf32862"}) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) 00:15:27 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$int_in(r1, 0x0, &(0x7f00005ebff8)=0x7) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000240)) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000140)={0x0, 0x0, @ioapic}) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/132) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:15:27 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x0, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:27 executing program 0: tkill(0x0, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000000000)) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) timer_delete(0x0) 00:15:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x14) dup3(r2, r4, 0x0) dup3(r4, r3, 0x0) tkill(0x0, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:15:27 executing program 1: keyctl$link(0x8, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)) r4 = semget$private(0x0, 0x7, 0x102) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000540)={{0x5, r5, r6, r7, r8, 0x20, 0x7fff}, 0x101, 0x100000000, 0xffff}) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="3e660f1254000f709db9480066b8000000000f23d00f21f866351000000a0f23f8baf80c66b81894488866efbafc0c66b81b2f244466ef0fc7735066b99a0000400f326766c7442400009000006766c7442402fcbc2e8a6766c744240600000000670f0114240f01ca2e0f6e370f01cf", 0x70}], 0x1, 0x11, &(0x7f0000000240), 0x0) [ 658.517815] libceph: parse_ips bad ip '::0.Qnullb' 00:15:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x0, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:27 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 658.925390] audit: type=1326 audit(1539735327.970:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16267 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 00:15:28 executing program 1: keyctl$link(0x8, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000001c0)={0x8, 0x6, 0x2, 0x3, 0x6, [{0x81, 0x5, 0x0, 0x0, 0x0, 0x1000}, {0x3, 0x1, 0x8, 0x0, 0x0, 0x800}, {0xb5fe, 0xd0b1, 0x5e, 0x0, 0x0, 0x4}, {0x0, 0x5, 0x7, 0x0, 0x0, 0x1000}, {0xffffffffffff4a1c, 0x200, 0x54, 0x0, 0x0, 0x1000}, {0x7, 0x10001, 0x0, 0x0, 0x0, 0x106}]}) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)=0x1) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000340)={0x3, 0x13d, 0x15, 'queue1\x00', 0x8}) [ 659.000605] libceph: parse_ips bad ip '::0.Qnullb' 00:15:28 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 659.306592] audit: type=1326 audit(1539735328.350:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16267 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 00:15:28 executing program 1: keyctl$link(0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/rpc\x00') ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000240)="b1c8248a12d0fdfd99970dc3f63ded4d64920518454cb15c4e03503fe4841e83146068954f8d9fb7c7cb30330fa64ce4608b377be2cb78134d11eca1cecc40452af2de0c8011963befd3027310d875e52155d1c84e88bd2a0a1f873a5731eca336ae5a5547344bdb44d3991a7ed4d9dcb26f9934bc4d46ce7b10d3282a2ee20364ce44767bfebb2f35c176220c069ccc98749c3b242b1ee2f74ced1540835e9f084ae1ea781e6c5b5f525f53f89ef48252df5511a95eb0190b4f61eafe962799631104cd55f5ec140cd61990a90b") fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x61, 0x200) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffff, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000080), 0x4) [ 659.419833] libceph: parse_ips bad ip '::0.Qnullb' 00:15:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = gettid() fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x10001) r3 = syz_open_pts(r2, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x14) dup3(0xffffffffffffffff, r3, 0x0) dup3(r3, r2, 0x0) tkill(r1, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r6 = dup(r5) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$TIOCMBIC(r6, 0x4008af13, &(0x7f0000000040)) close(r4) 00:15:30 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x24000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x0, 0x20}, &(0x7f0000000140)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:15:30 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) 00:15:30 executing program 1: keyctl$link(0x8, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) 00:15:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 661.701488] libceph: parse_ips bad ip '::0.Qnullb' 00:15:30 executing program 1: keyctl$link(0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x18002) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0xfc, 0xfa00, {0x2, &(0x7f0000000080), 0x115, 0xfffffffffffffffd}}, 0x8f49915ab4796b59) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000700)) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) 00:15:31 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:31 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:31 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f00007af000)=[{&(0x7f0000000100)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 00:15:31 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) clock_gettime(0x8, &(0x7f0000000440)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x3ff}}, 0x28) r2 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x4, 0x2000) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x984, 0x200000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0xfffffffffffffea4}, 0xfffffffffffffe98) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000700)={0x8001, 0x1000, 0x7fffffff, 0x0, 0x0, [], [], [], 0x101, 0x6}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000003c0)={0x0, 0xff, 0x0, &(0x7f0000000380)=0x1}) inotify_init() openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x802, 0x0) close(r0) 00:15:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = gettid() fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x10001) r3 = syz_open_pts(r2, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x14) dup3(0xffffffffffffffff, r3, 0x0) dup3(r3, r2, 0x0) tkill(r1, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r6 = dup(r5) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$TIOCMBIC(r6, 0x4008af13, &(0x7f0000000040)) close(r4) 00:15:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x0, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:32 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) tkill(r0, 0x15) 00:15:32 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:32 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2f0000001800030007fffd946fa283bc8020000000040005031d85680800a3a2d188737e0b000f0003000000598e2c", 0x2f}], 0x1}, 0x0) 00:15:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x44) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000052, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 663.055948] netlink: 'syz-executor1': attribute type 15 has an invalid length. 00:15:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = gettid() fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x10001) r3 = syz_open_pts(r2, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x14) dup3(0xffffffffffffffff, r3, 0x0) dup3(r3, r2, 0x0) tkill(r1, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r6 = dup(r5) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$TIOCMBIC(r6, 0x4008af13, &(0x7f0000000040)) close(r4) 00:15:32 executing program 1: 00:15:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x0, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:32 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:32 executing program 1: [ 663.721397] libceph: parse_ips bad ip '::0.Qnullb' 00:15:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x44) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000052, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:15:33 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x1, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:33 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) [ 664.288492] libceph: parse_ips bad ip '::0.Qnullb' 00:15:35 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$getownex(r4, 0x10, &(0x7f0000000740)) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000820}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=@deltfilter={0x51c, 0x2d, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, r6, {0xa, 0xb}, {0xffff, 0xfff7}, {0xfff2, 0x1}}, [@filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x42c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x0, 0x1, 0x1645, 0x4, 0x6, 0x5, 0x9, 0x6, 0xff, 0x3, 0x1ff, 0x584, 0xe22, 0x3, 0x10001, 0x2, 0xb8, 0x7, 0x73a3a4d1, 0xf6b8, 0x1ff, 0x2, 0xbf2, 0x9, 0x1, 0x1, 0xffffffff, 0x0, 0x1, 0x9, 0xff, 0x3, 0x4, 0x7, 0x8, 0x400, 0x7f, 0x4, 0xff, 0x2e90, 0x100, 0x8, 0xff, 0x1f, 0x0, 0x3ff, 0x51, 0x9, 0x100, 0x3, 0x4, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x4, 0x10001, 0x200, 0xcd, 0x1, 0x1, 0x6, 0x401, 0x2, 0x1, 0xb502, 0x80000, 0x9, 0x8, 0x82, 0x4, 0x468, 0x3, 0xcb0, 0x8f2, 0x1, 0x4, 0x1000, 0x9, 0xfff, 0xffff, 0x6, 0x101, 0x1, 0x8, 0x9, 0xd0, 0x3, 0x8, 0x2, 0xffffffffffffffff, 0x3, 0x1ff, 0x120000, 0x1, 0x1, 0xff, 0x4, 0x6, 0xfffffffffffffff7, 0x7f, 0x5, 0x100000001, 0x8001, 0x2, 0x5b1, 0x7fffffff, 0x7, 0xb76, 0x9, 0x3, 0x6, 0x1ff, 0x2, 0x200, 0x3, 0x0, 0x2, 0xa7, 0x7ff, 0x1, 0x100, 0x100000000, 0x100000000, 0x8, 0x8001, 0xffffffffffffffff, 0xb310, 0x0, 0x20, 0x6, 0x8001, 0x3eb6, 0xfffffffffffffff9, 0x200, 0xfff, 0x75a, 0x80, 0x0, 0x0, 0x7, 0xef, 0x5, 0x3, 0x1f, 0x5, 0x3, 0x7fffffff, 0x3, 0xc000000000000000, 0x80000001, 0x35b6, 0x9, 0x1, 0x4, 0x8ed, 0xffffffff, 0x3, 0x1f8, 0x5, 0x3, 0x20, 0xffffffff80000000, 0x0, 0x4, 0x5, 0x4, 0x4f4, 0x10000, 0x9, 0x7, 0x3, 0x1, 0x0, 0xa363, 0xebad, 0x1, 0x401, 0x98eb, 0x0, 0x101, 0x10000, 0x1, 0x9d0a, 0x8, 0x4, 0xd1, 0x4, 0xd59, 0x80000000, 0x1, 0x100000000, 0x0, 0x7ff, 0xcc, 0x0, 0x10001, 0x16d, 0x20, 0x10001, 0x63, 0x4, 0x2, 0x101, 0x3, 0x3, 0x4, 0x1, 0x0, 0x400, 0x800080, 0x3, 0x7, 0x6, 0x0, 0x7745, 0x9, 0x5, 0x7, 0x3, 0xf061, 0x3ff, 0x539, 0x8, 0x20, 0x6b, 0x4, 0xe6b8, 0x40, 0x7, 0x7, 0xffffffff, 0x2, 0x7, 0x7737a3d8, 0x5, 0x8000, 0x1, 0x3, 0x3, 0x2, 0x546d, 0x7, 0x81, 0xffffffff00000000, 0x3ff, 0x7, 0x2d3, 0x20, 0x8, 0x9, 0xffffffffffffffff, 0xfffffffffffffff7, 0xffff]}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfff}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffffffffffffd}]}}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x6c, 0x2, [@TCA_CGROUP_EMATCHES={0x68, 0x3, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, @TCF_EM_CONTAINER={0x50, 0xfffffffffffffffd, {0x4, 0x0, 0x5, 0x6, "c34abb9d34fd10d02c09161fc0dbecf6f96aa049ed71fe89d58658d4022a378729695425fdc0b0c106d80aca1fa12ec449841c70f7c14eaa55db423a352c442a"}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_OPS_LEN={0x8}]}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_OPS_LEN={0x8, 0x4, 0x9}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xffff}}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:15:35 executing program 1: 00:15:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x0, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:35 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYRES32], 0x1, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:35 executing program 0: 00:15:35 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) [ 666.245939] libceph: parse_ips bad ip '::0.Qnullb' 00:15:35 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYRES32], 0x1, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:35 executing program 1: 00:15:35 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYRES32], 0x1, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:35 executing program 0: [ 666.494825] libceph: parse_ips bad ip '::0.Qnullb' 00:15:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 666.748050] libceph: parse_ips bad ip '::0.Qnullb' 00:15:35 executing program 1: 00:15:38 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000), 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000006, 0x20030, r2, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r1, r2) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f0000000040)) tkill(r0, 0x15) 00:15:38 executing program 0: 00:15:38 executing program 1: 00:15:38 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:38 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) [ 669.433261] libceph: parse_ips bad ip '::0.Qnullb' 00:15:38 executing program 3: 00:15:38 executing program 1: 00:15:38 executing program 0: 00:15:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) 00:15:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x251}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 00:15:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40, 0x0) 00:15:39 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6, 0x8, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) syz_execute_func(&(0x7f00000001c0)="f042084308660f3803250100000036f344ccc4617e12539ef3426c8fa828978600000000fe8fc978cb76a5f30fbc2d1c000000c4a125f5ff6766450f3837be02000000") 00:15:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x0, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:39 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:15:40 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xe, &(0x7f0000000180), 0x4) 00:15:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:15:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x0, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:40 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:15:40 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101400, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000040)={0xf5, 0x0, [0x8, 0x1ff, 0xffffffff, 0x7]}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f00000000c0)={0x12}) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:15:40 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 671.819936] libceph: parse_ips bad ip '::0.Qnullb' 00:15:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x0, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:41 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:15:41 executing program 3: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) socket$packet(0x11, 0x0, 0x300) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:15:41 executing program 0 (fault-call:2 fault-nth:0): mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x0, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:41 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x278, 0x278, 0x278, 0x278, 0x278, 0x4, &(0x7f0000000380), {[{{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_to_bridge\x00', 'syzkaller1\x00', {0xff}, {}, 0xaf, 0x3, 0x2}, 0x0, 0x98, 0xc0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @rand_addr=0xdcb5, 0xffffff00, 0xff000000, 'bcsh0\x00', 'veth0\x00', {}, {}, 0x32, 0x2, 0x14}, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x1, 0x5, [0x3b, 0x27, 0x1, 0x1b, 0x34, 0x4, 0x3f, 0x29, 0x2f, 0x1d, 0x72, 0x35, 0x10, 0x17, 0x20, 0x2e], 0x3, 0x3, 0x3}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0x0, 'team0\x00', 'bond_slave_1\x00', {}, {}, 0x89, 0x3, 0x1}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) chroot(&(0x7f0000000240)='./file0\x00') lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x3, 0x2, 0x5, 0x8000, 'syz0\x00', 0x1}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="fb6ebce31e4830d99099fdf5a0cb73c9e13396ae8bd0a55e1ba45d6db5be3389c6eec56a37efd7f4257621e5cdcd96b5a7ed46", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@int=0xfffffffffffffff9, 0x4) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 672.740574] FAULT_INJECTION: forcing a failure. [ 672.740574] name failslab, interval 1, probability 0, space 0, times 0 [ 672.752410] CPU: 0 PID: 16587 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #69 [ 672.759728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.762191] Call Trace: [ 672.762191] dump_stack+0x306/0x460 [ 672.762191] should_fail+0x1170/0x1350 [ 672.762191] __should_failslab+0x278/0x2a0 [ 672.762191] should_failslab+0x29/0x70 [ 672.762191] __kmalloc_track_caller+0x20c/0xe60 [ 672.762191] ? ksys_mount+0xc4/0x3d0 [ 672.762191] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 672.762191] ? strnlen_user+0x384/0x4a0 [ 672.762191] strndup_user+0x154/0x350 [ 672.762191] ksys_mount+0xc4/0x3d0 [ 672.762191] __se_sys_mount+0xe5/0x110 [ 672.762191] __x64_sys_mount+0x62/0x80 [ 672.762191] do_syscall_64+0xbe/0x100 [ 672.762191] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 672.762191] RIP: 0033:0x457569 [ 672.762191] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.762191] RSP: 002b:00007f4b74a73c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 672.762191] RAX: ffffffffffffffda RBX: 00007f4b74a73c90 RCX: 0000000000457569 [ 672.762191] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000020000040 [ 672.762191] RBP: 000000000072bf00 R08: 0000000020000140 R09: 0000000000000000 [ 672.762191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b74a746d4 [ 672.762191] R13: 00000000004c289b R14: 00000000004d3c78 R15: 0000000000000003 00:15:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000000c0)={{}, "73797a308000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000100"}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x400) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000040)) [ 673.169541] input: syz1 as /devices/virtual/input/input11 [ 673.193511] input: syz1 as /devices/virtual/input/input12 00:15:42 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:15:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='cpuset\x00') sync_file_range(r0, 0x10000, 0x1000, 0x4) preadv(r2, &(0x7f0000000480), 0x10000000000001ed, 0x0) 00:15:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x0) r1 = dup(r0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x6, 0x9, 0x40}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r2 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x12, r2, 0x0) [ 673.763885] libceph: parse_ips bad ip '::0.Qnullb' 00:15:43 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x58) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r1, 0x704, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x619}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8800) r2 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="f326037d728e89283f72a8abe7336139883a4999455b11cbf2ed644e64a4e683e6c077f3efe2c13bb7f7913945c7bf", 0x2f, 0xfffffffffffffffd) r6 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='nbd\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r5, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$int_in(r3, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f0000704000)={0x2, r2}) recvmsg(r4, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r3, r4) tkill(r2, 0x15) 00:15:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x0, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000063) read(r1, &(0x7f0000000000)=""/11, 0xb) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000100)=0x20000000000000, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xc8) ioctl$TCFLSH(r1, 0x540b, 0x2) r3 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x8000, 0x960, 0x721, 0x4, 0x9, 0x9, 0x1f, 0x5, 0xc7, 0x2, 0x700000, 0x2}) ioctl$TCXONC(r3, 0x540a, 0x0) 00:15:43 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="3a3a302e516e9ec3ad0d0000000000e70fad8e45a1fef225e934c7ee04e8eca856537c9eedea0b2c97d92503dc59d15ad6498d5a3921ae2a6846598aea1ee654bdd7cce590adc9414a55b03fe7ec"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) gettid() getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2400, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x27a600000, 0x4}, 0x4) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="ca813ea6c86c2c8417c3ee212e7c2bf9bb9cd3a53aadfb57ab0859e3c0cf881705527bc6a68516e08b5e5cae2f5abac7f0fc7391db8459fe7257ca124f5fe969da6b7895963cc7b14f042457d1de9705b224f4565128dabb60ff74fa46d3896c44486c323db9644ae1b3ee01091304", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:43 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000075c0)='/dev/uhid\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f00000072c0)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000003c0)=""/133, 0x85}], 0x2, &(0x7f0000000780)=""/136, 0x88, 0x8}, 0x40}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000940)=""/113, 0x71}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/126, 0x7e}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f0000000b40)=""/134, 0x86}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x9, &(0x7f00000031c0)=""/4096, 0x1000, 0x3}, 0x800}, {{&(0x7f0000000cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d40)=""/127, 0x7f}], 0x1, &(0x7f0000000e00)=""/26, 0x1a}, 0x8}, {{&(0x7f0000000e40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000ec0)=""/192, 0xc0}, {&(0x7f0000000f80)=""/180, 0xb4}, {&(0x7f00000041c0)=""/171, 0xab}, {&(0x7f0000004280)=""/93, 0x5d}], 0x4, &(0x7f0000004300)=""/118, 0x76, 0x1}, 0xfc00000000000000}, {{&(0x7f0000004380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000005400)=[{&(0x7f0000004400)=""/4096, 0x1000}], 0x1, &(0x7f0000005440)=""/156, 0x9c, 0x7}}, {{&(0x7f0000005500)=@nl=@unspec, 0x80, &(0x7f0000005640)=[{&(0x7f0000005580)=""/77, 0x4d}, {&(0x7f0000005600)=""/49, 0x31}], 0x2, &(0x7f0000005680)=""/20, 0x14, 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f00000056c0)=""/54, 0x36}], 0x1, 0x0, 0x0, 0x4}, 0x2}, {{&(0x7f0000005740)=@hci, 0x80, &(0x7f0000005900)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/61, 0x3d}, {&(0x7f0000005840)=""/144, 0x90}], 0x3, &(0x7f0000005940)=""/20, 0x14, 0x1}, 0x10000}, {{&(0x7f0000005980)=@nl, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005a00)=""/132, 0x84}], 0x1, &(0x7f0000005b00)=""/233, 0xe9, 0x800}, 0x6}, {{&(0x7f0000005c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007180)=[{&(0x7f0000005c80)=""/213, 0xd5}, {&(0x7f0000005d80)=""/107, 0x6b}, {&(0x7f0000005e00)=""/38, 0x26}, {&(0x7f0000005e40)=""/60, 0x3c}, {&(0x7f0000005e80)=""/123, 0x7b}, {&(0x7f0000005f00)=""/251, 0xfb}, {&(0x7f0000006000)=""/167, 0xa7}, {&(0x7f00000060c0)=""/10, 0xa}, {&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000007100)=""/75, 0x4b}], 0xa, &(0x7f0000007240)=""/73, 0x49, 0x849}, 0x40000000000000}], 0xa, 0x40000160, &(0x7f0000007540)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000007580)={0x0, 0x2710}, 0x10) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000200), 0x1a7) write$UHID_CREATE(r1, &(0x7f00000004c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000100)=""/183, 0xb7}, 0x120) write$UHID_INPUT2(r1, &(0x7f0000007600)=ANY=[@ANYBLOB="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"], 0x6) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234418dc25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:15:43 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 674.942740] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 674.949566] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 674.956567] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 674.963473] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 674.970241] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 674.977155] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 674.984116] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 674.990876] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 674.995697] ceph: device name is missing path (no : separator in ::0.QnžÃ­ ) [ 674.997782] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 675.011696] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 675.018660] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 675.227890] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 00:15:44 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="3a3a302ebb340000000000009c188d7378898ebffe8b2a92a2ba5bea66dc966420effa45b3add989c8b7495246590c7f631b138de803d2bd2ce90b06271ad78aac90b21fad4530e488c13101865020950732eaf58fd4af6b172ea8bfdcc3c3e8180ca0444a2c8d3661ea9fc0792d550851aba3a5f448b690dcd98c9a70b458ec89d5cd895c5911d97771d5846cbc62"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 675.308195] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.315665] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.322678] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.329449] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.336421] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.343325] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.350151] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 00:15:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x0, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 675.357053] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.364029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.371241] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.378224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.385203] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.392166] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.398933] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.405879] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.412772] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.419625] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.426519] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.433470] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.440243] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.447193] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.454093] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.460927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.467821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.474756] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.481530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.488462] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.495360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.502290] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.509055] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.516047] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.522931] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.529763] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.536721] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.543659] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.550438] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.557377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.564280] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.571105] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.577996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.584939] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.591713] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.598657] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.605561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.612576] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.619354] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.626307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.633225] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.640065] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.647035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.653977] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.660742] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.667683] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.674597] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.681436] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.688361] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.695295] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.702302] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 00:15:44 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="3a3a302e516e9ec3ad0d0000000000e70fad8e45a1fef225e934c7ee04e8eca856537c9eedea0b2c97d92503dc59d15ad6498d5a3921ae2a6846598aea1ee654bdd7cce590adc9414a55b03fe7ec"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) gettid() getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2400, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x27a600000, 0x4}, 0x4) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="ca813ea6c86c2c8417c3ee212e7c2bf9bb9cd3a53aadfb57ab0859e3c0cf881705527bc6a68516e08b5e5cae2f5abac7f0fc7391db8459fe7257ca124f5fe969da6b7895963cc7b14f042457d1de9705b224f4565128dabb60ff74fa46d3896c44486c323db9644ae1b3ee01091304", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 675.709215] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.716177] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.723104] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.729909] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.736941] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.743830] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.750668] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.757627] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.764627] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 675.771380] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.778308] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.785345] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.792300] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.799104] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.806108] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.813006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.816845] ceph: device name is missing path (no : separator in ::0.»4) [ 675.819827] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.833670] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.840438] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.847471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.854411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.861247] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.868212] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.875141] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.881907] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.888900] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.895796] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.902775] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.909548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.916568] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.923471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.930325] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.937289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.944243] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.951017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.958013] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.964902] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.971731] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.978681] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.985611] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 675.992377] cgroup: fork rejected by pids controller in /syz3 [ 675.998546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.005589] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 676.012518] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.019326] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.026352] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.030084] ceph: device name is missing path (no : separator in ::0.»4) [ 676.033270] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.033351] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.054026] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.060803] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.067758] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.074682] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.081518] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.088429] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.095358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.102228] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.109067] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.115953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.122872] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.129834] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.136802] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.143687] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 676.150518] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.157432] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.164379] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.171146] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.178067] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.184954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.191791] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.198692] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.205633] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.212519] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.219407] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.226330] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.233284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.240048] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.246974] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.253865] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.260701] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.267603] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.274533] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.281306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.288241] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.295135] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.301968] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.308857] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.315777] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.322654] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.329482] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.336394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.343336] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.350102] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.357018] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.363918] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.370760] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.377645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.384571] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.391369] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.398302] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.405196] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.412170] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.418939] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.425875] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.432756] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.439615] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.446497] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.453437] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.460216] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.467199] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.474137] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.481036] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.487942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.494935] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.501694] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 00:15:45 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="3a3a302e516e756c16000000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x0, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 676.508643] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.515573] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.522506] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.529317] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.536238] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.543142] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.549985] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 676.645754] ceph: device name is missing path (no : separator in ::0.Qnul) [ 676.700343] ceph: device name is missing path (no : separator in ::0.Qnul) 00:15:45 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:15:46 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000140)="6a23a962ed98ea11dd7a2756aaaaba46f9bdc87f53762be7e21be0e76cc3cc5ae9dff51ffbe9e8ebddb7be633ffe989c03b8461301f7a4df315de3004f3ca23223e6c4c13524de560c30158efb7f21fc732d1410c473b7b73b1d03391ded4a2e9b25b1f9a604deabfc2fe73a9fff53285f", 0x71}) tkill(r0, 0x15) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x80000, 0x0) 00:15:46 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="3a3a302e516e756c6c623a0025f9cb78b31734d34bfe769b3f6bb3f2a054088daab1547ffea4f8b63010000000b0"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x1, 0x6, 0x80000001, 0x0, 0xf}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x0, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 677.417152] libceph: parse_ips bad ip '::0.Qnullb' 00:15:46 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") r0 = geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(r1, r0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 677.502535] libceph: parse_ips bad ip '::0.Qnullb' [ 678.193472] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 00:15:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000080), 0x28a, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x403}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000000003) 00:15:47 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40, 0x0) getsockname$unix(r1, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e) write$FUSE_LK(r1, &(0x7f0000000200)={0x28, 0x0, 0x8, {{0x8, 0x7, 0x0, r0}}}, 0x28) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) getrlimit(0xe, &(0x7f0000000640)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x424000, 0x22) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000380)=""/160) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xfffffffffffffffe, 0x6ee0000000000000, 0x1ff, 0x10000, 0xa2}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000500)=r3, 0x4) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000600)) 00:15:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x0, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:47 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 678.539518] libceph: parse_ips bad ip '::0.Qnullb' 00:15:48 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="3a3a302e516e9ec3ad0d0000000000e70fad8e45a1fef225e934c7ee04e8eca856537c9eedea0b2c97d92503dc59d15ad6498d5a3921ae2a6846598aea1ee654bdd7cce590adc9414a55b03fe7ec"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) gettid() getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2400, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x27a600000, 0x4}, 0x4) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="ca813ea6c86c2c8417c3ee212e7c2bf9bb9cd3a53aadfb57ab0859e3c0cf881705527bc6a68516e08b5e5cae2f5abac7f0fc7391db8459fe7257ca124f5fe969da6b7895963cc7b14f042457d1de9705b224f4565128dabb60ff74fa46d3896c44486c323db9644ae1b3ee01091304", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:15:48 executing program 1: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000b40), 0x37, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)) 00:15:48 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:15:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x0, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:15:49 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x12, "ad2a770c61a2b49c"}, 0xa, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r1, r2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) tkill(r0, 0x15) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000000c0), &(0x7f0000000140)=0x1) 00:15:49 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$KDENABIO(r0, 0x4b36) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="3a3a61932b758e2db523c302813a9e4eb504fa0abd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073e56c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000b40)) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000540), &(0x7f0000000480), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="2d3e45c00e6b9d00e1b804000000000000001a0118305f35357ce7e7e3df3374000000", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) getpeername$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, [], 0x16}, @in6=@ipv4={[], [], @local}, 0x4e21, 0x8000, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0xef, r2, r1}, {0xb7, 0x5, 0x1, 0x3, 0x1, 0x9, 0xfa, 0x10000}, {0x8, 0x7, 0x40, 0x734}, 0x4, 0x0, 0x2, 0x1, 0x2}, {{@in6=@loopback, 0x4d3, 0x3f}, 0x2, @in6=@mcast1, 0x0, 0x1, 0x3, 0xff, 0x1, 0xff, 0xfff}}, 0xe8) 00:15:49 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) [ 680.846293] ceph: device name is missing path (no : separator in ::a“+uŽ-µ#Ã:žNµú [ 680.846293] ½) [ 680.991024] IPVS: ftp: loaded support on port[0] = 21 [ 681.018573] ceph: device name is missing path (no : separator in ::a“+uŽ-µ#Ã:žNµú [ 681.018573] ½) 00:15:50 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x7, 0x7a84}, {0x0, 0x3}, 0x20, 0x5aeb0d736b0c1b43, 0x2}) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) [ 681.410748] libceph: parse_ips bad ip '::0.Qnullb' 00:15:50 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e8, 0x110, 0x2b0, 0x550, 0x430, 0x2b0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, &(0x7f0000000440), {[{{@ip={@rand_addr, @multicast2, 0xff000000, 0xff, 'ip6tnl0\x00', 'nr0\x00', {0x39d62430196d29d7}, {}, 0x5e, 0x2, 0x30}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0xf18, 0x1}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0x0, 0xffffffff, 'bridge0\x00', 'yam0\x00', {}, {0xff}, 0x62, 0x1, 0x30}, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x7}}}, {{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x4, 0x1, 'bm\x00', "fee288b1da6e355d2d924b0cbf5705caaf0b655130a38e5abab185bd1874314bbfc020fd06f8ec2bf75c5551d20644ef4b0040b2c8a8b8eb1f81abd8f2b9378f89f04834e629b468f0e4c3afcfe0c28da56d4ffb4c8c2b4a6fea4742c91f525f28e68fe0e6274db7bbd3f6ad89b9f3c5e3ec4412c289a895dd4e3f8d895b6574", 0x6f, 0x3, 0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1c}, @remote, 0xffffffff, 0xffffffff, 'ip6tnl0\x00', 'rose0\x00', {0xff}, {0xff}, 0x32, 0x3, 0x11}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@connlabel={0x28, 'connlabel\x00', 0x0, {0x6, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="06239821b801", 0x0, 0xf, [0x22, 0x10, 0x3f, 0x38, 0x7, 0x12, 0x21, 0x2b, 0x18, 0x37, 0x8, 0x7, 0x26, 0x2b, 0x24, 0x27], 0x2, 0x1, 0xffffffff80000001}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x648) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8080, 0x0) socket(0x13, 0x801, 0x3f) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000200)={r2, 0x10}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 681.533753] libceph: parse_ips bad ip '::0.Qnullb' 00:15:50 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) rmdir(&(0x7f0000000000)='./file0\x00') getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 681.722902] libceph: parse_ips bad ip '::0.Qnullb' 00:15:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000001f0000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005004500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}}, 0x0) close(0xffffffffffffffff) [ 681.976769] libceph: parse_ips bad ip '::0.Qnullb' 00:15:51 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000000c0)={0xbad, 0xd02, 0x3c9, @link_local, 'veth0_to_bridge\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(r1, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 682.219648] libceph: parse_ips bad ip '::0.Qnullb' [ 682.263442] libceph: parse_ips bad ip '::0.Qnullb' [ 684.573427] device bridge_slave_1 left promiscuous mode [ 684.579207] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.615317] device bridge_slave_0 left promiscuous mode [ 684.621107] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.825983] team0 (unregistering): Port device team_slave_1 removed [ 687.838303] team0 (unregistering): Port device team_slave_0 removed [ 687.850332] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 687.898648] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 687.968698] bond0 (unregistering): Released all slaves [ 688.428500] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.435103] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.443629] device bridge_slave_0 entered promiscuous mode [ 688.587587] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.594188] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.602740] device bridge_slave_1 entered promiscuous mode [ 688.743263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 688.883983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 689.199583] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 689.335723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 689.426875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 689.434916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.780432] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 689.788053] team0: Port device team_slave_0 added [ 689.865587] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 689.873208] team0: Port device team_slave_1 added [ 689.950553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 690.030141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 690.112566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 690.119823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 690.128996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 690.208690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 690.216238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 690.225322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 691.094860] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.101261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.108240] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.114731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.122805] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 691.129390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.316708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.610157] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 694.905928] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 694.912421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 694.920271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 695.210849] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.123360] ceph: device name is missing path (no : separator in ::0.QnžÃ­ ) 00:16:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x5, 0x803, 0x0) read(r1, &(0x7f0000000400)=""/164, 0x471) 00:16:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x0, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:06 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() io_setup(0x1, &(0x7f0000000000)=0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x1, 0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f0000000140)="ac8ccac9d43f0b009dc96fe064d03bd8cb9aa691c9c155826d80616eb9d331e3d0a1c6373a5c2d0017aa0357ea1f2905fb0d8ccfd2ecc76ac4964f6fc8a138498386faa5be5ca314b1bb98db3cd44a5797214b0bd28613f479fc60fee05576490ef89d462f0fc582eaa12c101e433a1d1c14606a9752f40b72ad80f822788f34d1d8f26fe7fac984caf7a548543b61575a9d1f9bb2ca11b4e521025750ff44c259ab22c68b8edbf112e344856822d36c9324c0beefbf7705b41d225e4a2269c3b5", 0xc1, 0xfffffffffffffffb, 0x0, 0x1, r3}, &(0x7f00000002c0)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$smack_current(r4, &(0x7f0000000040)='$systemem1GPLwlan1/\x00', 0x14) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x463, 0x8, 0x4, 0xffffffff}, {0xcd, 0x101, 0x8000, 0x2}, {0x2040000000000000, 0x100, 0x100000000, 0xfffffffffffffffd}, {0x8001, 0x7, 0x40, 0x20}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f00000002c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000006c0)={0x0, 0x18b}) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000002700), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000740), &(0x7f0000000780)=0x4) flistxattr(r7, &(0x7f0000000700)=""/62, 0x3e) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x7ee}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000a00)=[{0x0, 0x1}, {0x3, 0x7fe000000000000}, {0x8, 0x5}, {0x2, 0xd8e}, {0xb, 0x8000}, {0x2, 0x2}, {0x8, 0x1}], 0x7) ioctl$int_in(r5, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r5, 0xa, 0x12) inotify_init1(0x80800) fcntl$setownex(r5, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r8, &(0x7f0000000980)={&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000880)=""/46, 0x2e}], 0x2, &(0x7f0000000900)=""/107, 0x6b, 0xf3e}, 0x40000001) recvmsg(r6, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r5, r6) tkill(r0, 0x37) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000009c0)=0x401, 0x4) 00:16:06 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:16:06 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x14, 0x101000) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x3, 0x0, 0xffffffff7fffffff}}, 0x28) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00', 0x4}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000180)={0x6, 0x5}) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000040)={0xda, ""/218}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x3, 0x2d1) [ 697.313586] libceph: parse_ips bad ip '::0.Qnullb' 00:16:06 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") r0 = shmget$private(0x0, 0x2000, 0x2a, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000580), &(0x7f00000005c0)=0x0) r3 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) r5 = getpid() r6 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x10000, r1, r2, r3, r4, 0x180, 0x1}, 0x6, 0xf4, 0x9cc0, 0x5, r5, r6, 0x7}) geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) r7 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x42) accept4$unix(r7, 0x0, &(0x7f00000000c0), 0x80800) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="1a366eb9a760c3ffacae81aeeca211e5c64aa2654e7a5f9371b7600bc07010de046c7cacd906beb60293b4efb3e12c308bb390e2510f765c1d61fbe192720e700a6c26a87b4e08eed705984983526e24b703de31c9289f017afc9c13d44ba84c55389d90cee14a932e85a17f626cb6552c9d519f2d3e4e1b4a1db632ca3b07af6598f59aaee23263f1845bfab48e489196721c4e5bc5eb62b3119f33c54277ac7950b3fd69752045dd88b292ffc88c71177e43151a13dfd89ea4899c9ffaa47638cbab707d51ec240d745825408a5a153c4fb69ce899c5d9c6b96d", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) r8 = shmget(0x0, 0x1000, 0x320, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r8, 0x0) 00:16:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x0, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 697.628549] libceph: parse_ips bad ip '::0.Qnullb' 00:16:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cad01"]) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x80400, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000280)={r2}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) lstat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000480)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) ppoll(&(0x7f0000000180)=[{r0, 0x4}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) [ 697.723231] libceph: parse_ips bad ip '::0.Qnullb' 00:16:06 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") r0 = geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setreuid(r1, r0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:06 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000900)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4000) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x9, 0x800, 0x8, 0x5, 0x0, 0x4, 0x20000, 0x1, 0x2066, 0x401, 0xffffffffffffffc0, 0x4, 0x6, 0x6, 0x100000000, 0xff25, 0xa242, 0x400000, 0x0, 0x7, 0x2, 0x3, 0x3, 0x1, 0x0, 0xfffffffffffffffa, 0x6, 0x401, 0x3, 0x10000, 0x50a3, 0x7, 0x1, 0x2, 0x7, 0x1ff, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x180, 0x160000000000, 0x8, 0x4, 0x50, 0x1, 0x8}, r1, 0x0, r0, 0x1) [ 697.934776] Unknown ioctl 35298 00:16:07 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r1, r2) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x2) tkill(r0, 0x15) [ 698.034519] Unknown ioctl 35298 [ 698.087883] libceph: parse_ips bad ip '::0.Qnullb' 00:16:07 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x0, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 698.224752] libceph: parse_ips bad ip '::0.Qnullb' 00:16:07 executing program 3: r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="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", 0x1000, 0xfffffffffffffffa) lstat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() keyctl$get_persistent(0x17, r1, r0) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000001140)) [ 698.420183] libceph: parse_ips bad ip '::0.Qnullb' 00:16:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000000c0)={0x3f, {{0xa, 0x4e20, 0xffffffff, @mcast1, 0x8}}, {{0xa, 0x4e24, 0x5, @local, 0x1}}}, 0x108) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000830000000200000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 698.584727] libceph: parse_ips bad ip '::0.Qnullb' 00:16:07 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:08 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4600, 0x8) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)="6367726ff5702e636f6e74726f6c6c65727300", 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000180)=0x4c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x4, 0x800000000000007d, 0x90d}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000180), &(0x7f00000000c0)="fbae903c3360a9236f00000000a5b9bcd1c8c5fef515a0b2ca56721fcd3d753b624612c313208f841c3b2a54d290eb46c94914ae380fc3790133a8e8d0b281054a14ca66e802c9d45e7a9c71a1e71a17531b5f40d693fb9d99", 0x1}, 0x20) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) 00:16:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x0, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 699.131388] libceph: parse_ips bad ip '::0.Qnullb' 00:16:08 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="9a25bce973865afdc18f3a9ad59d95b1a8b47b30d068bba4795973a8ff802d65ecd6d565c8efa7af82da7c2679fc08d9e5f7b370322b05447092a1c97e56042e6884e7aebbadf5248b10e599bd0d07a08423246fcfab2d9e58b740120f31720d24e3a9870f70cbfbe8e333f083052bf6affbed4d8384892e3f89070f0bdb27e814e819c3ad257f26220c465d3634fd7aac51a2fddd0ced5200be778b7a26f19df33e404f695edeb34aafff6af04b3cb014e264a3c397ffcbf0660bdf88b3982a91821bbad9111e27fcd8b372", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000722, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) open$dir(&(0x7f0000000280)='./file0\x00', 0x501042, 0x29) shutdown(r0, 0x1) 00:16:08 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) read(r0, &(0x7f0000000040), 0x0) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$int_in(r2, 0x5452, &(0x7f00005ebff8)=0x3f) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x400}, 0x28, 0x1) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x2, r1}) recvmsg(r3, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 00:16:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x0, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x210000) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/129) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 699.575864] libceph: parse_ips bad ip '::0.Qnullb' [ 699.654041] libceph: parse_ips bad ip '::0.Qnullb' 00:16:08 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") r0 = geteuid() r1 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/cuse\x00', 0x2, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='syz_tun\x00', 0xffffffffffffff9c}, 0x10) r10 = syz_open_dev$rtc(&(0x7f00000007c0)='/dev/rtc#\x00', 0x140000000000, 0x40) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800)='/dev/hwrng\x00', 0x6001, 0x0) r13 = fanotify_init(0x7, 0x80000) r14 = socket$inet6_udp(0xa, 0x2, 0x0) r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)={&(0x7f00000014c0)='./file0/file0\x00', 0x0, 0x10}, 0x10) r16 = accept4(0xffffffffffffffff, &(0x7f0000001540)=@nfc_llcp, &(0x7f00000015c0)=0x80, 0x80000) r17 = socket$packet(0x11, 0x2, 0x300) r18 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003080)='/dev/uinput\x00', 0x0, 0x0) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000030c0)='/dev/ptmx\x00', 0x10000, 0x0) r20 = socket$inet6_sctp(0xa, 0x5, 0x84) r21 = bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0x1, 0x15, &(0x7f00000031c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0xfd8, 0xc, 0xf, 0xe, 0xffffffffffffffc0}, @map={0x18, 0x7, 0x1, 0x0, 0xffffffffffffff9c}, @jmp={0x5, 0x8da1, 0xd, 0x4, 0x0, 0x1, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @map={0x18, 0x5}, @exit, @exit, @exit, @jmp={0x5, 0x4, 0xd, 0xf, 0x4, 0xfffffffffffffffe, 0x18}]}, &(0x7f0000003280)='syzkaller\x00', 0x5, 0x1000, &(0x7f00000032c0)=""/4096, 0x41100, 0x1, [], 0x0, 0x2}, 0x48) r22 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000005540)='/proc/self/attr/current\x00', 0x2, 0x0) r23 = signalfd4(0xffffffffffffff9c, &(0x7f0000005580)={0x3}, 0x8, 0x80000) r24 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000055c0)='/proc/self/net/pfkey\x00', 0x20002, 0x0) r25 = openat$ion(0xffffffffffffff9c, &(0x7f0000005600)='/dev/ion\x00', 0x8001, 0x0) r26 = openat$audio(0xffffffffffffff9c, &(0x7f0000005640)='/dev/audio\x00', 0x400, 0x0) r27 = openat$rtc(0xffffffffffffff9c, &(0x7f0000005680)='/dev/rtc0\x00', 0x519100, 0x0) r28 = socket$can_bcm(0x1d, 0x2, 0x2) r29 = syz_open_dev$amidi(&(0x7f00000056c0)='/dev/amidi#\x00', 0x6, 0x1) r30 = syz_open_dev$sndmidi(&(0x7f0000005700)='/dev/snd/midiC#D#\x00', 0x4, 0x400000) r31 = openat$random(0xffffffffffffff9c, &(0x7f0000005740)='/dev/urandom\x00', 0x48000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000057c0)={r2, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f0000005780)='system\x00'}, 0x30) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000005800)={0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000005840)={0x0, 0x80000, 0xffffffffffffff9c}) r35 = socket$inet6(0xa, 0x5, 0x3796) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000005c80)={0xffffffffffffffff}) r37 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r6, &(0x7f0000006040)=[{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)="af3bc56c453bfbf66f120ab5698379fd5b8efd23e9f765057366810d120395d888a5288efc2fd46e9ff800ff687a9f125dea24790b648134dfdb91a5", 0x3c}, {&(0x7f0000000380)="59bfdf127abce0582c67a2441072155de9193ed264d96f24cf8f6193ee4464dbf01dee466c01df786ec9e594f43cf595abcf79ef87d9e6f0828993bdd9ef577a243b9e226116f914bdb829cbd74f429ab5a6a3e8b9db7afd6f3fc77f9eeb306279ed677db8f71163e206eca28389a416fe36bbd1d50a862f7393840894c4b4c0b128927fb7678b645f72b203c5e59dc4c0b9cc6104763ce3afa277bd3a0e0d", 0x9f}, {&(0x7f0000001a80)="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", 0x1000}], 0x3, 0x0, 0x0, 0x40000}, {&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)="5a2661862277809f46b1cc5219b9711054cb98ac262d3640cf018af6de77b52e80e83d04cee24e43a32f754c3a0663abab63ab88c0e506159c52072ef0e19137fd310d371b7d8c82261f45ab3b2cdc2fec474d124280cc4509a094cce2c08ee4252d951e582b9643491f7d0a62b77c68123bec7821f28b74fe65d3d33d35258479fe5f7336cbccbfa6ff13de95de13ba5a2f0f517bb55a2718e63e24de21f48d4ad215b6562470ce4c5898ea75d7b34b63e86d539a9b4e64", 0xb8}, {&(0x7f00000005c0)="4ad9fd32f148e9870c3ac06d89fff90c2b10403b086981009d6eeff105ee965b2e011fae0ab48b0ba943d3e0ea6b3a51786c009e26c2a482b9503a47094529abe9db14f1d3fd6b632a7a357b2a07242b988ccc61a6a560d531ce0ea271ec7fca9ee0ed2884632d9d472961318e915a85d1", 0x71}, {&(0x7f0000000640)="bc3b35380afb6e60dea68424ed45f9895aba956cfaf0cd0d013fe78b70e5792e19e9b80525e45bdf7d537c6f230ff3bde37ae71bdb24e1d5bd2e673ede781cd7cb", 0x41}], 0x3, &(0x7f0000000840)=[@rights={0x28, 0x1, 0x1, [r7, r8, r9, r10, r11]}, @cred={0x20, 0x1, 0x2, r2, r3, r1}, @cred={0x20, 0x1, 0x2, r2, r0, r4}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r2, r5, r4}, @rights={0x20, 0x1, 0x1, [r12, r13, r14]}], 0xc8, 0x40d1}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001180)=[{&(0x7f00000009c0)="84155ae4e8aebc50b46e81b4ae217ab60b3893d294de8b0132883f4b3f289c64fa252f1fcf89dd800312ae129342095a21a5bfb95d1d552d4b57b41c4d13be423d", 0x41}, {&(0x7f0000000a40)="938799959958542786096af3af0bea5639aa836bedbb3575f4720554169ad9c709d2f91c2861124aeded474c22234ecd9e74efee7a8e90589411", 0x3a}, {&(0x7f0000000a80)="aeef7b1c860b5f", 0x7}, {&(0x7f0000000e80)="8e4147b69858572cfc71d18988e3036a50380e3763c1bc947ac09ca850db3fadf64b7adb8c5e0930942f3efec8b091d61b0709babc1ecef549c7050a57722e681d2acb3e85cc74d19f6585466efafbd36492f4a900c7c66d3b0680ff57fffcd0a47afa94e0d59475aea1b6569fd884cd2f05dc6441ae80d50f94639b37182dc7e56bcef3774ac93f06cdc3c2ad24b2d9e5df2857f6e1135cbf6a21", 0x9b}, {&(0x7f0000000f40)="d7e9157d0d363fd5e6a5fabeaf76050567404c59bca43be9b2ff448bc2ed96e9868dec2748821f20e3453627d98123ef54eec12177d677f5eff375c61f24b185d7733b9ad8cde4d2691748ea18c6b600a2482d2612ce1c09518a8dab1790c7ba59d6d534870ba8f4ccf53c0e4e74b8518d06e3132ee12530a762e69e4b87478d4bc1c1d801a2ab1d431a2b4700951d1ad81a58bcca57f43a96dac1c38fd3672b73068f7b83cd1f8b", 0xa8}, {&(0x7f0000000ac0)="9daaaeffb715f88ee137af964df61266f3c9e3d0daecc0abd0", 0x19}, {&(0x7f0000001000)="942fa8750543a1e4d5e5f5cfc9ac31852a2a9fd68c75d99da4ded581c6512ce5de5f5d6642388a66b7c904f888a236b5a778e5eb4e09cc7597003793cd71671e6a10eecc7e86173e3c4cb574ba6bdcdc1e285a5a31ae7c47482ac2d9ddba81b9d6a7cef6df24b458ba4d380aa5578906357bc72ee4e42a369171099de39c2de2b089c187545220563ac522b263373dc80a0289e6d2c799c9c9afb5db702f6df0c1c90ae8aa0045dc1f6f7624e8f3c9486a050789c4a8e30e11a6b58dec7d", 0xbe}, {&(0x7f0000000c40)="1afe9c9121b77502c2c0b534dd56b946f60a24fe411cbd7e2d22084603177a1789637935b37e4ef5bccb9aa10596d4ce7b", 0x31}, {&(0x7f00000010c0)="a80abf0752a33ad597cf08ee79f284387c52c7d4443df9b9088cb87a29a96812ae937d2383db4049a4398f8f5bbfce148a3d8a2e7af9dc8a800e4bb4d4a9246b4c90fd941fe62fc4c728032a79184b709577c7716a64ca8876722fe4d84cf54d7ede163a0cf0306f4f4cb17094d7fb10884e55cb155ac8b542fc2f3aabb662597a5bcd858133a3d898ced4d0748194f1a6924ee86b56e8c63a920ef50c482ca8", 0xa0}], 0x9, &(0x7f0000000c80)=[@cred={0x20, 0x1, 0x2, r2, r5, r4}], 0x20, 0x8000}, {&(0x7f0000001240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000012c0)="5b9d6d6a13ea2caf3b2e6245cbd3620067d704c3f516802490c5bbb5d33c4c76fd5a8e02c129225d3ff53dc4f81d60c65a481a152021cba2160f90c67a38a7cc910022adae8aa1c3b7a64a15605c4d0e35b668b6bd00b0506091d0c0c4df12950515fa5cb3a9fb9554f168a7cbae553edb980ba09973266a1d835ee8f168fe350a756058a09a6894ee46cf1a4c47128caec766745e75f93de00b14546551b3321634f37f35065e8d4e5138ef", 0xac}, {&(0x7f0000001380)="30dcbadca0d576dc0f6a6370ea25f233a1972019e228db8f9811f89be4e012968a7abc450e4e764cb660d09ebe1c294f20ff235a2d59fd1fe4d9c7b3c03e7b14e398950a9c75953c09092ef6129015c9f4e2dac919cd41fd71b7edb95ff0517c9ab601f4f7714865f3dd1f138c7b5d446b9d4b7432a5a5a042ace517db0b0d026e286092cccacc2bab4411bdd68ec1cc15a2ca788805e1ead58ac00fd5a299a71ef079f3ebf6188fa84d7b4f2e237202039b22348948ef1baeecf1b38835c6a1d24b3af35115fa9f06b9523285654adb7847219c221ab0fc8ae35236dc36e724cacfac7bf62c6e1500918fefdada5399b6c7845f367c4cefebc21888", 0xfc}], 0x2, &(0x7f0000001600)=[@rights={0x18, 0x1, 0x1, [r15, r16]}, @cred={0x20, 0x1, 0x2, r2, r0, r4}, @cred={0x20, 0x1, 0x2, r2, r5, r4}], 0x58, 0x20000000}, {&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000001700)="2a14051ab644685c2b23bc981cc64908ecb4d41068152d76d3af3e8f9ac3cb42bde788cfc6a5da63c99a54638606419bb2e86f54e556a33930dc0ee8fa09e07a7b28f3da5b8a75bfcbc9243adfe2dfa8a2f86a3458a704054603bb5ee406d522c8cad7afc01a0186726adba0e529a0c813ab74a8a686c5823c9f2dda3cb57a3858defcf7172aa2c61036c06236bc43e55312997419b114deb3b6caf15a2981ce32cca7dca44f372862cf6d2f3a1c362d9d4f7c93d84c452dd09c06262cf029334584f95e08cc7bc2c512707cc7f78956ceef1e3c68e016738978a2dd7a41c196719f808c9791", 0xe6}, {&(0x7f0000001800)="e144", 0x2}, {&(0x7f0000001840)="e30bb7d0701625cb673ac0a9e8de07cfd3baca24bd1216a946d4a864bff0a7bacd2af594787605dc379bfdc243d67a45a1d9a0fead6ff44928c4004e6c849ee93917f81db8268de2ce2a84c8beae90df04607f8cb0221523d1b81cc9721885709e1d848557e9edeba03eb3ada3ee54ad24dd1a5ae5239449f981a0fd05b055554f3b15a6eaea3b3c7746f20fb64fd28acf400bbf918b83b294c7f16500bfa70781a6e49cf0b9cda5ec6fdcb30138ea3c9e2ebbddd3a94abb4bbcfca42fbedd504210777f47f60ac8c2392bfdf1a1b9820c52db8a41301b0e13e7001cd6f97742eb", 0xe1}, {&(0x7f0000001940)="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", 0xfe}, {&(0x7f0000002a80)="e8b6e09050872df712aef27b43a836f5ed568634278dfa6f6bc9e2c7fb997a265b072d7d7bf1084a7f475575e3a33eded3bf", 0x32}, {&(0x7f0000002ac0)="db17f9a0c18d5dcb22730cc046c26ed6993212a6168872c487bb1e8d895a44f5901c9551158f2eed8fe50f7c463beeb91c6b595e26bf3e92f193ea14820dcac13c86d941d1d5", 0x46}, {&(0x7f0000002b40)="ed1013eaa44d300cc64c57294ea8e8fe896ac9a0fac045be7c2078123dfd4b5da900a5eb65f1468ea645c0055677560f3e5d5f986085c01b9d622a89ad38902bdcc404935e4024099ff4031c5a75a50dda9d299ab4df098e1618d36a67a5068226c16537e5821865dcee428d3fa6ff9b0c49a57549cf618fc569576a14ef88b2c6396a45895241445a5671619a9a56df8edcb59b4aa782b587ec9e1a30985fe099efc39343f610da8e3359a8681182d86c23701752ea7a1f21c628cf8a66ed62eb35e99b81d8c644cdb9b223cddf395564a328cf59aa6ef3702b8ae80151abc35de702fb9fb17f02c52a3433be160fa0d13a281b0e772c1241", 0xf9}, {&(0x7f0000002c40)="d696d5951f", 0x5}, {&(0x7f0000002c80)="671a748ba12a3072ffa7b194e1e68d54f0a1791c86ecab96a9516aa98346494bd0786d5f499a265031ddc41f7110241f1b09b9c1728a436727a88ab48b30f83657bcc67aa98c54daecd6b58919fa001803c11e935af96ff1393441fec0d15116360e9d395e6e88a6c130d7902135efba7fb0e488ab9da3e1435038ee065a8167361600401b65", 0x86}], 0x9, 0x0, 0x0, 0x8010}, {&(0x7f0000002e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002e80)="1cc4d0f305bedd870f4b810381b5269c2d683758e43407f8fb2f11c86f4f238da937a8ea9973bfd8e4aa3222368bdb4295423c91f447f5eab67ccce2a4840c6eecdd89874c5a0860aa319bea82da7d6445fae2b94b3e8930c73e797130f417fbb9af89c62c4256988969345dc0d0827bb93a1374f3c1f020aef68c8442ebbecfcbc925a0a22d50c3", 0x88}, {&(0x7f0000002f40)="2f2c0233096dd826c711d0a390c6088af59aafb67e1f6da92eed56600ed526251ad1b103a6ba9a1d9fa0b3060019f84d54ea5e299507d0a2992de4a46534cde4e0b223be992233ca6989714cd77ccc1a59d780c6a40c8e8190c72054abc53e8acd6ba3fa589960764c66f2e2ecf6329da345ee8bb1914deeeb2c0928c00bd3d37cbbb306fa2d299e6d1d9f73bd909d629ad7ec1ccca2af8ff8bd1c198910600c000bfc8ec98d4443f1900f", 0xab}, {&(0x7f0000003000)="736f9c79a09fcacb480875fc3ad0482bfbd72354061fa6c5cc6c663de8a5b0e25fb888899d0b16c32593d17ddf827f40a1cdadcbd95c287e921b", 0x3a}], 0x3, &(0x7f0000004340)=[@rights={0x18, 0x1, 0x1, [r17, r18]}, @rights={0x20, 0x1, 0x1, [r19, r20, r21]}], 0x38, 0x4000}, {&(0x7f0000004380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004400)="79ea46cbc18660d3f02ba4ae1a905379fa45b3d668ca42d4a57b93a8", 0x1c}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000005440)="32e1883a8c44db2dca5bf2f4252f11831b7134891c2d3099997082cac4c0c0340ce52a0c4b543ec714e301d5cea4fd279c5dac5877151b36721dfb90bd0d52464ae1d1777d323ac2a18f12b4c4aeb56391ecbc5bb6294536ddc80afd5220eacd27936c54f2c18ee26410eec077cdab0edad2650a92ad7f22fdf8efec8ab7d09d4ba38446d4c69bab9ee7b40a2a6e74", 0x8f}], 0x3, &(0x7f0000005880)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r22, r23, r24, r25, r26, r27]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r28, r29]}, @rights={0x10}, @rights={0x18, 0x1, 0x1, [r30, r31]}, @rights={0x20, 0x1, 0x1, [r32, r33, r34]}], 0xc8, 0x80}, {&(0x7f0000005980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005c00)=[{&(0x7f0000005a00)="bbf5a4e9bcd993b40854baad0e67fe87d47d76f778dd39f39ae5a4ed68053beb", 0x20}, {&(0x7f0000005a40)="b0c211cdd7e030138c48651ed01bd4f6473391c471da53ac9fda89305ad9dbb321ed8de3c0650e29d302c8b49b46fc196c7c56787ef208900703354593a99d994428505d943799a621feec184807e1ac04b154e08eca972751", 0x59}, {&(0x7f0000005ac0)="bd8e", 0x2}, {&(0x7f0000005b00)="d243ab698b5186174ab16dc5c3510fb66db76d71ec13da24a67e7a241cb5969d1f9bcc4b599cc77eab824ca4f78f5ac1e3f55535c0bc80127b992afe901f02a7572b394a7989e5f1f208cd9f27c3fc7bac291cea2970adb64db22c8f64d1965d6c263ab3cacbc5f0e50cde0ca2463078f7f9248df4f9f65e81ae874f85b213ed93505b830d4f7ad706bcfcc0d51e8790a6178fbcf93f3282b70cba1e72a1a40964cdcffa827c49b5db297d0896a4", 0xae}, {&(0x7f0000005bc0)="cda37a57032d0c7b35f0d6a1b81f9acc7a668a0d86", 0x15}], 0x5, &(0x7f0000005cc0)=[@cred={0x20, 0x1, 0x2, r2, r0, r4}, @rights={0x20, 0x1, 0x1, [r35, r36, r37]}], 0x40, 0x20048000}, {&(0x7f0000005d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005fc0)=[{&(0x7f0000005d80)="445a8bbf2d7ed5f836e28bd801d738f7c5498d67e56c172e9c32216c535ecdfd39f72ae4202e00abe146f8203eaa485ca71932749e964fe553dcc7e9e4fb9515026bbc87f6ce0b21f8d5b47f98d5ed85b33bc80fc3e9d730eb76d65e093836a426c50bb2db7048ed75b8efce99a73457e1c3125c299714da7374448def1216", 0x7f}, {&(0x7f0000005e00)="049a98edb79ea24f8e7f75d23ba1de972890621067d03e091bea86b056a8eae2bff7c45ad3ab8f607fc543cd9c9cb2eed1d88ea665fe98894bd6bd685b9eac7af7781d4cf3645479facc65066e95739109bc4617af7196f27a789c52c98de9043796f9143bfa6f9d1ab35f82441e6b94dc34495d4ede16b8290fa5d617d1c339", 0x80}, {&(0x7f0000005e80)="e22ad4566d73f347bdf51233664718a2eee3e4220ae4548c9d1e351132c6e4e0635e20bea33657b1e7076b967e207a41b4669a510244e53987b22908acca86552c60e60ca42987eca289e308b13e00335f595ca8101f66ed5d983f946aa97f7c34d6eb0a101d54d92d54eb3bc4e5a77e26cae5b4f463711a3d9ec4b2a2a608b25e57d15b85efdeb7eea33622f4d82fd4e26640839342964d15f9ff9e594452ad4d", 0xa1}, {&(0x7f0000005f40)="f557ce161515283f484fe63278259f7080468ca3506fe3cd2ae5cafd1c9b5ff4f70afa5d0cee0db2990d48d4a05942de2b7fb7c925db8d1d0337214c0311eea419aa8633bac46b31f2690566f397b843257944316719e84f97aaa9d7c4b5510c22335eff7b78d0f05d05f5842cefb0c6eac159a7e68c9d601619abbfbf", 0x7d}], 0x4, &(0x7f0000006000)=[@cred={0x20, 0x1, 0x2, r2, r0, r4}], 0x20, 0x4000000}], 0x9, 0x4000000) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1400000303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0x8f, [], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=""/143}, &(0x7f00000002c0)=0x78) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200800, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000000c0)=0x81, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0xffffffffffffffff) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000000)=0x9) 00:16:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x0, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 700.029587] libceph: parse_ips bad ip '::0.Qnullb' 00:16:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000700)="bed043f0d97ed652b536f09e0935dcccc2759d3b7c8a84608d06ab4e52b07773029b1d47371eb5c1558c5dfe77e1b2f735ce5eb68bfbedbf3ba109811fba092dfbca4433babcee76e48023cabf23a52284d4eb3b0a7ac0d74b0d75496f9b79522178fc634d416fc76c2f62d9d3cf32719a92081b1dce68775eedb1f4bd1c0b28cd09705cff6c4d1cd32913c97577a8151e59465412a6f013d9c89b2c7269fa8eeee06df5765732769b0c2e664fd92d58d318fabc8c558403a976eae55e3c83eab96701b83faaed2b12df2e348f2392c3a3e6d79425de113d26a8fb53b4c9369d0241a25ab68ee066685c87aced7b40ce3cf350a7f391c8b6b27180b49e43a7bd5fc6a447f45b825656d82136b96fb931aa12a44e603d1575a51b80673fbf70239b501509376763fc3d3eef21fe6c855ed7a8887910490298dec836ffdbf6922d6e245b66f5d8ee02a424df21b4bbea2b7c516f8263c6b499639a6a50652a4759e6c1226e94eecd187c6e1171f8ffd7adb3ca9b6bcb0c3a556d25eb33a199ce28863b45d3718fed35b4d429133bd0df1f485d8d8d9829c120adbe6fdc138a25e024e1d24787bb4ec0c55bcee6403dd0e391b8b4099ed8ecd35eb6238282af1a04ebcfb59410df1f1e967a02a9bbd3c3aef5103f26333e839353596c4b28cd4d213ac08c31dcb0da760797b4b5c77aa4c49e562a937b00a9c157186f5bb67e612c184f969a025d5c3c833099e16c2ddde6671cd5e282a93cbcfc094fbc916b6d7dbba26d441a0768b1dfb31a210bdf5bdc6a51068c458734f8f3779f9b9980210ede96805f71b15782d95dc16fa11951a007a106efa999ee59516b6464e41810a8fbbf4148003a186ad05339748541f70ace83fc9ef8184e5a1f28bc63217072da48d111d38981cd90e2ca246315549003f6e5f1d0ce5e4e28d6bd5649ce44fddaea8d90484987a0a5a1d0892fffb8acaab50f1cdcc148929ace3ba43d81ba90f15b8d1b024b0da05903c08ff751b520b596f3ebd26278577e0b476fc0c5c7fb90b8666c3e92805b56bc6623e1c2d1e26c7a80149fd8ccc4b33fa3c3271fc10993a50c4ca1eaae7745ce867fbe35e4d63544120c22f0866005b26e15f71def18964e69d5148c6fd44e9b2b3ddee0232f1064933692222b458e59db06cfea427c5e1e0dacbc1b26ed9d557a238c17da4f5d012e3e74f03a680af45a1160b349d7b067abe9fa4b2bf0443173a11ed49d49bbbb9f0ea28515afbe8550bb7833f565925be38d34065b158b990e4abbd0a6cf4a83d04a221d8c19ac5818c9ff59a882ff27524ce7a9bd61f34cb6de0a04b870792c590ff30efe20033f0c20ee594712936bd77db0cb8e610f09dfad9d3c586844bbf7f8e70e86630d7feff430901fdda7f0dcc75d6150ae0c52355bab90a5e744ed46f3056853a108152c42366ce8b2064d4cc89c5a268d8a0e0d890464efa49a4b5916ea79d681d5fbf208016e4fe8c204faa71d020fa5f780b518d1cbe09e0ea68e8f0853100227a8087666ac2d4469d0f0c51343fda24d260e91ce4a8f061bb549a027bdc5e744b5c4d6da0a780767ad97c940d14d77eb3a8d3b7d8e91303ecd3c8e6ba387e7ec4d802f3389411b055d28e328aaeec78f71a071c6578fd2cfe36170d2bb3b54090338aae43bf1b5ade00330bcd3740ff3091a886b18aa4989a02d42f5809716b35fb11ac32215616b396da1102e2768f0567880a62f5051e116687676c919e98037c643ce0daf33b115cdca8268dc1745d8a3520a852123d48de2ac95bcb07984caa97e2af08e80d1d17e8f3d8c08f843d89e5c42ef18926715692989e4ecc15cc6b34a0bbef5e10028675c61f81a3085968aea5ab68f047fb5efcc0a955a8eb13ef076de98c671577413cd2189ae66bf8dcbea38378e9abfe9e58f9de008b1e1f0e935b0905323ab2701ea8bd5350ab6cb34830bbfe1ae4c7ab9bab9c732532a594f85596da6277fa7a3501bda77d683178b5f1057b8527f9894bb0654ef7c216b786f5c08d4edf1dd8f1e8cf8a9d8a98427c5c1be8a4fb6dc1e7820f63b7e034d1b7b3bb5ef5bb03589288d2171dc482600cfef616cd01d0b47102726dde5ee4111f1b49b94e2adc5a39c7cd2dfa5838f82811375dcf9b68260efe80f8288705da2a3acb207214b26d9c955531da3c63aa8b383e26008ac2ae1729e3bad0b384ff98cb68902acfe3e931af41846fbca3b7350876426399cf7214f6ae75b28af748abb7a7a9436f55b7d4c2e5a4466e1e69a9b06837f0a5f9d681936752bb67cebd0015621e994e70bb182e9c46d92bfef7aee9aa035ee6f053dec6462570a05a8d336f15ba8a3b34621d6bdc96c29d4df712150390cb4ce0d36aba42bdc9f7e8b8ef10b3e9b2223705ea7ff03f73ca22ffc47b9ec0fefa33a7db7dc51e0ee8d6d5b02cf3ac6f2fc4ea55f496e6d27b991899909cce52e29edc4f5cc15095d2ac9563459307c712d46ef70ba16ed6d578fb3d849436e64c60e367658b826e9a8bb3967bd042a8adabab21dc35c1e75928ae50ebb56fb91c17868cf4aed69d00277556cd69844cb411accf2a0c5a49e62b1d09fbc07dbe3c266b509e40e02c633907e425e3697d74e69c2a4b747fea10052c695409c9d69c3d8081208ded3c8308a64c48b950351dcdd2ca5a53e6e6e8f1a4712f16fb351aa51353b67d685c959733a85ac8f813516d6619fe57f92dca190922ded805f2759a2122c6c17571d68c4564fb917ab6328e1db583552929b2d4976c7299ad85a0c08fffb8707b4d92c8c65add70d0fbb16a525088d115c96b9c2f066c1b1e8126cb6085e267cc198810917e207aff464d6cc3edfcf43ec8c75b529668b1283fc0ac101f5c5a9920fd8d0fe10e11d316042562dc26f0190d06dd081fb254854e166f932d313ffdb21c3ad0621c3abb2acc64ba1f6f0bbcab2f6034745cd426861d7892af4187eab93e074a2843b51ea88a9660331dbc3b38556b61291b83b304e5aaf59aab33ad06efea3f5734748bde88f9da15e6526829903d93ee8a6eb9db07bbe50cbe1534aa6be88a6fd9cf41bb2903e6c2a54add25005ccc4c1e9d3c81e2c3726cc8641a741512b4b0da881b75583d6ef4086b07e390402605dd339220a0191fb11ce60090e87fe4bcce8122ebf66be8be9c0f59a74c8a77bff4e0cfb7ec054918a6ae41b613e8cf8e2c269549c588e8cc62893a59678f22a681b1363c2720d77e20bace36b1803a735a42734a66c686900f9bde5353fd517b8fcf00cd59abf0d09144fef1e3ec8d25035ec3a502f0b587c41812695b34c470feea9dadb998b406d0cfa19f47c4d38a17549b496a7c6fae40a06ec0322934debc8aab6b097dfdc5bea02ac5c418f1dcf96e2c50b090ccc1c07d1b063f9e4b1b1c943da7f61f86dec4ccff6851159451480ebb7deca48b0f19086f1ad578e28630578d8dd1845485038567305e1830f23f881ab1788efdbdd1385e2a89418c18ca945eb7b2d8ce9f81f5a79aec369c6ebf2d68bfee82d37a0503cce9829cf113d3b9b64d9119cf9f2bf46bef3e8032c278fcf41125522f37709fdc1bcf1d1bae6632191ad3e6abaf9dd7fb00d5ace42e480c7768ca44e65ad349e4810b58ecbd0cf7c8140af6b63f008ae9612c2a482eec60cab237ac0c89b1a70e6a9e02f2f94011efea606386a7ff80319a79ecb2e4ebfe30db0a8d76b0fb1f8868fa9a5b3c3b3f845be58a9bcbf8e9d15c4d321a32e09fa0af807c4a24b5d7ad21a2cc28b4317eac42b043cdfe01be3f37310ff06745d7cf0a0cb03ef5ea81682ed88599e1257e94c8e68f43cc9703c1ad122fa1364b4ef0081441b762414ecdccabbf315c75f29cf05c6e2998f18e4f4e14b898b08d4672e7a19cfea4f1ea1f47d8801516dd78f8607bc39f818f39be38c21cfcdad31564ef4177dc64e9f9196c4c0adc416fb57ee6e4a7bee7ab8b03e12e83dde63681a7715832eab41aa5bb8b510bb2b151ea2d1771d9f5f340d3daccf0e015bb3e3fe3ce8fe3a5524e5a2235fb93da4d0fbc18b6c770c4b338036d22536d911f1fe56ba563593fe92129e99919ac8334a6123a680bd20ba76bc94639f9350da57eae79fb126c1aab57c74d35599eadaa01e15cfa5b815cdb69b4d9810e3ff13c02f513bf3375db820614278a6c0580ff41d37588a2c0b70fb58c10afe3ac0fa145c0b7ff45562d947cf5c3f3c656fe6db0e6a9f986021776126c0491d59d9c2acaa2534d91192fea160c847eec6fc3b554caee7907386bb361e152605d6cd15d2588f6e514f6d2a899fe5493a1b4932d2250934663960ceffa413977848cfd0bd97a76f775e265902ff9a58d22aa9c988a95396a4a26c26ca9c230a7c1ed6a61eeca9a0baa55440b070dbd6d59e203e964f47d74e85f82c156aa4960b62e66534a03dd4e18f6a83543041f3c3f6f1bf74138f03f9c1ef8ddb12c3acf460dcacb311d8af4bce23cdee1404a5182e5e21aad46c284e1d8ab1b263138696f91cd9a0acca39496680b0e72682f6793f129315df2df8422ba1ddb1247be91672eea6ced72be70062971b21f3df51b4a4ee84ad0da2c9d89d112267e4e521135e089defd61862a75c036dd5dbf9db75dfe51cda966e513815f1721a84533b58eecc7098d13d4fb29362e4634da102af5f75e06cbba51dd6458c369ac6b9b76b342faee7c1268b7982b084e2eb80dd536b5d962fe667ac3559f8b571e7f47ba35cb5b29eefd7cdaf738cbb456c90a0937e70447ead73b05df39e6d344b5368f7a56bce70ed9d3befcb4b46cba7006856b827fc618c8fab1e5d7ee43b056e54db01d454278f8aa586286d313737cb79bcaf8cf2ca56e350cdea2e57da2cc1d4b419891104a81155268973ae9755867240d39eedd4623737b056b1b3301df9a72c525104916b9a842dd62a34ef4fbd0d84dfa53907f27eaca4211c0dd7b6577ee4057f456f95ac54ef9947c79fdbb83abbfe38a8bc05a5be1abc2ab908227409be74f2a64b2bd1628896ce11d45cfdfafbb0fdc18ecf2ac77cbd035e3d2557a03d6f59893d783b9a73381fd306f705f61cda1b0bbc5161beec9afa11aba3349e372c2e0a40551a40bec8589915392ee342a0970aff4dd76841362fc3da5a9295776194429d0d1cc4ffcb1e280d1a958e8441d83df37a2203744f994aebdf3e79b02588e49408fb060a44b680e4d65e417e85ca5cfd7a262f47f34e38cd5a4247979356aade74f69ef5222bdfc8b6029772d45820604b805fda1fb588183ceb92d42639d38d113618c61bd905e47211bd9d1d12c618216e94461d630646b3fbb26e608c594be0a1c97bc7ee0b22dc5b6fac4226291adbbdfb717a4bfa2bb2624e34d7d7d955863eef249b6c11e08a19ed49d10707857924148d2a737f355046146cea57cc99bab72a2913d925511c760c442bf40797df411337845a87b8eb18195525780ae1d5b4081bef07cfeca47eaa7d1c4808a0afa65356b03b721e697587d10e112fdc3c9d89fba41a92117b5d41f4ec4100fe432bf2098c02b9eec7d100c3b3efbfff1a059b8624d47b366cbc91e40ebbb8cbfcb5316002f92868d952029d3438684cd448d5a3d4ae93a45dfbd6c508d7d45851245492948f602b1b1ffa3ddea2c80dfd866f2a2666812f19a4414afc239b5f1cbd55754400150b53c6ecbe72713a56a2c6f5bcb34f9a3d112cb861fa5357af2f306fb4aa1fc837e4b0108936542ad12b31e384e528e34fb224a222d3c4ab3c8cbdef45d54f9d2fd93246409ad6987220fe52eab7", 0x1000, 0xffffffffffffffff) keyctl$update(0x2, r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000005001}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000004500001c00000000000090f8e0000002000000000000b35b3d805cde"], 0x1) pipe2(&(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8047fe) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000200)=0xfd) r4 = dup3(r2, r0, 0x80000) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000180)={0x1, 0x0, 0x1000}) write$sndseq(r4, &(0x7f0000000440)=[{0x932, 0x7, 0x81, 0x5, @time={0x0, 0x1c9c380}, {0x7ff, 0x2}, {0x1000, 0x3}, @control={0x100, 0x7fff, 0x20}}, {0x5, 0x8, 0x0, 0x6fc, @time, {0x8000, 0x7}, {0x1f, 0xfff}, @control={0x100000001, 0x7, 0x2}}, {0x5, 0x800, 0x5, 0x3ff, @tick=0xffffffffffffffff, {0x0, 0x1}, {0x9, 0x9}, @control={0xd53, 0x1, 0x5}}, {0x3, 0xfffffffffffffffc, 0x6, 0xde2, @tick=0x7fffffff, {0x8, 0x7}, {0x8001, 0x100}, @raw32={[0x1, 0x24d, 0x97]}}, {0x2, 0x10001, 0x2, 0x3f, @time={0x77359400}, {0xb66, 0x10001}, {0x3f}, @ext={0xab, &(0x7f00000002c0)="b4399324342aba79d81e8ea2b3651c7453ac392e2665a9044a77e85e795a49b80d671fb0226aab644bc06d572cd51bb147cb88209440a7be1dff7764228cabb45a8c84ca93552dbe3d6b327aabf11b44fe5275e3969e907af0561fcc228cfc84effb60ba213fb4039e35ba0187aa64b3fdc1b53269bb9c5ac47c8ff5edf7056e7ac81bc80a34e586d62d5542d58db79180d670f8bfe8fbb7428307c67ed71c9f6fd0948b430389283d47a2"}}, {0xb7f, 0x7f, 0x1f9, 0x4, @tick=0x3f, {0x0, 0x3}, {0x0, 0x2}, @ext={0xc0, &(0x7f0000000380)="127d734dd201fd0f8b86243709f15091ebfb946e8013891b9b25a1e187f82714952d3a894c4283d1da36f9d39b4f2cbce322b8e644f9d5dd49555d73536422796cf438307e1d1220e52936d4f8d38395ab9249102b1a9f22399b4c16d8e77b8b38000956135f13c811be8a7d1e9a91f1cf853c66a3b7c47bd10e68b9e3a73e81885d487c1f8cc66d638e7917986e709a131b1176beba75ad4271d01e1dec94b4f8817aa3ba1c0aec1ae363d6a59c60924262488def1f4f1b1ca0dd1044423363"}}, {0x4, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000001, @tick=0x80, {0x4, 0x6}, {0xffffffff80000000, 0x7}, @time=@time}], 0x150) [ 700.253904] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable [ 700.309865] libceph: parse_ips bad ip '::0.Qnullb' [ 700.355860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 700.362761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:16:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x0, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 700.446436] cgroup: fork rejected by pids controller in /syz0 00:16:09 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:09 executing program 1: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) wait4(0x0, &(0x7f00000001c0), 0x40000000, &(0x7f0000000200)) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2400, 0x0) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigqueueinfo(r0, 0xa, &(0x7f0000000180)) 00:16:09 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x240480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="0f01cf660f5529660f3804180f080f0d7e0736260f5cd8f36f0f01cb2e3e660fd4d80f35", 0x24}], 0x1, 0x0, &(0x7f0000000040), 0x0) eventfd(0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x5000) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x0, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000700)="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", 0x1000, 0xffffffffffffffff) keyctl$update(0x2, r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000005001}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000004500001c00000000000090f8e0000002000000000000b35b3d805cde"], 0x1) pipe2(&(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8047fe) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000200)=0xfd) r4 = dup3(r2, r0, 0x80000) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000180)={0x1, 0x0, 0x1000}) write$sndseq(r4, &(0x7f0000000440)=[{0x932, 0x7, 0x81, 0x5, @time={0x0, 0x1c9c380}, {0x7ff, 0x2}, {0x1000, 0x3}, @control={0x100, 0x7fff, 0x20}}, {0x5, 0x8, 0x0, 0x6fc, @time, {0x8000, 0x7}, {0x1f, 0xfff}, @control={0x100000001, 0x7, 0x2}}, {0x5, 0x800, 0x5, 0x3ff, @tick=0xffffffffffffffff, {0x0, 0x1}, {0x9, 0x9}, @control={0xd53, 0x1, 0x5}}, {0x3, 0xfffffffffffffffc, 0x6, 0xde2, @tick=0x7fffffff, {0x8, 0x7}, {0x8001, 0x100}, @raw32={[0x1, 0x24d, 0x97]}}, {0x2, 0x10001, 0x2, 0x3f, @time={0x77359400}, {0xb66, 0x10001}, {0x3f}, @ext={0xab, &(0x7f00000002c0)="b4399324342aba79d81e8ea2b3651c7453ac392e2665a9044a77e85e795a49b80d671fb0226aab644bc06d572cd51bb147cb88209440a7be1dff7764228cabb45a8c84ca93552dbe3d6b327aabf11b44fe5275e3969e907af0561fcc228cfc84effb60ba213fb4039e35ba0187aa64b3fdc1b53269bb9c5ac47c8ff5edf7056e7ac81bc80a34e586d62d5542d58db79180d670f8bfe8fbb7428307c67ed71c9f6fd0948b430389283d47a2"}}, {0xb7f, 0x7f, 0x1f9, 0x4, @tick=0x3f, {0x0, 0x3}, {0x0, 0x2}, @ext={0xc0, &(0x7f0000000380)="127d734dd201fd0f8b86243709f15091ebfb946e8013891b9b25a1e187f82714952d3a894c4283d1da36f9d39b4f2cbce322b8e644f9d5dd49555d73536422796cf438307e1d1220e52936d4f8d38395ab9249102b1a9f22399b4c16d8e77b8b38000956135f13c811be8a7d1e9a91f1cf853c66a3b7c47bd10e68b9e3a73e81885d487c1f8cc66d638e7917986e709a131b1176beba75ad4271d01e1dec94b4f8817aa3ba1c0aec1ae363d6a59c60924262488def1f4f1b1ca0dd1044423363"}}, {0x4, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000001, @tick=0x80, {0x4, 0x6}, {0xffffffff80000000, 0x7}, @time=@time}], 0x150) 00:16:10 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 701.363827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:16:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/dev/binder#\x00', r1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000300)) 00:16:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 701.575276] binder: BINDER_SET_CONTEXT_MGR already set [ 701.580769] binder: 17228:17229 ioctl 40046207 0 returned -16 [ 701.592948] libceph: parse_ips bad ip '::0.Qnullb' 00:16:10 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 701.663343] libceph: parse_ips bad ip '::0.Qnullb' 00:16:10 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040)=0x3b60, 0x4) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000140)=[{{}, 0x1, 0x38, 0x200000000000002}], 0x15c) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000004c0)=0x1, 0x4) execveat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='posix_acl_accessvboxnet1\x00', &(0x7f0000000240)='wlan1\x00', &(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='eth1\x00', &(0x7f0000000300)='/dev/dsp#\x00'], &(0x7f0000000480)=[&(0x7f0000000380)='/dev/input/event#\x00', &(0x7f00000003c0)="0600", &(0x7f0000000400)='\x00', &(0x7f0000000440)='$vboxnet1[em0posix_acl_accesscpuset\x00'], 0x1400) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x200280) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6d, 0x7ff, "f5f22bef6499abe0045cf0f38247235cf2890d36caaf81a11c49537db306a3976b1d2a5411a9a17c211ae32d511928b28cfecfb708272bb8154bca722efb34d7b352945254e85c6231e5eaf2f10a842ba8d8eb42abfc8500f0c1fe414a60de264fde3444fa"}, &(0x7f0000000180), 0x1000) 00:16:11 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000700)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) rename(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file0\x00') [ 701.944907] libceph: parse_ips bad ip '::0.Qnullb' 00:16:11 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0x10001, 0x7, 0xe5d, 0x200, 0xd89, 0x64}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 702.223203] libceph: parse_ips bad ip '::0.Qnullb' 00:16:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:11 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x4, 0x80000) write$FUSE_INTERRUPT(r3, &(0x7f0000000140)={0x10, 0xfffffffffffffffe, 0x2}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0x65, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6) close(r1) dup3(r1, r2, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x8f, &(0x7f0000000040)=""/80, &(0x7f00000000c0)=0x50) 00:16:11 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000700)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) rename(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file0\x00') 00:16:11 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f00000000c0)=0x3ba) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)) 00:16:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@getlink={0x20}, 0x20}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0xb4}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x1, 0x0, &(0x7f0000000000)) [ 702.956067] libceph: parse_ips bad ip '::0.Qnullb' 00:16:12 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$RTC_AIE_OFF(r3, 0x7002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:12 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="3a84043436b77194a34f8d0d"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x0, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:12 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000700)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) rename(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file0\x00') 00:16:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000000008912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x2}) write$P9_RLCREATE(r2, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x0, 0x2, 0x3}, 0x1}}, 0x18) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000000c0)={0xfffffffffffff9c0, 0xb77, 0x1, 0x3, 0x95, 0x643a}) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e24, @broadcast}}) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x3) 00:16:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 703.574677] ceph: device name is missing path (no : separator in :„46·q”£O ) 00:16:12 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r1 = socket(0x5, 0xb, 0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x8001, 0xa, 0x4, 0x1f, 0x400, 0x3ff, 0x80, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e21, 0xfffffffffffff8cd, @mcast1, 0x1}}, 0x3, 0x8000}, &(0x7f0000000200)=0x90) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(r0, r0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000012, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0) r4 = dup(r1) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udp6\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:16:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x0, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 704.003464] libceph: parse_ips bad ip '::0.Qnullb' 00:16:13 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x5) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x20120, 0x15f, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*user\x00') [ 704.245717] vhci_hcd: invalid port number 95 [ 704.261536] vhci_hcd: invalid port number 95 00:16:13 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x220203, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000000c0)={0x3, 0x5, 0x8, 0x800, 'syz1\x00', 0xfffffffffffffffe}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:13 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f0000000300)=[{{&(0x7f0000000840)=@rc, 0x80, &(0x7f00000002c0), 0x4, 0x0, 0x0, 0x800000000000}, 0x2}], 0x400000000000004, 0x0, 0x0) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/9, 0x9}], 0x1) clone(0x0, &(0x7f00000018c0), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340)="a02836780b4bd80933") sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 704.608968] libceph: parse_ips bad ip '::0.Qnullb' 00:16:13 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000040), &(0x7f0000000100)=0x90) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80000000, 0x4a00) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000001b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x1894}}, 0x800) dup2(r1, r2) tkill(r0, 0x15) 00:16:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x0, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:13 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="b3ec164c7e4bfa70f0c9df61ca28f1f782f2fe663702984ddc1aa0018513f5c8de98ffbcd3352454957df8886a6376cd4dd5c791017eba91f6ade2442094350a076d635aff0100000000000066c4be15e14a0324b1e852de31cd84aa2864d665013eadf4da0485a8095a87d5e63cc7b77a9370334d97bd0575af0673d540b826f86a4cadfeaa3d19392a67de6d8d934eebeca70145ed74cb59330cade7b8ee67f3", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x900, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000000c0)={0x100000}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 704.981754] libceph: parse_ips bad ip '::0.Qnullb' 00:16:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0xfd, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000380)={0x8, {{0x2, 0x4e21, @multicast2}}, 0x1, 0x5, [{{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @rand_addr}}, {{0x2, 0x4e24, @remote}}]}, 0x310) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = pkey_alloc(0x0, 0x2) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) pkey_free(r3) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000340)) close(r0) 00:16:14 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x8000, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x101040) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x9, 0x92}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'os2.', 'ceph\x00'}, &(0x7f0000000380)=""/37, 0x25) r3 = dup3(r2, r0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x200, 0x1000}, 0x10) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x0, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 705.482578] ceph: device name is missing path (no : separator in /dev/sg0) 00:16:14 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_destroy(0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000100)) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x100000000, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket(0x1e, 0x1000000000005, 0x0) 00:16:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x0, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:15 executing program 1: r0 = socket$inet6(0xa, 0x1002001000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x3a7, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpeername$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000000)=0xffffffffffffffc3) [ 705.961306] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:16:15 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="3a3a302e516e7570bc469900b63b05619c8f330705c812ab848a780931f5d9e7275e8569a323973fd51c066de3bfcf26798be6438275b7516a25f26d16db8d62f1463af0c6d1672bc8f2dab9469f834c49883d6a81d0917d6e12f6c6c06c58c288a94ed0e5cbfddaca8c5e0fc936d9ff6e5a3a879c6598b251ac5a50c6c6ca802ba70296de0827b551022f556685862d973d3512783886082fcd24ff0ff95d8a16e545f4831e"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 706.223001] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 706.280532] ceph: device name is missing path (no : separator in ::0.Qnup¼F™) 00:16:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x0, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:15 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="3a6e75ec6c623ad400000000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @broadcast}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', r1}) getresgid(&(0x7f0000000380), &(0x7f0000000dc0), &(0x7f0000000240)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:15 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) futex(&(0x7f0000000080)=0x1, 0x3, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 00:16:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 706.776776] ceph: device name is missing path (no : separator in :nuìlb:Ô) 00:16:16 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r1, r2) tkill(r0, 0x15) r5 = pkey_alloc(0x0, 0x2) pkey_free(r5) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000000)=""/33) 00:16:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4000000004e20, 0x0, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x37abbf34, @local, 0x8001}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x9, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xa0, 0x10002) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x37cd8000, 0x8) [ 706.973899] netlink: 'syz-executor3': attribute type 6 has an invalid length. [ 706.981685] (unnamed net_device) (uninitialized): option use_carrier: invalid value (255) 00:16:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:16 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000007ff6c623a00"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x2, r1}) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r2 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x9, 0x20000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="cbd1504651b5ca4487a248a04db737280253b7fc415dbcf45f32548979360cfc", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:16 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000006000/0x3000)=nil, 0x3000) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="ca145c2fdb831dc57d2945b137a4678bc2b27dd0628de42e87834611e01d62eeb44356ee2646c7557ad585e15bf8278ab4", 0x31, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x7, 0x175a, 0x1, 0x200, 0x0, 0x1, 0x20000, 0x1, 0x4a3e, 0x2, 0x10000, 0x1, 0x1, 0x1, 0x800, 0x4, 0x401, 0x1ff, 0xccb4, 0x0, 0x5, 0x61e6ed00, 0x0, 0x6, 0xfff, 0x5, 0x5, 0x7, 0x6, 0x5, 0xbaf6, 0x2, 0x3, 0x7, 0x3, 0x1, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x880, 0x7, 0x100, 0x7, 0x6, 0x52, 0x9}, r2, 0x7, r0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000003c0)="d58614d465db8a3959f086ec498c1234df5027a2d5aa38f20db04914dc1bce6d07c9cf3e7073ef42ab5bc8e9e712324cf83068a21fcb707e027c9f05c0afb63d3dc3887b4be1fda260f17b56b2f8877e961400000000000000000000"}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="d13ff3d776", 0x0) 00:16:16 executing program 3: unshare(0x2000400) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x40}, 0x28, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001300)) fremovexattr(r0, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00\x00']) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001400)={0x0, r0, 0x0, 0xffffffff, 0xfffffffffffffff9, 0x7f}) lremovexattr(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)=@known='trusted.overlay.metacopy\x00') r2 = memfd_create(&(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0) fsync(r2) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000200)='U-', 0x2, 0x2) read$FUSE(r2, &(0x7f0000000240), 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 00:16:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:16 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="3a3a302e574d8067c7fad657621992b24ef5ec0a4c01211caa764ab9e904987c427e2e0534be33da407b2d"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ext4\x00', 0x104000, &(0x7f0000000140)='nodev[\x00') geteuid() getegid() r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0xfd34dfb91fbab870, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000400), &(0x7f0000000d40)) socket$inet_udp(0x2, 0x2, 0x0) getresgid(&(0x7f0000000d80), &(0x7f0000000040), &(0x7f0000000080)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000003c0)={'syz_tun\x00', 0xfffffffffffffffc}) setreuid(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002f002908000000000000000002000000180000001400010004000000000000000000000000000001267d6bf47b308d82dd15efd42f5f5de3c6524db27190ca572e9213a6b8c1f1809d0a7a8654375ce2490668fdb2f3923fdb22fd6ea4d2a5"], 0x2c}}, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)) 00:16:16 executing program 1: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000007ff6c623a00"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x2, r1}) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r2 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x9, 0x20000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="cbd1504651b5ca4487a248a04db737280253b7fc415dbcf45f32548979360cfc", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 708.051671] openvswitch: netlink: Message has 12 unknown bytes. 00:16:17 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x1, 0x11, 0x1, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x1000, 0x6, 0x8000, 0x884, 0x8, 0x3, 0x3f, 0x100000000, 0x332, 0x40, 0x1, 0x2, 0x4, 0x38, 0x1, 0x20, 0x5, 0x2}, [{0x7, 0xa5, 0x1d6, 0x3, 0x9, 0x9c, 0x4, 0x7}], "cb9d969ddef09e18608781538b187d7d2c88c4058b37466de8a18e1d033409dc51beadaeb2630e74aba4653fb160b9ca500a79164d4dae663526e429a16b699aedff28c8f359824910e7167de6dfcf5f04ff8a44593b79cf09a34c1eade870615772e5e219d05b2b5b04fc347b2329f476c20cfd750089e4", [[]]}, 0x1f0) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) getegid() memfd_create(&(0x7f00000000c0)='-cpusetvboxnet1trustedQ-vmnet0]vboxnet1\x00', 0x1) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:17 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = shmget(0x2, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000200)=""/194) shmctl$SHM_LOCK(r1, 0xb) r2 = memfd_create(&(0x7f0000000300)='%^cpusetppp1selinux+\x00', 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x18}}, @in6={0xa, 0x4e23, 0x824, @mcast2, 0xffffffffffffff80}, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @loopback}, 0x7}, @in6={0xa, 0x4e22, 0x80000000, @mcast1, 0x101}], 0x70) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000003c0)={r4, 0x0, 0xff, 0x7, 0x46}) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) [ 708.409567] libceph: parse_ips bad ip '::0.Qnullb' 00:16:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000100)={0x1}) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x200, 0x46a02) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 00:16:19 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x40001, 0x0) write$P9_RWALK(r0, &(0x7f0000000200)={0x57, 0x6f, 0x2, {0x6, [{0x80, 0x2, 0x7}, {0x81, 0x3, 0x5}, {0x90, 0x1, 0x7}, {0x0, 0x2, 0x4}, {0x0, 0x1, 0x4}, {0x10, 0x1}]}}, 0x57) clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r2, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) r5 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x4000) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000040)={0xf004, 0x4000}) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x1, r1}) recvmsg(r3, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) migrate_pages(r1, 0x7, &(0x7f0000000080)=0x7fff, &(0x7f00000000c0)=0xc96) dup2(r2, r3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x4, 0x4cf2, 0x9}) tkill(r1, 0x15) 00:16:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:19 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x7ffffffd) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x1) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:19 executing program 3: r0 = gettid() r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/156, 0x9c}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000002c0)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) dup2(r2, r1) socket$pptp(0x18, 0x1, 0x2) tkill(r0, 0x1000000000016) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, r0}) [ 710.373747] libceph: parse_ips bad ip '::0.Qnullb' 00:16:19 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f00000004c0), &(0x7f0000000580), &(0x7f0000000540)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0x0, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:19 executing program 1: r0 = socket$inet(0xa, 0x801, 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e24, 0x140000000000000, @mcast1, 0x74aa}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x2, @empty, 0x2}], 0xb8) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x2019a, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000500)=0xc6, 0x4) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) [ 710.848057] libceph: parse_ips bad ip '::0.Qnullb' 00:16:19 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000000)='systemvboxnet0)keyring\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x4, 0xffff, 0x3, 0x0, 0x0, [{r2, 0x0, 0x10000}, {r2, 0x0, 0x10000}, {r4, 0x0, 0x1d400000000000}]}) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:20 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000000), &(0x7f0000000d00), &(0x7f00000000c0)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0x0, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0110000000200000010000000000000018000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x200000048b, 0xfffffffffffffff7]}) [ 711.440681] libceph: parse_ips bad ip '::0.Qnullb' 00:16:20 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x2000000018032, 0xffffffffffffffff, 0x0) userfaultfd(0x80800) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000255000/0x1000)=nil], 0x0, &(0x7f0000000100), 0x0) pipe(&(0x7f00000000c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400080, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) 00:16:20 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) r0 = semget(0x1, 0x0, 0x80) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000000)=0x3) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:20 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x802, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0x71) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c00), &(0x7f0000002c40)=0xc) getresgid(&(0x7f0000002c80), &(0x7f0000002cc0), &(0x7f0000002d00)) syz_open_dev$loop(&(0x7f0000002d40)='/dev/loop#\x00', 0x5, 0x200000) r1 = creat(&(0x7f0000002d80)='./file0\x00', 0x44) openat$vnet(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/vhost-net\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/rfkill\x00', 0x40, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002e40), &(0x7f0000002e80)=0xc) fstat(r0, &(0x7f0000002ec0)) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002f40)={{{@in6=@dev, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000003040)=0xe8) getegid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000030c0)={{{@in=@remote, @in=@loopback}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000031c0)=0xe8) getgid() openat$nullb(0xffffffffffffff9c, &(0x7f0000003200)='/dev/nullb0\x00', 0x101000, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000003240)) getpgrp(0x0) stat(&(0x7f0000003280)='./file0\x00', &(0x7f00000032c0)) getresgid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'yam0\x00', 0x600}) r3 = socket$inet(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x7, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000010a07031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:16:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0x0, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:21 executing program 3: mknod$loop(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000100)='./file0\x00') [ 712.165166] libceph: parse_ips bad ip '::0.Qnullb' [ 712.271072] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 00:16:21 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getegid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/raw6\x00') setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@broadcast, @empty, 0x1, 0x2, [@rand_addr=0x20, @broadcast]}, 0x18) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:21 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) [ 712.522661] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 00:16:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x67e, 0x4) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x11) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180), 0x4) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000500)=[@in={0x2, 0x4e22, @rand_addr=0x2}, @in={0x2, 0x0, @dev}]}, &(0x7f0000000580)=0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 00:16:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x0, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 712.668969] libceph: parse_ips bad ip '::0.Qnullb' 00:16:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:21 executing program 1: r0 = inotify_init1(0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/11, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000300)={'veth0_to_bond\x00'}) 00:16:22 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="3a3827e50200000000fa0000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getegid() r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffc, 0x200) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f00000000c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80)=0x0, &(0x7f0000000dc0), &(0x7f0000000e00)) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='fuse\x00', 0x8008, &(0x7f0000000600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x80000001}}], [{@euid_gt={'euid>', r1}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, '::0.Qnullb:\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x73, 0x67, 0x38, 0x37, 0x66, 0x61], 0x2d, [0x31, 0x62, 0x72, 0x38], 0x2d, [0x3b, 0x73, 0x63, 0x33], 0x2d, [0x36, 0x33, 0x36, 0x64], 0x2d, [0x61, 0x65, 0x39, 0x67, 0x0, 0x3b, 0x0, 0x34]}}}]}}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r4 = syz_open_dev$adsp(&(0x7f00000007c0)='/dev/adsp#\x00', 0x3d3, 0x800) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000800)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 713.174844] ceph: device name is missing path (no : separator in :8'å) 00:16:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x0, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:22 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r0 = dup(0xffffffffffffff9c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) r6 = dup(0xffffffffffffff9c) ioctl$BLKREPORTZONE(r6, 0xc0101282, &(0x7f0000000200)={0x8, 0x1, 0x0, [{0x2, 0x4, 0x200, 0x7, 0xba, 0x461, 0xbf}]}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f00000008c0)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc, &(0x7f0000000440)=[{&(0x7f0000000600)={0x2b4, 0x2a, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@generic="02c91131a5d9d1e35c96d09ccd90db3fe60eb70e22befc269d8461eed01ad9ae3c57174444d752bb8d87ec1f6ee9b50bd60c480a1ffbab5c25b23c97240a038ad6e4d1753029b259f7c2a8d40a501d2577419a40a32cd21f573a7c23d13074a68eedbc18882e1e47afcfbea6626f494b0d", @generic="28bad3a11769d8a690a49e87185c276498e3959a22f4c0dda8381e93ac87922b6b082aa51b7ba17dfb40ac10f994ae169165a2c94e091d5b8db302f2c11b702d126ab0e6cc4d5313dc2b03dfa0cb3b517a9ee0ed6177a4f6073085eda17bf7e3880991145c5f9b8383826eda5806eb9c2dee5b99ed1f5f2e8a1834dd616a18db60d58935e8b530a607c9df4b7d0dc613348120cebfbea12c841f27c7b05e2d2ee917f7641b55fdda0d61c9db42182a8da45303cc943903bddc850aed84f3b76c3af5a1c2ad02b5299ddcf5cd34d30f41b5f4d585ad864601beeafc8dee4c93fa862c4d54b6447b2f56", @typed={0x8, 0x4f, @uid=r2}, @nested={0x12c, 0x38, [@typed={0x8, 0x3e, @ipv4}, @typed={0x8, 0x40, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}, @generic="c42da22e038d1660db2c63a5c881c87494268be0dcdfef72e4547e00ace6efed90f1082fa7b8dd2ecf27cea7fbdc94c1c54a47a08b5edef7f417a6fcd3d9617fed079f4613f970452154642d1067f40d07d470bd8830c768c5b5cdb751447526989009ded03a2c1f3f454037eb4ace8cb2dab4071d5a9b35aee894f9089557447e2915a647b6a3238b09a42340bbcdb3d7179a7727b21b5e9690fedcf84f89a939672e8a8194fade6a24397f7fd251", @typed={0xc, 0xc, @str='ceph\x00'}, @generic="22d03442c13beaad5cfe57007e38d35810a9ea87e149c032a39869a689157407723a734bd149a143a8e692d50fb35e3d895497521d0f827768fb0c7dbf1e025d61839ea74707d9816c7ac4627792d34248f4726d02ad7e20b38ea2"]}, @typed={0x14, 0x7d, @ipv6}]}, 0x2b4}, {&(0x7f00000003c0)={0x74, 0x3b, 0x213, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x4c, 0x65, @binary="7f328d1dccb47fcf363b0c0f89a8516cfe3541c0fc74cb5e1df30ec430b6eb9791d22cee3ab07253a29c309ada05ee9032213a3b01ea3a0e98e982b9bc22201cd7cda3459e82ec"}, @typed={0x10, 0xd, @str='::0.Qnullb:\x00'}, @typed={0x8, 0x59, @uid=r7}]}, 0x74}], 0x2, &(0x7f0000000480)=[@cred={0x20, 0x1, 0x2, r1, r7, r4}, @cred={0x20, 0x1, 0x2, r3, r2, r5}], 0x40, 0x40000}, 0x1) 00:16:22 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r5, @in={{0x2, 0x4e22, @multicast1}}, 0x3, 0x7f}, &(0x7f00000000c0)=0x90) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) [ 713.666112] libceph: parse_ips bad ip '::0.Qnullb' 00:16:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x0, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:22 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f0000000440)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}}, 0xb8}}, 0x0) 00:16:23 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 714.325595] libceph: parse_ips bad ip '::0.Qnullb' 00:16:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)=""/178, 0xb2}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x156, 0x10400003) 00:16:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:27 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)) 00:16:27 executing program 4: clone(0x4, &(0x7f0000000140)="56f2bf267f6e490fcdc92c9aead96478ffdfe7afea54cc1721bbb95bacf80d11d9a355201205e11ed548b6a66bdfdc163e1e0faeb7db52542ab0ae8dc8c07d7c1d30b0c97b52b1f2d6780dc5191f04052052ffe8641381f1ddcc9dee916e1f9d33", &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000200)="0bc2932eca4bb8933bb7c1edb061a5f9cf5d47509a70139d4f77203b0004353ec8cf372442284bc3d330e62b1d1c2cc8010050d89d0637a73d24d9da02fd2b83ada6beb1501a33d928efe5c55a8567f9f606e76a9c04938e657237ef701c89442d0e26e569b0ef0bf265e0bb3f64ca375701f8a145c3a26530c0cf24f81ee27268152a893c5814ccf68bb9f1f045c18da60fe367a9db578116cc7b00000000000a9983bcc9e3947afe461d1eda69c669a9ece1c03535") r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) write$UHID_CREATE(r4, &(0x7f0000000440)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000380)=""/111, 0x6f, 0x4, 0x8c28, 0x5, 0x0, 0xffff}, 0x120) r5 = dup2(r1, r2) tkill(r0, 0x15) ioctl(r5, 0x9, &(0x7f00000002c0)="5c7208c5b744481779427dabb0be2ffb61f62f70af962837d165de4ee6423dc0ed3ce57b840d8bcbc0b8620d2523c771993c5b785be03e352e491865549069916fd3ceef937ddd03b7fab17f6873a52a9c60004b208bc79aa05acb1d3212adc8a13f48526942ccb2fca04947a8702c04f1967d09d1d6225f5f9be9006b239f8344f5db216c29f377e6d4753bb9e353992525f33e27f182f73a723680cd") 00:16:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0x0, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:27 executing program 3: r0 = inotify_init1(0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/11, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)) [ 718.176101] libceph: parse_ips bad ip '::0.Qnullb' 00:16:27 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="3a3a302e516e756c6c623a00032898b357ba8b4348cf2757d5f5db949d5ee859c7c2f138a02476c3fcc0b9e95d0e6d6ebae90a76f9b6c60b2ddc1838b117dbe8d4959368492f5a4851ffb0a13515882e4beda826157b7477450ce19eb539e5934f6e01fb1508586e30375ef6e522a679ef11192f52a8e60de8f968"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2, 0x800}) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:27 executing program 1: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000f00)) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() fstat(0xffffffffffffff9c, &(0x7f0000000c40)) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0x0, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 718.635011] libceph: parse_ips bad ip '::0.Qnullb' [ 718.660857] libceph: parse_ips bad ip '::0.Qnullb' 00:16:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2f, 0x829, 0x0, 0x0, {0x4}, [@nested={0x18, 0x0, [@typed={0x14, 0x9, @ipv6=@loopback={0x6000000000000000}}]}]}, 0x2c}}, 0x0) 00:16:27 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") r0 = geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x1, r0}, {0x2, 0x2, r1}, {0x2, 0x6, r2}], {0x4, 0x7}, [{0x8, 0x1, r3}], {0x10, 0x2}, {0x20, 0x7}}, 0x44, 0x3) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) r4 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="665a9a14718422263f3d0ed035a81751cb1f93b44ed4655a45913056d0ca81861a375d8bb4c8e64991aaa07fc4aafcd6d4723af6ffa01d18578385945f4a73e6bb6e6ad030bdfdb65f4279205d435791a51546ef2664cfd87048994e75d08aa5b3c45a09882336deb6352ce3f21f5fb27f729880d16b08c68183a24273ac9eed4da484845259276b27ffba3cafe38a94d6faeba3d5086d4ccee6c6755b7ddd1ca5a3e866a266de7a19d3e739a130697f50f030599082fbc6f59156717e04ab38", 0xc0, r4) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0x0, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:28 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000040)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r0}) dup2(r1, r2) tkill(r0, 0x15) [ 719.157766] libceph: parse_ips bad ip '::0.Qnullb' 00:16:30 executing program 3: 00:16:30 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:16:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:30 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000440), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) socketpair$inet(0x2, 0x800, 0xfffffffffffffffe, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000340)={"73797a610000953fd7a801eef12500"}) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r2, &(0x7f00000003c0)={&(0x7f0000000200)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, &(0x7f0000000380)=""/32, 0x20, 0xfffffffffffffffa}, 0x1) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) tee(r2, r0, 0x5278, 0x8) [ 721.410221] libceph: parse_ips bad ip '::0.Qnullb' 00:16:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:30 executing program 3: 00:16:30 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', '}cgroup}selfmime_type[))\x00'}, &(0x7f00000002c0)=""/98, 0x62) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)) [ 722.036294] libceph: parse_ips bad ip '::0.Qnullb' 00:16:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:31 executing program 3: 00:16:31 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000000c0)=0x1c, 0x80000) clone(0x4000000, &(0x7f0000000440)="0d78db29713392f8d0ff79a64063c872aca8ce3d1128eaab3d05396139c1746bc30b72c37c8e301bbf271e1f57071bfc8acd6738f2cc5783a48afa1bbe195cce6157f163db70b865c5d88467fa24af9f9889526b74bd77abad4c476954f7fa8529c8f3292d0c5b736db8e291ee046c40789b057341598e", &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="2ae6ae4734db3a7d24726cac288974183ae2b8529600a130ea66430146170648f4e5f0a0ff0d890b7d19fadeb0490ff10a0789a20a0bd16286fb1976bebc78709f7a8c5320580ef428cec4eba801") getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x6, 0x1, 0x5414}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000400)=0x10) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 722.572385] libceph: parse_ips bad ip '::0.Qnullb' 00:16:31 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:31 executing program 1: 00:16:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x0, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:31 executing program 3: 00:16:32 executing program 1: 00:16:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x0, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:32 executing program 3: 00:16:32 executing program 1: 00:16:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x1, 0x3ff, 0x2, 0x2, 0x7, [{0x490, 0x8001, 0x2, 0x0, 0x0, 0x8}, {0xffffffff7fffffff, 0x7, 0x8000, 0x0, 0x0, 0x800}, {0x7, 0xcd88, 0x100, 0x0, 0x0, 0x880}, {0x1, 0xe863, 0x37ac000000000}, {0x5d23, 0x6, 0x0, 0x0, 0x0, 0x800}, {0x4, 0x9, 0x5, 0x0, 0x0, 0x8}, {0x6, 0x8001, 0x4, 0x0, 0x0, 0x5}]}) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f00000000c0), &(0x7f0000000dc0), &(0x7f0000000240)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 723.679440] libceph: parse_ips bad ip '::0.Qnullb' 00:16:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x0, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:32 executing program 3: 00:16:33 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r1, r2) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) tkill(r0, 0x11) 00:16:33 executing program 1: 00:16:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:33 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="183aa8d88f3695ddce42a5e89cc185b283b459d00223a68c08511640863308e07800000000e6e83a8e3eeade9edf8a0641865c48caacb1a46207ca010033", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:33 executing program 3: [ 724.229373] libceph: parse_ips bad ip '::0.Qnullb' 00:16:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x0, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:33 executing program 1: 00:16:33 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getegid() geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="40c50e73f6384e4fb42355e05eed9ada8aa2217a55db3a546e36f3d09ebb905b5de53ad26ca6298326e732fd635127529f3d48de15", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:33 executing program 3: 00:16:33 executing program 1: 00:16:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x0, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 724.869956] libceph: parse_ips bad ip '::0.Qnullb' 00:16:34 executing program 3: 00:16:34 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000000)={&(0x7f0000000140)=""/4096, 0x1000}) tkill(r0, 0x15) 00:16:34 executing program 1: 00:16:34 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x1002000, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="83e7354f493fdf600b595f3f5e5b212790eef4d8253bc2f16eaf027fa0b7e8f41c624cc88284e6d061034ecfc081953be83ef16f19c7b59fe7096c9b724d106ac94e8c61783128d8f34218e1f4e9704110015afc1a04421d501fee5aeb5bdd769f1da25c60b27e", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) getpeername(0xffffffffffffff9c, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000480)={0x6f, @broadcast, 0x4e20, 0x3, 'lblcr\x00', 0x4, 0x100000001, 0xd}, 0x2c) setreuid(0x0, 0x0) userfaultfd(0x800) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="a359489b3b32d0f1d825cb0600000000000000def46d6a4cc1d6390f8e46f5de639192ebe5170cb280b2f2e2d38e6694328b493ef6681aa1ecffa89b73afc420cf3559cf61d0158703008c5fc610e87252c34d8666b8c4d7fa0998486b59d97cbe30ecb0e22be448e8073620f0d3e17db3cbc7f2922f543d5b"]}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x40000004, 0x0, 0x14}, 0x98) semget$private(0x0, 0x0, 0x1) getgroups(0x4, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x39, 0x0, r4, r5, r6, 0x0, 0x100}, 0x0, 0x8, 0x8}) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0x8) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0)) close(0xffffffffffffffff) 00:16:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x0, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x0, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x218a9106a2342ea, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0xfffffe92) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {}, r1}}, 0x30) 00:16:35 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400200, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1) 00:16:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:35 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x8001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000040)={&(0x7f0000000040)}) [ 726.435911] libceph: parse_ips bad ip '::0.Qnullb' [ 726.532555] libceph: parse_ips bad ip '::0.Qnullb' 00:16:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x0, [0x7]}, 0x2c) [ 726.680904] ptrace attach of "/root/syz-executor3"[16754] was attempted by "/root/syz-executor3"[17906] 00:16:37 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="6f003b50bdd700006c623a00"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() getresgid(&(0x7f0000000380), &(0x7f0000000d00), &(0x7f00000003c0)=0x0) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000400)={'raw\x00'}, &(0x7f0000000480)=0x54) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x4, r1}, {0x2, 0x2, r1}, {0x2, 0x5, r1}, {0x2, 0x6, r5}], {0x4, 0x2}, [{0x8, 0x4, r3}, {0x8, 0x1, r0}, {0x8, 0x4, r2}], {0x10, 0x6}, {0x20, 0x5}}, 0x5c, 0x1) 00:16:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x0, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:16:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)=ANY=[@ANYBLOB="1400000022000100000000000000000000006fa8"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x0, 0x1, 0x2, 0xc6d, 0x0, 0x400, {0x0, @in6={{0xa, 0x0, 0xfffffffffffffffd, @loopback}}, 0x0, 0x4, 0x100000001}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={r3, 0xba, "2ee97e818f99e09dbf16d278fd01ffa4a6c4322d38b567e6153fc48f13a8cc10671cbe89bc0fd2dbb2118201dcde900c8071e76eacf2c2209301fbef4b01817d493224a69cf2ae77100ba80db1e4cc5facfd5d9e3f4c8e161d9653984525165f3094e4848d7d3eb04aae30bbbcbd96c0632a3b3d19c9091b77482529302104db6562f9f91076446211e829f28a9506cefd32246a4d4dcc742b0204622015d4f6aba38479c373e99ee7fdc0d4efd890c6453538fae92d5923060b"}, &(0x7f0000000380)=0xc2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c40)) 00:16:37 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)) 00:16:37 executing program 4: clone(0x0, &(0x7f0000006ec0)="9e1e0439535d66d3001f353abeface6d9b4e21cfb50db8ab7a3342fad2e456aa03c741cb755fdea452b50fa795923ae724a5b235abb490f466de1d20ff2a92da2092b0f93768509566c590929fd14f06970021a9a2701a0688a3958715115af72f66b648973e61a2efd7bbb4502981", &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000000)='./file0\x00', 0x802, 0x4) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000003c0)={0x80000000, 0x1}) sendmmsg$alg(r5, &(0x7f0000006cc0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="5ab549020f86b1812d3ea8b1c90fc7b80e153d39b0786b5b8ccbd0df229b545755d614641379399460af116d938d64d439a5de426e1a10087e5f833976ecfe97a74d2902a62c3ca0031c66cb9acfc021dd49a00c8f9042bb7fe86a7162a69d56b05f2862dcd5ec17fe39515bb5f8d834f7aa71070853e6715a2850e97e0ad34824baeb", 0x83}, {&(0x7f0000000140)="9a574b4886a41bd87c4ae57c6276057a0a9b3770595a6b85410d375e04d144cae616008311ee8216643bb703fac6db760e147616eaae7a11afe41ed024a8cf6c2222f0dc4b51743b277a98ce5c8163eb74cb7fd790965c07d3fb33cc54752a32322855e5c7e939b833bb5badb68d8412a04cd4095215c486b7b8d317a1922ce3db2ce8227bc111d88e9c20b72752c8c6caf999a781265c7acef6b370", 0x9c}, {&(0x7f0000000200)="600e94935e30ae2d08de92174212f9e09786c5602067747bb8b12b46d2e239bacafb4e3eaca99c9ecb7d67291620f8f23aa919a3bb16184b0243664b79aaa057af1c09551f42358f95b94a1f519f70b54518b8c9fad99aa25d690438e941ee11da2a08d0bac439eae92e73cb69b0c73c83c58ecf321dfbdfd4bbcfe30aa155b42d6b8c9371e38fdb38f173277455700d6cbd2d027b7dca62ecd6b7abc76a09e9ab6c06a49070fbc8d046", 0xaa}, {&(0x7f00000002c0)="40b05fc00f8f5113e1565201f95698eff16423e9f85be8812e49e0de2a092796691245d722441ac4b346f5bf8cf2ab880570d1b5f43c383c6644ea3fdf1e3390054d7e19dba6ff944a501060d95f6f6edc15ad3f71e5babee6ddc30c30ac78aeb966af9c008189681d27fc9b8b54a1657749d389bad9917f47ad03d7df89d8c7632374c3b584be70ecfe77984ed81c72192f7fa3bcd6584c6cdf2713bb527c89b35a18c30ba8d525fe64d0e4ec", 0xad}, {&(0x7f0000000380)="b6b2e9efda7867da676c280632a2aa162bb00921e2a96854f33a26e880d5c0f56b56f37923c9aa35feb7cba0f69819841730e6f6", 0x34}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}], 0x7, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x1f0, 0x10}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="277e4b13d9c343a6c7d8a9e2f6ee32f18a425db064a4de6c5972206730561464b736d68ba2821c7ceea6f9bba8e106242dd1c7f9031969c97c0120034946b9e17c52ba04630a40d8", 0x48}], 0x1, &(0x7f0000000780)=[@assoc={0x18, 0x117, 0x4, 0x7fffffff}, @iv={0x90, 0x117, 0x2, 0x7b, "6d1c06116d004d74ea13f0a0755d756183cac51e3d32ebaad564091c0357c7fee4e3a924a97c52d71a281ead1780c3cfe96fe15514012f314142742d544c580ad0d93fe6b47efedc311c8bae9e38c783b8b400a437100e36301585f5083062626863aef0e36e9e56c0457479b94f420074c3d9d30d09aa1a156374"}], 0xa8, 0x20000040}, {0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000007000)="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", 0x1000}, {&(0x7f0000002840)="65dd62c48e62dded3484996242fa6e4bf7744f9979859916ca29853b2d5239bb06eb3d7168da2bcfb224cd13d8c00b9268e3cc7b198ddd93edd156b8c2df652bd87ece44e0c1b385053bf52ff313bf49b9ca7bb226c4e605a4fb1dfbe25bcee6e9", 0x61}, {&(0x7f00000028c0)="df7f23d7af80a3e3c1fdcd8bf1bd16e5a1a1b216e207a5f2f05c159eac6d925b8276d75ed59a428680d92001d730b78fbe6dcea742234a537fa16c300c9570b60dfc83a29b355e499376a5cf983028522787de92a6f0b41329d04f7eb9d7e361ad302eea0b0b96756dbf02be8dcb96cfb9c269048b0702499fc43dcfc7838c338c0ae55771849560a14034190c99041814423d1726e8aa8417010cba039c4b4d62a511ff2af160f6ab28fd086db9428e003deaced773ec7c226f6773d3d8df744d87c82fb22557bd05a9764c0525761e74db9f6b332752a938b5eee0611e8384", 0xe0}], 0x4, &(0x7f0000002a00)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xffff}, @assoc={0x18, 0x117, 0x4, 0x4b5}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x60, 0x801}, {0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002a80)="d71ed84574e68c3edb83655f2921dbdbd4d4207a261289d5f391c4e747479db5fdfdd770fd4ea44f1028347d5ab8cff2369b32274fa9c9f53da0c4775d", 0x3d}], 0x1, &(0x7f0000002b00)=[@iv={0xc8, 0x117, 0x2, 0xaf, "bd41a9727b068086cb56736e3c50ad4b2f2cde9e3304f8dc1eb212b8ca01540dd7f4e4c094552cdf883cadbb8d1c2bddde67c16e513915fbf9daf80a81bb72fe224ebbfd6e1d60d3c4280352794884eeb9b2bd19af2fae01fc82878f18e69bc136df5ce41db9a8951aa88f7ce6f62971acb4949006775421a6767a0ede92817c4bc2b5177d31b986d94380299480ee7c08eb9b6494b00a36096cef17fd2c4d00c64d780e40dde1c9ae73510f6af1bc"}], 0xc8, 0x80}, {0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002c00)="5d0fb83cf3ef6e66885d5eddb36e2d60238c0b422715c3124c2b7f30ec787c4deb3f8af9d400a8e8ade186b97b6ca16eab52c4db356f0bb5bfb6d52826221d5509f630dfbd0ae8658f45e698639470efc7895e62237ddcf5", 0x58}, {&(0x7f0000002c80)="2793bd25e76006ee2e22eedf336e49fcb8d05b4aea997ed0c8f5c06ff44469ec92912e27b1af56609a8355cfa3acb7ff68989f09c8d469c7813a2dcb0ef1a08f7fc792dfd46dd047ca9e87d89118655e815649d882d689db152e80ccfac591865d15bb011b55c649929a887c6c9631ae73215b9c460ee3107b0515e0db214189917c9a09644591bf9bf2ae", 0x8b}, {&(0x7f0000006f40)="bc3c05a8fd99c81f79478416ffa8b16501d2077baa8c2b436fc0727b01cbe767e65160cf06e152599bfa871367dceb88f8c5d2b18c4da1adaa543bf54c6c8018f5a1cc3512ef9ac1c7def62cfc52522063cf661b9af0269a0e341c1018eda55ec09e9789baf1ca3058b59bb4c1514b562102df762a3d7762f4e64a9ffa9bb53ad7f118666f408a468928ca09f7c3ff", 0x8f}, {&(0x7f0000002e00)="868dc4ed0ed1e0c66e7ef2bd476442b791e1a2565c2e0a0e2f8db9f102cafb61c85ed640ce4031e8494134ad7bcc324902facd1365a0c343b506ef3424c04443fcb45a42b4a1889c94df30d5d9d1b97646f26ae8e0a39274041fb7", 0x5b}, {&(0x7f0000002e80)="fdf21dc55b719840e8dc1afcc187dffe70fc86ff9afadd286e9411143a33189a417a56b5d8ac9bc5a100d69dfc9b69e8445db72535532145ecfe3d59722a3d931c7ae167475b03f8cf1508", 0x4b}, {&(0x7f0000002f00)="59364aaddc4fe245d47bf12b7ed0763be98804910660e61d25a42eb7f6f4594a53186ddbdda7f87bbad40e5f448602d4abf8b621eb364d134fd9e894a88b2328d9a8b4ffb54ea38b60036d370e60620ce7e0ba07dd91e2bc2cc9d183fccbb2df70e1344ed7f22f33986096bcfcdd8aa77cfe3a6bdeb3fff760525feacc39751f8047b094c45dcec607579e930bc61d290f85585addbf20b5736b8ff266a3e522a36dbdfc1458fe44db33725191544f241942be4c08741a1b9837032df759ee5a60114a668bbccf234502076a1748c8d0787f8defc419de6f67ad70383399edcc4b7df9c3d0a08d5b", 0xe8}, {&(0x7f0000003000)="b72f576af760fb6ea273732650a9e88f7e99c5d6dec16e428f9c3d048d69e7094b1b1d4580099abfdc2a7759468b653a8c1d2dfa58caa6c50a3904f9ae3c9febb2cef69c0baf54eb7556883324bf299581db4551e93c924a17f1f118a06cead36fa810680eb1d26d87b0419c45390b58a92c5bcce325dd82873def807d7df4a8c8b0f81d0400d3b09b6971e355cda695b2cd14cb30053d9cd2f599a5c928b807", 0xa0}], 0x7, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x20000840}, {0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000003180)="4c00aafcfd9359fc5d67e5d138c9448ad9450d16bcf9e0d0831296895bfa4f2daacb764aa24533bbb14bf1245c7313c461fc9d6376ea51ab4bf5439cabc890e9922c440f2bf0263f22ce118d90c1f5772be241fc0bc13496602c44c91a72b495de5b07f43c5d939e51793129be606055f7ae9dce51c32347dda5247e799746dcc471366ff9fa4ca1586013f30c211bbf12b19473dea0c250ca9106f3f4b2a39b8cdb546aab28d2db4d6f8f7d580d2b7f384c1c993b00dcd54df8c245fc8049d6", 0xc0}, {&(0x7f0000003240)="c02a36d779a397b66b2a6e89e7230ca621abac9fbd0942701d6dae8d4262ed9d29dc05d939cfe97729bc5e870942acf5a3114db087c2b664692aa1ffdeaf79fb4996324d49961249b21eee5402a3082c74ce818f25ae3dd7c60686a037b90cdd6eac78f5bd5b2b8e95c4c6d8032da22b", 0x70}, {&(0x7f00000032c0)="116c30d1cb38d5f03770932704f5020af517c87404c9f506a6500a47a0af9e1e56ca2545717f4b8dd64d766fbd756e5d5289e585458787667a29affaf43ef86955ed8cacda437325ec1c241bf49fd5bbda6b10ad1ea30c685b5fbb33d9e3e0322de58e25ac90eccff1bc4c6d34b91495cf19bac2f20261972516c1dc853df92ac198b12b30fdc0e8aa6983c6b5", 0x8d}], 0x3, &(0x7f00000033c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xe3}], 0x30, 0x4}, {0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="51b8e013289e0bf5178920ea2d08e18c35605fd842cb1b8cf41fbb35adb8b2b6c628cbd527b96f7469e765efa81c8cb205efd0fa0e7a1a253d66db61e40296292f7743a57b5b3ba9455503365ed9f0516b450a32b7a022563191c3dfec1201773239f0220b1bafc38015e4119e24724c4519ef9172b560577ab0c35405d74e9d52c1c6aa880b3de3724d42f577f93dda8d32e4c8e7c9862249a32033b006d5bd672202b31df92132bcd16ec24f937a942656718e3795be4ea232331c28e4a90a9947cdf57f7892c27200465eacc529800f625ff330d9ebf90a30eddc8e6c61aba1ce02f0efb3e52100fcfa9189cf0c32ba976976babe30", 0xf7}, {&(0x7f0000004500)="71e2d3f09439ef1b2abd1afe0ab996e1e39fbb8b6584c2d71a7190563a217b1f951fc55a16c6adf5670984536eaeaffcafe554c5b917692bfdb33bd9ee94f3ade5a5ea9e4c31a7c99a87a6859b242a4ec0f903d49de9a2c0cd6f8c120623", 0x5e}, {&(0x7f0000004580)="8e0bc69410a1b8eaba7eaa3fdbe040aaadd2ea80d0805f77bb07c9f60ee3923319975f141d8f4062f49faac85a8ddccac31e777b2b4e367d6a1b7185e31cbeae0f72d1b77048f9286b7473d6868ea3955282b0e08548cf84433d6c95662976eb951369a13aa9262ffc8a521fa9b5740efa757dad600abac11b6fb3f965eed86c3df131471c6ba90712408ac6f4772c2ce1397808019e38914350a7ab080fc1f7ab7390ab74bcc5555092570a4210d873d38be83d1dee65b6b28d9557ef039f8a817323203081c0eab20d645f700d2b447167e2", 0xd3}], 0x4, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f00000046c0)="87243d0bfe9655e03fd5f5a5f64461233d6aad193c97166cbb0258969041b5b2a85a134b0a13a6cceea282d3f50d98081dac4a310196ed53ca7000902d869a3634fa9c76576584a146f94c349f74773d5ff54881db3523111a0c5f3b716fb9cf05c0683dafc5b5a1aaa391dbf8c5561bcb381ff50de9622223b5532cdf0c97c9081751828265842812bf39f2905fec30157c0d888ab985b5e65398b8a1b1ebaa9a5979c913d1c31bff21d1644a27ad976bb330cee3372f0bd54e5072efdcc6", 0xbf}, {&(0x7f0000004780)="9760dde80f366f24a1ebae3c71da68d97e84463eed25d1cb2e538de551a5ac7544f49cb835f2d664bb5b362a2057caef49fe36479da42f92e1b31b8bf85d69a0fa08d2ddc88ddec8a5ee33806c8ec0841fcf94cda2889bd63f6b60b575fc209cdb90ec2c2c4f5cd72d15b08e4c6e49893eb30695792b8fc6bcf3644c47b9843c426af75bacb300bfd8091580f549e530aa81ca1c1f9c0b", 0x97}, {&(0x7f0000004840)="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", 0xff}, {&(0x7f0000004940)="407c6e233ba8171ffd5e710018ed44d19ca075df27178581e73d571179372896a9b2380d9f8b76e8505140c53e660d0013e92690440d43ee2748e4c46ccd9445bf806d46be1964d90e2c4ef5a6d6697197b5f15c2a8b5c42fbe9afa46127fb111b8005a0b4d4029d2cf792fa119701d7d778c9d2206f29a2d71155a7fb56c87d2cbb", 0x82}, {&(0x7f0000004a00)="af4f66b6db54b8323944164be85511664fce1d65c67a67b19cdcc98a9f54d5eb96102d3465b7cef56ffe78809038767040be1f736408", 0x36}, {&(0x7f0000004a40)="d0ba5161856cf6aac3518155eecd020825b0b4944e1b07c2092f4b4ae273b5b975505d6c2d52eeac6851c740adfa1dc40ac29cb02bbce74b07c4cee43b8e02cbfaf9261558c1b754919966766efbed3627fe1001018df2d076baa79935b06c78a3bacdbd3d516f1344b1d14315852629c67405f23c77c1a620ef13df17fdb8a3b255b9972669fa3c68", 0x89}], 0x6, 0x0, 0x0, 0x4010}, {0x0, 0x0, &(0x7f0000006b80)=[{&(0x7f0000004b80)="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", 0x1000}, {&(0x7f0000005b80)="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", 0x1000}], 0x2, &(0x7f0000006bc0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x100}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x60, 0x117, 0x2, 0x4c, "bf36dca92637a679a0b5cdf5d538256961bdb98a84aff8448ae0a4e396a5c7612411990bedcc82472d01f554de9e399bf878c36277713c9ebf254ee047eaddfad811f77591115d47f6e9336b"}, @op={0x18, 0x117, 0x3, 0x1}], 0xd8, 0x4004885}], 0x9, 0x4004000) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000004c0)) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r3, 0xa, 0x13) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) [ 728.824140] libceph: parse_ips bad ip '::0.Qnullb' [ 728.874540] ceph: device name is missing path (no : separator in o) [ 728.931723] *** Guest State *** [ 728.935460] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 728.945384] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 728.954459] CR3 = 0x0000000000000000 [ 728.958233] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 728.964491] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 728.970517] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 728.977577] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 728.985764] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 728.994002] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.002200] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.010243] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.018574] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 729.026864] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 729.035138] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 729.043345] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 729.051378] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 729.059679] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 729.066303] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 729.074010] Interruptibility = 00000000 ActivityState = 00000000 [ 729.080291] *** Host State *** [ 729.083728] RIP = 0xffffffff812bde4b RSP = 0xffff8801720ef428 [ 729.089769] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 729.096455] FSBase=00007f000c9c8700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 729.104596] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 729.110535] CR0=0000000080050033 CR3=0000000118768000 CR4=00000000001426e0 [ 729.117767] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ac01260 [ 729.124708] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 00:16:38 executing program 3: clone(0x0, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r0 = gettid() r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f0000000000), 0x404000000d, &(0x7f0000000280)) [ 729.130975] *** Control State *** [ 729.134727] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 729.141441] EntryControls=0000d1ff ExitControls=002fefff [ 729.147175] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 729.154311] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 729.161034] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 729.167915] reason=80000021 qualification=0000000000000000 [ 729.174532] IDTVectoring: info=00000000 errcode=00000000 [ 729.180146] TSC Offset = 0xfffffe74114869fb [ 729.184700] TPR Threshold = 0x08 [ 729.188118] EPT pointer = 0x0000000170f5001e 00:16:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x0, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:38 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") clock_getres(0x2, &(0x7f0000000000)) geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 729.596163] libceph: parse_ips bad ip '::0.Qnullb' 00:16:38 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) futex(&(0x7f0000000080)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}, &(0x7f0000000100)=0x0) timer_getoverrun(r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000015) 00:16:38 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000000180), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vsock\x00', 0x505002, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000001280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000140)=0x6e) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) readahead(r2, 0xfffffffffffffffe, 0x0) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x450103, 0x0) faccessat(r5, &(0x7f0000000040)='./file0\x00', 0x41, 0x800) r6 = dup2(r1, r2) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000001c0)={r1, 0x0, 0x40, 0x401, 0x400}) r7 = socket(0x1e, 0x805, 0x0) r8 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r9 = socket(0x1e, 0x805, 0x0) accept4$alg(r8, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r7, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) tkill(r0, 0x15) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000001340)=ANY=[@ANYBLOB="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"]) 00:16:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:16:39 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x402) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0x0, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) [ 730.324583] libceph: parse_ips bad ip '::0.Qnullb' 00:16:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2, 0x0, 0xfff}, &(0x7f00000001c0)=0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000200)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) ioprio_set$pid(0x1, r4, 0xc000000) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000240)={@local, @remote}, 0x8) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) 00:16:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0x0, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:39 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x140) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xc) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) [ 730.749569] Unknown ioctl -1073435134 [ 730.911932] libceph: parse_ips bad ip '::0.Qnullb' 00:16:40 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1c0, 0x0) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0x0, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:16:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd\x00') fchdir(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flock(r2, 0x0) r3 = memfd_create(&(0x7f0000000140)="0032668ba268f1441bee1e8cb88a7895f2df116fb68dcb012be0eb9ff631ce48309cc194386b4ae4b344f3b2bf9d5a53a8c4b92fa6d3c20c16", 0x0) write(r3, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x800) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) close(r0) unlink(&(0x7f0000000040)='./file0\x00') 00:16:40 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="00fbd700fe1a243afb546d9135d1cd341bfa5e007f064b6a99ceaf79486ed602b4bd3eb4da1fe8664a6fd9f789a3bc0e11c70e11522489877967efcfda5af6b83fc963df000000000000000088487a742e96fd0a47eb1955b2d9d4bf02ca3bd2d4f8c7c7b7754b46cb110446cb9096e4ce0248412c7e3f7b4dc792e94bcb8f8344dbd0cfc7dfce28133db490cf091b14bda8275202a8fa882a89d6b9e760969c4007e4306c9a3291c2093846bb22cc75d85eb508a460276af1a5a642c95bbfac581b3a250a6c3aaa5d5a1455ad55b5b14d73b82f216848"], 0xd7, 0x1) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x0, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 731.483135] Unknown ioctl -1073435134 [ 731.688116] libceph: parse_ips bad ip '::0.Qnullb' 00:16:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(anubis-generic)\x00'}, 0x58) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0xffffffff, 0x6, 0x3, 0x0, 0x0, [{r0, 0x0, 0x100}, {r0, 0x0, 0xfffffffffffffc00}, {r0, 0x0, 0x71d6ad38}]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2208a911993f0260100cfbfab3103", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x6368de714a011887, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000100)) 00:16:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000004, 0x3, 0xff) bind$inet(r0, 0xfffffffffffffffd, 0x0) fchmod(r1, 0x6) pipe2(&(0x7f0000000100), 0x800) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101201, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000040)={{0x8, 0x10000}, 'port0\x00', 0x8, 0x100000, 0x7, 0x7, 0x4079, 0x1f, 0x8001, 0x0, 0x4, 0x6}) 00:16:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x0, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:41 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 732.337673] libceph: parse_ips bad ip '::0.Qnullb' 00:16:41 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x5, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') sendfile(r1, r2, &(0x7f0000000100), 0x80000002) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="00fb500102aa75bc2732eaf03fc078c11de2d09627b0a89a74fa27af597e38a66bcfd62808d462b20da3a418bf04be5ee451509d694084b2873a0d6b19213d08fc144ede96e3db273cb191ffc54a9c0cd6422b33000000000000000000000029261e9876f96da8e24d5eca5d1b5ca3c41c7937090d6718acab3224f54ecd2ed03a72658c65977fbcefa08c0564d6831286af120cb1853d40d644"], 0x1, 0x3) ioctl$TIOCSBRK(r0, 0x5427) 00:16:41 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x48300, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000380)='./file1\x00', r1, r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)='./file0/file0\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x10000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f0000000280)='./file1\x00', r3}, 0x10) umount2(&(0x7f0000000040)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 00:16:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x0, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:41 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="3a3a302e516e698be4d13a00"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x100, 0x80c0) recvmmsg(0xffffffffffffff9c, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/20, 0x14}], 0x1, &(0x7f0000000400)=""/8, 0x8, 0x7}, 0x7ff}, {{&(0x7f0000000440)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/173, 0xad}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/75, 0x4b}, {&(0x7f0000000700)=""/140, 0x8c}, {&(0x7f00000007c0)=""/81, 0x51}], 0x7, 0x0, 0x0, 0x8}, 0x5}, {{&(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000000a40)=""/183, 0xb7}], 0x2, 0x0, 0x0, 0x9}, 0x7}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000e80)=""/108, 0x6c}], 0x1, 0x0, 0x0, 0x20}, 0x8001}, {{&(0x7f0000000f00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f80)=""/190, 0xbe}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/211, 0xd3}, {&(0x7f0000001200)=""/19, 0x13}, {&(0x7f0000001240)=""/103, 0x67}, {&(0x7f00000012c0)=""/2, 0x2}], 0x6, &(0x7f0000001380)=""/133, 0x85, 0xffffffffffff6e98}, 0x8}, {{&(0x7f0000001440)=@generic, 0x80, &(0x7f00000015c0)=[{&(0x7f00000014c0)=""/255, 0xff}], 0x1, &(0x7f0000001600)=""/140, 0x8c, 0x672}, 0x9}], 0x6, 0x22, &(0x7f0000001840)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001880)={'vcan0\x00', r1}) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000d80)="3e91e465e83dd6fd117c33d4eb9cfb24", 0x10) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f00000018c0), &(0x7f0000000dc0), &(0x7f0000001900)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000200)=0x14) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 732.988696] libceph: parse_ips bad ip '::0.Qni‹äÑ' 00:16:42 executing program 1: getpid() r0 = getpgrp(0x0) r1 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x608200, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) r3 = msgget$private(0x0, 0x80) msgrcv(r3, &(0x7f0000000540)={0x0, ""/196}, 0xfffffffffffffea4, 0x1, 0x800) write$cgroup_pid(r2, &(0x7f0000000180)=r0, 0x12) r4 = timerfd_create(0xfe97ebacf2155e46, 0x800) iopl(0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x8, 0x4, 0xfff, 0x400, 0x7fff, 0x81, 0x51e0, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x20, "7d00e00ca25e1ee747b666a08f3a2e7595ed24bf0543d1caafcda20bfbdb79da"}, &(0x7f0000000300)=0x28) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000340)={r5, 0xffffffffffffffcf, 0x1, 0x2, 0x5, 0xf0d, 0xac21, 0x6, {r6, @in6={{0xa, 0x4e22, 0x9, @loopback, 0x81}}, 0x4, 0x6, 0x7cc6, 0x0, 0x10001}}, &(0x7f0000000400)=0xb0) r7 = fcntl$dupfd(r1, 0x0, r4) r8 = msgget(0x3, 0x400) msgctl$IPC_INFO(r8, 0x3, &(0x7f0000000040)=""/164) tgkill(r0, r0, 0x3) setsockopt(r7, 0xb7a, 0x2, &(0x7f00000001c0)="acc5ad147331c436c764eb61a3623dae2f3fb448719eccfc3e848ef3e7070fa5bf94c4e0ac19e8bf507a3c36cfc45729207a3c589ff29d4cae5231f231f10e7c3292c94e2d737cb92f99e61e31445a1aba9e5857057c19d05e0e808dc683b7", 0x5f) 00:16:42 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180), 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x1000000007, &(0x7f0000000080)=0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000140)=0x4) io_submit(r3, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)}]) io_destroy(0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)=0x8) 00:16:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:42 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() r0 = accept4(0xffffffffffffff9c, &(0x7f0000000200)=@hci, &(0x7f0000000000)=0x80, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000003c0)=0x101) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r1, 0x2}, &(0x7f0000000440)=0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x400040, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f00000005c0), &(0x7f0000000480), &(0x7f0000000640)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="f0ebd48a", @ANYRES32], 0x2, 0x0) getegid() sendto$unix(r0, &(0x7f00000004c0)="98", 0x1, 0xec9074101236a7e6, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000600)) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x80000000000000a) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x8002, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @pic={0xf9, 0x8001, 0x7fff, 0x5, 0x1, 0x200, 0xfa1, 0x7fffffff, 0x3ff, 0x61, 0x8001, 0x8, 0x52ad, 0x81, 0x7ff, 0x1}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000080)={{0xbf, @empty, 0x4e24, 0x4, 'lblcr\x00', 0x12, 0x9, 0x9}, {@loopback, 0x5e24, 0x3, 0x200000000000004, 0x1, 0x5b}}, 0x44) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001600)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x200000, &(0x7f0000000140)}, &(0x7f0000000500)="6a77b8a46480", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 00:16:42 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80008, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r2, 0xa, 0x3a) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r1, r2) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0xb41) tkill(r0, 0x15) [ 733.673020] Unknown ioctl -2113360285 [ 733.714609] Unknown ioctl -2113360285 00:16:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:44 executing program 0: mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={"48ee7a5f74756e00"}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:44 executing program 1: time(&(0x7f0000000000)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'os2.', '\x00'}, &(0x7f0000000080)=""/138, 0x8a) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000140)=0xe17, 0x8) r1 = memfd_create(&(0x7f0000000180)='os2.', 0x3) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000001c0)={0x3f, 0x2, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[{0x3, 0x800}, {0x2, 0xfffffffffffff800}, {0x2, 0x10000}, {0x3, 0x100}, {0x3}, {0x2, 0x1}], 0x6) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000240)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000280)={0x0, 0x0, 0x8079}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={r2, r3}) unlinkat(r1, &(0x7f0000000300)='./file0\x00', 0x200) getpeername$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) r4 = memfd_create(&(0x7f00000003c0)='-cpuset\x00', 0x2) r5 = request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='/trusted.!lo-selfwlan0]ppp0posix_acl_access\x00', 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r5, 0x0, r6) fremovexattr(r0, &(0x7f0000000540)=@random={'system.', '{\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e21, 0x7, @loopback, 0x1}}, 0x4, 0x4, 0x2, "c46a231d322532e8ac3d2643c3b63520c3cf2ee1177180e241d506d30015d01111d7cd04188ec380c299fa35b54747b27e0636b93e77bb0e8ae9a88da79535db3f8f3ccf01f26db12feee279d3a9dbee"}, 0xd8) statx(r4, &(0x7f0000000680)='./file0\x00', 0x6400, 0xfff, &(0x7f00000006c0)) set_tid_address(&(0x7f00000007c0)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, r7, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xc2) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000840)=""/252) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000940), 0x0, r6) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000980)={'bpq0\x00', 0x5c}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000009c0)={0x9, 0x10001, 0x20, 0x1, 0x18, 0x7}) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000a00)=""/8) fcntl$getownex(r0, 0x10, &(0x7f0000000a40)={0x0, 0x0}) wait4(r8, &(0x7f0000000a80), 0x40000000, &(0x7f0000000ac0)) 00:16:44 executing program 3: r0 = socket$inet6(0xa, 0x0, 0xfffffffeffffffff) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f00004d7000/0x4000)=nil, 0x4000, 0x40000004, 0x31, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt(r1, 0x0, 0xce, &(0x7f0000001400)=""/203, &(0x7f0000000040)=0xcb) 00:16:44 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x10000) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getflags(r1, 0xb) r2 = dup2(r0, r0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000080)={0x1, 0x0, [{}]}) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0xfffffffffffffffe) 00:16:45 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="26cf", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0xfffffffffffffffe) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x14) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) [ 736.193306] libceph: parse_ips bad ip '::0.Qnullb' 00:16:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0x0, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:45 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB=':H0.Qnullb:\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 736.662739] libceph: parse_ips bad ip ':H0.Qnullb' 00:16:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getcwd(&(0x7f0000000440)=""/229, 0xffffffea) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioprio_set$pid(0x2, r1, 0x9) 00:16:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:47 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) shutdown(r0, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="153f4634418dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0)=0x9, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0xfeffffff}}}}}}, &(0x7f0000000000)) 00:16:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0x0, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:47 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="3a3a302e516e756c45248ff1"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000000), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:47 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x101, 0xc400) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xc4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) r6 = semget(0x2, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) r8 = getegid() getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000400)={{0x5, r7, r8, r9, r10, 0x30, 0x7}, 0x100000000, 0xeb00000000000000, 0x1}) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) [ 738.885333] ceph: device name is missing path (no : separator in ::0.QnulE$ñ) 00:16:48 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0xd6, &(0x7f0000000000)=""/214}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="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", 0x0, 0x0) lseek(r1, 0x4, 0x0) tee(r1, r1, 0x4, 0x5) 00:16:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000003, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) close(r3) dup3(r1, r2, 0x0) 00:16:48 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) r1 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x2, 0x6}, {0xf7, 0x71e9}], r0}, 0x18, 0x0) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0x0, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 739.424708] libceph: parse_ips bad ip '::0.Qnullb' 00:16:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'bcsf0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000008c0)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000c80)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000dc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000022c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000023c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002440)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002480)={@loopback, @multicast1, 0x0}, &(0x7f00000024c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002840)={&(0x7f0000000180)=ANY=[@ANYBLOB="100300004d93569856d1e6b4ad2b3c4933d5741377e78c8c1f90781c14", @ANYRES16=r1, @ANYBLOB="000025bd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="b80002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r7, @ANYBLOB="ec01020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000010000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff00000008000600", @ANYRES32=r9, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040001000080"], 0x310}}, 0x1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000032131920002c00f14a0100000092378d8d41e03600"], 0x20}}, 0x0) r13 = syz_open_dev$usbmon(&(0x7f00000004c0)='/dev/usbmon#\x00', 0xffffffffffffff3e, 0x0) getsockopt$inet_pktinfo(r13, 0x0, 0x8, &(0x7f0000000500)={0x0, @loopback, @multicast2}, &(0x7f0000000540)=0xc) 00:16:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@migrate={0x50, 0x21, 0x21, 0x0, 0x0, {{@in=@local}}}, 0x50}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7fffffff, 0x200000) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) 00:16:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x0, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:50 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x84, 0x8169}, &(0x7f00000005c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000600)={r2, 0x401, 0x5a, "17c77f0e6d8de18b0659f23ce0b28e4c5da8b20f7b622b95b6ff72c6e9ada0071c3f7866c3a392e20426af73bcb8b6a9291429b5604944fac05f971305dd994e74e8fc0a7c8546f65ea7c0cf08bbee291259486ed18a787e531b"}, 0x62) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000240)='em1.\x00', 0x0}, 0x30) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000680)=0x4, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)=r3, 0x4) setreuid(0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000780)={0x28, 0x2, 0x0, {0x4, 0x8, 0x97}}, 0x28) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000006c0)={0x240, 0x401, 0x2, 0x8}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0xfffffffffffffffd, @loopback, 0x4249}}, 0x9, 0x3, 0x4, 0x2, 0x11}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r5, 0x3, 0x6}, 0xc) 00:16:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1ff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)) fcntl$setstatus(r1, 0x4, 0x42400) close(r1) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)) 00:16:50 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) getrandom(&(0x7f0000000040)=""/19, 0x13, 0x0) ioctl$KVM_NMI(r0, 0xae9a) 00:16:50 executing program 4: clone(0x2, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000000000), &(0x7f0000000340)="d97f9279630fa18dfb73bffe73a45fabb9e6cce8768ffef58c40ec1f8ad254b05c2c44bc20b36e208a32d7db61241c77ee9bdf695dfd711edd2e41302a0a4224da0000000000000000bf904038592957d552cdf1b40590b45c296dc699de1b2fda022938391e3426cd4d889c340c303a109f580a1443cead06000000000000006298f09becd175bcab36da87bc712d36d4c5cabebf8990a3c38297214dc713ca1c4ebd46aea22c") r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0xe1e, 0x82101) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)=""/224, 0xe0}], 0x2, &(0x7f0000000340)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x0, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 742.034972] libceph: parse_ips bad ip '::0.Qnullb' 00:16:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000013002901000000030000000007000000af7fb166943acf034d869a52f98e41299b677dcbb18d589f6c61a2ef34af716f9e629c66726bdf85d39bfc632ba19dd486db3ef51d9dc5d1d6e326226672a724a9402e28bc2c5b194e2e37cd09e5d9fb375121d509f7917e2321e3f06eaf6b790b07f98892223f628de867118f76556f34f554713c830e66aee1f0b701f0ce3749ba3e7664ff116a5fafa3626354dac1533f2e910b6df351e5be258be19bfd25eff6b9c24e789918e7cc892ab13d58e510aa04abba09bb8447b2fa9b030a0fe791ef56ed91c21c73a6efb62215d82a23", @ANYRES32=0x0, @ANYBLOB="00004d6ca60e2075a524abf5310445e05a16f8022854ffd29d892d318f6c2364dec482cb7170955dc6f4e7a643ac8d874795841a40d95b10f2c1d0636b27bda6729fb11665c39bf3c6d4be9b10cdef04b5d585bf4e3fc107cd59"], 0x20}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x8001, 0x2) write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x0, 0x1, 0x6}, 0x9}}, 0x18) sendmmsg$alg(r1, &(0x7f0000000140), 0x49249249249271f, 0x4000080) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:16:51 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x200020fd, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="3a3a302e516e756c6c623a002f5ec0dde06c67e17c112e4fa4b6aaa8780d177594dfce9477127c05f7a513a700e20ed2aad2297e887401975e5fee7bc8c61bfa52c7452e9bf58e0911e0f96217137ab742e93872ecaacb341298a83ad2eddc8b7a1b5d2eb02dc326ec06"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) getdents64(r0, &(0x7f0000000340)=""/90, 0x5a) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400100000000003, 0x0, 0x4, 0x17, 0x0, 0x0, 0x0, [@sadb_key={0x16, 0x9, 0x528, 0x0, "e84d5e93bae4b78ee9d3f4c980d0f6ddb6a96289d24c0ded4ae649eae9bb9475c4575505cef4b936a3267b34c1e4f59d8ce35a68d8ceabbf27eab87d9214dc80fce2485ef7839f576fb4b5558ae4edabb65a0bc4a9a04184b18c04d52f0053fb89bf12ed602e1cb38bed76381ecf588229566d4e06a01570788de9ee70180b2a49bdbf14558d0546642ea113e828dfe44019445ee9010bb49b02a2034ed9bd0aacee0207b6"}, @sadb_address={0x3, 0x8, 0x2, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0xf0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff], 0xffffffffffffffff}}}]}, 0x5c}}, 0x40) 00:16:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x0, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="90ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4c000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") 00:16:51 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) 00:16:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x0, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) perf_event_open(&(0x7f0000940000)={0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:16:52 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8200, 0x0) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='btrfs\x00', 0x20, &(0x7f0000000440)='[&wlan1*\x00') r1 = semget(0x0, 0x3, 0x408) semctl$GETVAL(r1, 0x2, 0xc, &(0x7f0000000480)=""/52) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001a80)=""/4096) getegid() ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000200)={0x1, 0x38cb}) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="6995ac9d10aea387f031ca81354794472bac3f99db85c1fe682aa2a480436e712210a5f0cfc1f81e8f", @ANYRES32], 0x2, 0x1) mknod(&(0x7f0000000240)='./file0\x00', 0xf040, 0x51f2) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 743.598035] libceph: parse_ips bad ip '::0.Qnullb' 00:16:54 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x20000) accept$alg(r4, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x0, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:54 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x74c838d2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000080), &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e56ec24a6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000"]}, 0x108) 00:16:54 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") r0 = geteuid() setreuid(r0, r0) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000000)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) ptrace$getsig(0x4202, r1, 0x10000, &(0x7f0000000380)) getegid() ioprio_get$uid(0x3, r2) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f00000003c0)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8dc4, 0x200000) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000240)=0x1) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(r2, r2) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:54 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}, 0x1}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x11, 0x9, 0x7, 0x4, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x90, 0x0, 0x0, 0x70bd28, 0x34ff}]}, 0x20}}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @broadcast}, 0x10) 00:16:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 745.164134] libceph: parse_ips bad ip '::0.Qnullb' 00:16:54 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x800000000040, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) 00:16:54 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") r0 = geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="35fde57e233e4b271c5bfb73807fb12e6c000dde023d9bbe47121850abd4ea24b3f110bd465ca7f679fa91fab4bf6b4bfe7c3a08daed3f4b987f3104de0c61c32da7a75096f54fa54b7906b1a19acf7b7f88767dc9690fc88c1acab153a9c531def12d3841402c470f0b31140b965c6e51df917daa658acd0d22b327f0d57ff64dc118", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(r0, r1) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x0, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:54 executing program 1: execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)='\'+securitysystemselinuxvboxnet1ppp1vmnet0.\x00', &(0x7f00000001c0)='vboxnet0\x00', &(0x7f0000000200)='$*}\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='ramfs\x00', &(0x7f00000002c0)='$\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='ramfs\x00', &(0x7f0000000380)="47504c2173656c667b8b2673656c667573657200"]) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000440)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x28007d) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000480)={0x8, &(0x7f0000000000)=[{0x5, 0x9}, {0x7f, 0x46}, {0x9, 0x4}, {0x1, 0x2632}, {0x1865, 0x1f}, {0x98, 0xfffffffffffff86e}, {0x9}, {0x8, 0x72}]}) sendfile(r0, r0, &(0x7f00000000c0), 0x8) creat(&(0x7f0000000400)='./file0\x00', 0x20) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 745.750170] libceph: parse_ips bad ip '::0.Qnullb' 00:16:54 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r5, 0x5eb3}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xe}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f0000000080)}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x11) getcwd(&(0x7f0000000140)=""/4096, 0x1000) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000080), 0x301) r2 = getpgid(0x0) ptrace$setopts(0x4206, r2, 0xb96, 0x100008) 00:16:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x0, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:55 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000300)="bd2da453f568ada14adacb60ec721e0a9e7cc39eb1705c169cade5940a1a0dd0520eb190340fb75774cd31479cb5747b80681d0811ae946d8183d05eb24436a886e3eeb46833f96ca9292f3ce3c3c2de375bcf606f780516c43dab12ae305922846fba6addcfb294d1bdf5f4491c8a853638b83bd2e62b63bd9005771ad8c6011c6ccc7538104e9590748603954ee414f8ac6486534bd776eb2883f49bc13a84e2d2e0d7787cab3092f657daf3a7df7680b28ff01f836549d461ff5a0e6db30849", 0x111) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 00:16:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:55 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000000c0)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 746.395071] libceph: parse_ips bad ip '::0.Qnullb' 00:16:55 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:16:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x0, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:55 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='\x00', 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$inet6(0xa, 0x2, 0x5, &(0x7f0000000740)) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000680)=[{&(0x7f0000000380)="19aa8de6578373806e6c2f3d18ba7a887a590d5d8dffab7d2bd5149a7e1ae428fd85e3be1c8026f2bafb452c75647e418040ec2cb57f3d9a5a3a8132b7d31b87af346e37c603fc93470c008c1790db5726d902b6d4afdc7d63e1ffff5b5cdf5f38ec9fe0e903", 0x66}, {&(0x7f0000000400)="f1aca46369c14c2fb696761dade8ea290829750846c2dc920e0e63eda038e4df7cda4d1241829242bd671ed7ab303746649c425b829a8e2d5ceb31c16f3b461eac0d5fec45892e033e7260f6d95d51f0998d689205efa1ad8de49ad61f47fd74b2d6507939e8e9902af32546313675916c177a3c8cd5cf0591348b71f280af7b317c74568823c81150671a773f268125b42d47ea082fb968c1a6de8c1f59177ad6ab0f92c8c91b24852623658679a0122bdbcaff63e1103809", 0xb9}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f00000004c0)="bb2ccaf4e30d179d641f67348400a7c4f91877b81799e310183883bbf0a72dfbdcf95e379e4a34e418e0385cf4f1e94e3af26f7a178866b9346afcb801525fe175e3445249005744ee92286f0931aa77db5e119cdfd9c50c6b270f22fb3a0f1ca59acad3971e6d9d5de20dfb", 0x6c}, {&(0x7f0000000540)="fa76a68fd9426b257b7c1da97ad84e2c58be64cef0e556588ac4cbc2673402406b22cfb24f2c3675de37dc2b61c06bfcf4dae5e76e979dfd524271f97be865b1f08070dd0675c96ac408bcda90dda09e916513a5eaf77fbd1e89111d104f087806162a5484c7cd5429cf75fbbe5f12792fcb014e15bda29cc5086da26f3d0fea39857a6a88c8679e70d4f67ab50ba4572e05602c87ab0a2a90334dd751e5a9761733ec2a62a75fb2bf69dee16473dc9f0d96a1272b19b3a13228c948", 0xbc}, {&(0x7f0000000600)="647587c77aa90763bf5c5bcff50176398d4146a9add38d4b8227c9cc4aa0063fbb44d6af3f78249cdecee3e63abfd0e3349c9991e8f1a23225fa7d015ebda689b3330eefc89fd2998acc30819503acb5dd570d68044a849e07c76041d7412e3309258362fff0f5a8638edd681b5c37fb80cfb6290e5a6cf2", 0x78}], 0x6, r1) 00:16:55 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000300)="bd2da453f568ada14adacb60ec721e0a9e7cc39eb1705c169cade5940a1a0dd0520eb190340fb75774cd31479cb5747b80681d0811ae946d8183d05eb24436a886e3eeb46833f96ca9292f3ce3c3c2de375bcf606f780516c43dab12ae305922846fba6addcfb294d1bdf5f4491c8a853638b83bd2e62b63bd9005771ad8c6011c6ccc7538104e9590748603954ee414f8ac6486534bd776eb2883f49bc13a84e2d2e0d7787cab3092f657daf3a7df7680b28ff01f836549d461ff5a0e6db30849", 0x111) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 746.878673] libceph: parse_ips bad ip '::0.Qnullb' 00:16:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x0, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:56 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x1000000000000000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 00:16:58 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x4000) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x204100) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:16:58 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) r3 = geteuid() getgroups(0x2, &(0x7f0000000580)=[0x0, 0xee01]) r5 = getgid() fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x6}, [{0x2, 0x2, r0}, {0x2, 0x4, r1}, {0x2, 0x4, r2}, {0x2, 0x1, r3}], {0x4, 0x4}, [{0x8, 0x4, r4}, {0x8, 0x7, r5}, {0x8, 0x6, r6}, {0x8, 0x6, r7}], {0x10, 0x4}, {0x20, 0x3}}, 0x64, 0x2) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x0, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f2e726f75702e73746174003c23fb574b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x48010, r0, 0x0) personality(0x4000010) select(0x40, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 00:16:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xfffffffffffffffc, &(0x7f00000001c0), 0xa, r3, 0xc}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) [ 749.179115] libceph: parse_ips bad ip '::0.Qnullb' 00:16:58 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @multicast1}, {}, {0x2, 0x0, @remote}, 0x0, 0x0, 0x0, 0x2}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)=0x9) 00:16:58 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8640, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xc0, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5d9fa611}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x695700}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x0, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:58 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000200)=""/4096, 0x1004}], 0x1, 0x0, 0x1f9}}], 0x1, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4002, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x4, 0x3, 'client0\x00', 0x4, "575d2c20d74578bd", "fb86b84e1a38b0eede9ad6241d312a901cd71cde0fb23e81a12a436b8aa13d39", 0x10000, 0x20}) r1 = memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f00000019c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f00000007c0), 0x33d}]) [ 749.672232] libceph: parse_ips bad ip '::0.Qnullb' 00:16:58 executing program 1: r0 = socket$kcm(0x10, 0x102, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="23000000210081ae00060c00000f000000000008000000f28701546fabca1b4e7d06a4", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) r1 = add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r1, &(0x7f0000000300)=""/4096, 0x1000) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3, 0x200000201101004) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001300)=0x7ff) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0x9}, &(0x7f0000000280)=0x20d) clock_getres(0x4, &(0x7f0000001340)) 00:16:58 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29, 0x3) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) socketpair(0x4, 0x0, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 750.120181] libceph: parse_ips bad ip '::0.Qnullb' 00:16:59 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x480) tkill(r0, 0x15) 00:16:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:16:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x0, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:16:59 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="3a3a302e516e75a1b833c900530c3ad6d87d33264b76590bf6c391cd74844a023957022b1fe1e73783a321000000000000000000000000000000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:59 executing program 1: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8640, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xc0, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5d9fa611}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x695700}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:16:59 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = inotify_init() mkdir(&(0x7f0000000100)='./file0\x00', 0x8) r3 = inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) inotify_rm_watch(r2, r3) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 00:16:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x0, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 750.782647] ceph: device name is missing path (no : separator in ::0.Qnu¡¸3É) [ 750.806655] libceph: parse_ips bad ip '::0.Qnullb' 00:17:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") sync_file_range(r0, 0x0, 0x0, 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r1, 0x3, &(0x7f0000000080)={&(0x7f0000000040)=""/5, 0x5}) 00:17:00 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x81, 0x2800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000280)={0x1, 0xffffffffffffffff, 0x228, 'queue0\x00', 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x11) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x2, r3, 0x18, r0}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000400)={'lo\x00', @ifru_addrs=@ethernet}) fcntl$setflags(r0, 0x2, 0x0) 00:17:00 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="7700675c0deaf33eea35159843cabfdc8ebd", @ANYRES64=r0], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={"74797a5f67756e0000000004d400450a"}) setreuid(0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000240)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000001c0)={r2, &(0x7f00000003c0)=""/103}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:00 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) clock_adjtime(0x7, &(0x7f0000000000)={0x2, 0xec, 0x1e2b, 0xeac, 0x0, 0xfffffffffffffff9, 0x3, 0x2, 0x3ff, 0x1, 0x8001, 0x200, 0x0, 0xd287, 0x4, 0x0, 0x8, 0x8e, 0x9, 0x7fffffff, 0x2, 0x1, 0x0, 0x4, 0xa3, 0xe0a}) setpriority(0x4, r0, 0x3) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:17:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x0, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 751.493329] libceph: parse_ips bad ip '::0.Qnullb' 00:17:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x0) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:00 executing program 1: r0 = socket(0x2000000011, 0x3, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0600a2aaaa00fbff7cffffff0806000186dd"], &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80000000, 0x20, 0xffffffffffffff7f, 0x101}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x4, 0x8000, 0x6, r1}, &(0x7f0000000280)=0x10) syslog(0x3, &(0x7f0000000440)=""/4096, 0x1000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000002c0)) set_robust_list(&(0x7f00000003c0)={&(0x7f0000000080)={&(0x7f0000000400)}, 0x0, &(0x7f0000000240)={&(0x7f0000000100)}}, 0xc) sendto$inet6(r0, &(0x7f0000000040), 0xfe69, 0x0, &(0x7f0000000140)={0xa, 0x8100, 0x1, @ipv4={[], [], @multicast2}}, 0x1c) [ 751.586563] QAT: Invalid ioctl [ 751.607645] QAT: Invalid ioctl [ 751.631608] QAT: Invalid ioctl 00:17:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400001, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, [0x1, 0x0, 0x6, 0x1]}) ioctl(r1, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:17:01 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="01000000006e756c6c623700"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) chmod(&(0x7f0000000000)='./file0\x00', 0x80) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x0, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x0) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 752.258534] ceph: device name is missing path (no : separator in ) 00:17:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="db537f1bbeee210e5474b06794e34dbff70b2c97f8a19b92", 0x18}, {&(0x7f0000000100)="1975a0f0b670d71eefa76575bb7e52b06f085f70bd2a8d2744aba61115227c1ff87cceb69c03005d00036bb07ebb66828134b7bde428f44613f20b5f5110c3a4058d55faa60d92bc2f19bc5c86b83024594bacbb1c5b1d0674344be313a50ae018b129c2672f64f4ff79a5ca6017ff9e4e4139529973d2298db82aee6fd57ff0b6712e2e1ff188a5d5901ed4a4d26a94202b6bcf7da25b33bff3448020565118730a6168f1ab9c0cd2a7be680f1a9bca29013c0ebf45cfbd7f8876c56cf5ca67a773713c2d0d52cc42bb539d94a5d1e5ad", 0xd1}, {&(0x7f0000000200)="4ce0828acab42a505bd94ad96db2f06d2b6b096aefdbff5cae03322df6db7a9994fc804245ddcc349106171c8a893d2dd02a89903ddef24c16e331340a7f752f8f16a03ca36f8daa0225dc9ec9e7b0799f6dbf668a560dc591fce76a15a054687ec337725af1488e88c2f3a4010aaeaa249d", 0x72}, {&(0x7f00000002c0)="2aec3c2b625d519e246dbf4a5bd329acd794f61e286b14b14e53de72e99e4d1ef5b99603fe1222bbf6de1a65", 0x2c}, {&(0x7f0000000300)="bcb26297c559f9b98c9a25c7f46887bd140c4416e8149ad2dda4ea44226845450821c05d789c42ccab33df9f91b4780c8397ba82bbd991ea51fc9a4bab56cf04e19bf6e313", 0x45}, {&(0x7f0000000380)="1c6570dc630d64d11c887b426d8a8b2defb2632b6a71b2e0d2ffc200047a2923d88be6c2e004816fa0bf8c033e4d96cac3d712356ba4c8f3469ac7cde60bb96804d92e7fda95bb2a776f4bbc51785a696903a02783402879bf0ec845", 0x5c}, {&(0x7f0000000400)="275c9964312f5cefe8cc73e2c3399851dd88b5c8c2afeac48fb74659a13336ebaeea2ee66c44d2425231481256e3fd735a39e5586ea130c90d0fcdc57e8c043476c63f14232f2179c2d1114c4f7570d8db1d11bf11090010e3f9c506cfb87f1d0b9f8aac7b1d66ff6a482862e0522cdb7bed44570aefe8ae9baf1f6c9627abb8a060329e9051b424755fc57e4715a9c19c1858eefbfbaebaec41cf7acd27c6baaa9c7abe027b104bcf7e866556fa13c4199d55b70a4f3637f18a4777ea18ec7b429e1de0831cf3168770f0d367d26e0e494e", 0xd2}, {&(0x7f0000000500)="643b374062e540ad598f650ad4244003e107b09a9b0503d7e882d5e36940e7edc4a9533ab2ed34b8b11ce002dddb40ce34d50d6b3513ab5cea97e38073b40cb112b1e6ba9cf6c33e9c8471bf907823f42db955b46ab6a308a46564e18a65c77b68c515", 0x63}], 0x8) socket$packet(0x11, 0x3, 0x300) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:17:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x0, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:01 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) accept4$packet(0xffffffffffffff9c, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x80800) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="640040101500000127bddbdf250a8602fd000000", @ANYRES32=r1, @ANYBLOB="14000100ff01000000000000000000000000000108000800080000001400020000000000000000000000ffffac14140f14000600040000001200000005000000000000000800080008000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="3a3a050000040000db825d28f678aced34ce0e004042c791c3c6438cd36bc5141e13091b531b8420b0"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcs\x00', 0x12000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000680)=@assoc_value={0x0, 0x7}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000700)={r3, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x6}}, [0x7, 0x6, 0x100000001, 0x3, 0x400, 0x7, 0x8000, 0xe2d9, 0xfffffffffffffff8, 0x3, 0xffffffffffff8515, 0x100000001, 0x8000, 0x9, 0x7fff]}, &(0x7f0000000800)=0x100) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000600)={0x64, 0x80000001, 0x7, "c5cfc8e8a1e7bf83cec08d76d39013ff2abff05aac9a76c59156a5f14a86443979aced2021b4b6aa8cf63a88a89197acf8d054dd16cf32ee1c7fc81b7e0076bd28bbe3b67cfbf211e9cff05e6c67ffb57c0e8516ea34b52fe9f38ee3eed1945b80bcd1bf"}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000001a40)={"ff0000000021cf00", 0xfffffffffffffffe}) setreuid(r4, r4) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000580)=0x10) 00:17:01 executing program 3: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000000000000004c00000003003e0008000000210c000400000000400000000000000000000035570007efa973c914f53b380002000000000800000300000000"], 0x45) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) write$P9_RREAD(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="92000000750200870000007939d94fbeda73c435e3d44b05a96f94f0bb7c5f0cc76ec14a0cc5f7cad142403c7bacd94a81180867ab180fe09cbb8220db3497bbe9de17b9e39261c1db3a4b4d52aded956efbe302ace0feb2db29efd424bdcc289b5179afadfb73af6d79b5"], 0x6b) execveat(r0, &(0x7f0000000100)='\x00', &(0x7f0000000180)=[&(0x7f0000000080)='selfnodevG:%^trusted:userwlan1!,system[em1(\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000140)='nodev\x00'], &(0x7f0000000000), 0x1100) 00:17:01 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r3, 0x100}, {r4, 0x40}, {r2, 0x4}, {r1, 0x5d1}, {r1, 0xcde0f6d2e7cfd7b7}, {r3, 0x2}], 0x6, &(0x7f0000000080)={r5, r6+30000000}, &(0x7f00000000c0)={0x10001}, 0x8) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:17:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10100, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100), 0x88) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) [ 752.965150] ceph: device name is missing path (no : separator in ::) 00:17:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x0) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x0, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:02 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x40) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000400)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x0, &(0x7f0000000100)}) flock(r1, 0x8) 00:17:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x0, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x3, &(0x7f0000000140)=[r2, r3, r4]) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000180)={0x7a, 0x0, [0x4b564d01, 0x35fd]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:17:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(0xffffffffffffffff, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x81) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="397e45627675915da84a7ff94931ceb18cd4e7276b58608b49296bf68f204e5b160055f67f86ab61ccd7bd9f91783177b956fd84dc6a30d75e0fdd6d2a7c512108b017a7d85a14101f5afc2997ff18df337a54c8d0a4b54fc73df33d93ae7b00b818ac332970733135cdac07df56160b4799cb5879f4bc0769cd4bb4ed084dfcc1e21febd87fb21038d9de6bb8565d2be1501ac5e5788cccc4cdff", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) sched_setattr(r0, &(0x7f00000000c0)={0x30, 0x5, 0x1, 0x55d, 0xffffffffffffffc1, 0x3, 0x5, 0x7}, 0x0) setreuid(r1, r2) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:03 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fstatfs(r0, &(0x7f00000000c0)=""/177) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4, "f93b2ffc"}, &(0x7f0000000080)=0x28) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000200)=""/152) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14, 0x80800) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={r2, @multicast1, @loopback}, 0xc) [ 754.348737] libceph: parse_ips bad ip '::0.Qnullb' 00:17:03 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x280000) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000500)='smaps_rollup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(r1, &(0x7f0000000140)='coredump_filter\x00') 00:17:05 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2, 0x402a01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000140)=""/155) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x319800, 0x0) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, &(0x7f0000000040)) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:17:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001efd, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = add_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ff2f6e200d2ab5979f1e8319e70971a7424d8a5850f01be232dcac5bed628e83d9b5caa8a49792e5278a3a690508a31b65e8d2e0064b288b881022c446564c6300c5423196567c2c431fa87cfef60f4db8e6ac241e8328cbd9f56f3fbe9ed75d40ee685ff685847dcdab9ad418a2a9dc334a8cc7ffeff0cc59adc2914805a9d7675d1c2fcbc994a364b6665c51974a21a38944f0bba394ea534e199e5d598e35790edcd5e0842e62a3dfb5819aca3fa736cbee0e9874a42fa6a7ed5c35cbf2c00f09bc9c4bc4eae253a8f7ae22832b8e9bab2a6b0ddef546cfdabbf11bb28b694baf09d50f5ef1eb3ff119248ac7c9494a1b391d9d1b66572e242ad794", 0xfd, r2) bind$packet(r0, &(0x7f0000000100)={0x11, 0x2, r1, 0x1, 0x1, 0x6, @broadcast}, 0x5c) request_key(&(0x7f0000000540)='asymmetric\x00', &(0x7f0000000580)={'idz'}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffd) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x242081) 00:17:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x0, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:05 executing program 1: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'mime_typeppp0'}], 0xa, "70c32d30a2423d49cfb44106ab3fe6b5df6af814afd614babb0c5976edb59320877929fa018b334e3596a2ae8e98f6ac9c4e32848a135dcd68bab8e4a11023ef8df67bbace1cb7648301849e9569c2a48014b447e0da34e594d85b6d9d0029b82a901421f6e7c62e97588a90394943581de194a8bdcfb64fd461"}, 0x93) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x14801) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r0, r1, 0x80000) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) umount2(&(0x7f0000000000)='./file0\x00', 0x9) ppoll(&(0x7f0000000080)=[{r0, 0x407}, {r0, 0x2000}, {r0, 0x10}, {r0, 0x13c}], 0x4, 0x0, 0x0, 0x110) 00:17:05 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(0xffffffffffffffff, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 756.156031] libceph: parse_ips bad ip '::0.Qnullb' 00:17:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x0, r2, 0x1c, 0x1, @ib={0x1b, 0x100, 0x2, {"0e9fe7b8831beb1fa90f0afc09c891b8"}, 0x400, 0x100000001}}}, 0xa0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffff4b}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0xfea1, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r4, r0}}, 0x18) init_module(&(0x7f00000001c0)='*\x00', 0x2, &(0x7f0000000200)='nbd\x00') sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x24, 0x22, 0x1, 0x3, 0x0, {0x4}, [@nested={0x10, 0x9, [@typed={0xc, 0x0, @binary="496581c3d1"}]}]}, 0x24}}, 0x0) 00:17:05 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") r0 = geteuid() r1 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x1, 0x80) getgroups(0x8, &(0x7f0000000380)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0x0]) write$P9_RGETATTR(r1, &(0x7f00000003c0)={0xa0, 0x19, 0x1, {0x100, {0x40, 0x1, 0x1}, 0x84, r0, r2, 0x80000000, 0x3, 0x7, 0x2, 0x2, 0x3, 0x0, 0x20, 0x8, 0x10000, 0x5477, 0x6, 0x9, 0xf143, 0x2}}, 0xa0) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xffffff70) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000200)="50f073656c696e75786367726f757000", 0x10, 0x2) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x0, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000002a00)={&(0x7f00000001c0), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)=@mpls_newroute={0x1b, 0x18, 0x505}, 0x1c}}, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x14200) [ 756.659797] netlink: 'syz-executor1': attribute type 9 has an invalid length. [ 756.670611] libceph: parse_ips bad ip '::0.Qnullb' 00:17:05 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000000)='ip6gre0\x00') 00:17:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x0, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:08 executing program 4: clone(0x8010200, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000240)="50f27e3d73549b70408dd4afaf0fe81ff4ae18e3cc56645b686345ee97988b6e640652c9b81038d59c787a68e87a5f14aa848fa8ec5e0f22be6965c746f330e6543dd820dfac262b99b4741c2dcfdbd0e2e101d71e1826a20bbf40937aa68d3f6125b00000001b5d3ff3a5e85c9f77010000008b21324c0600000026a8509802f7101136b1234cbe2f0845e21072bb34b2aa3a9fb5d08627434e806122e27094fc2d7f16452af386b2ae6703ab8be94f3782975baafa9cfed93a2882f53aa2c403f8170000000061865aa233a45faf5b7fcc0000000000") r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x891d, &(0x7f0000000380)={'bridge_slave_1\x00', @ifru_ivalue=0xff}) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r3, 0xa, 0x412) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0xfffffffffffffff9, 0x40000) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r1, r2) write$P9_RATTACH(r4, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x40, 0x0, 0x5}}, 0x14) tkill(r0, 0x15) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000340)={r5, 0x2}) 00:17:08 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f00000000c0)="df032783dc5d019de142676dee10e2694c37e067d62f643c481f48a75d7709d6c5", 0x21}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000"], 0x14}}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c83115ab7, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000040)=""/22) 00:17:08 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x20, 0x4c0000) write$FUSE_POLL(r0, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x6, {0x8001}}, 0x18) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f00000003c0), &(0x7f0000000240), &(0x7f0000000400)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000200)=0x4) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x0, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(0xffffffffffffffff, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:08 executing program 1: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x600000, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180), 0x8) [ 759.323049] libceph: parse_ips bad ip '::0.Qnullb' 00:17:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x0, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:08 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700)='/dev/hwrng\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r3) fcntl$setsig(r1, 0xa, 0x12) r6 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xcc, 0x80000) sendmsg$kcm(r6, &(0x7f00000006c0)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="d1ff0dbd5d593015cc48160a4415429e5986b26bceecf2a5cb2ca9d7050cf7760c479ba4f39131deac6055cbd188dc587c9738d1c385b75ef823bb4f477c6e2efbc477263f3050183261a0eb9e58da85c5d46f8761d190a7f40dca439fd66a01ad4607d84c811fe7a18b19c916c0c70c300bcda3c5b9dd3ac1e8f92f7b6cdaed839c04ac5eabd3e68fe8c9df30abec7e1a42949538bafdef72c0336f65ce6a83d5b6864030bfd195617669a49826cf22bdfff15e1b44f775065620ba4af9761d35fe873ed28988aaa814c776343799973056ee62c5875efb59f331e6be5bc9214b53eaaf7ec054636e187cd99e8ecde88e", 0xf1}, {&(0x7f0000000240)="905ca445eca3983fdb9a26f0f86e7bf3c0c01c83a40cd72d6692a090703385685f91fd90c428", 0x26}, {&(0x7f0000000280)="4b940b373407c215d83f48b74f9e30860db515e88f80f6b064463a5fd328087783ec08c54dfbaf9e66393ea284bd9bfb6ea807e26fe0a4f61b013327ca3c821055c703d7dfbdaaef0ec739270bf01ff0334adc35bb81fd9c9bd0730e69ccc28f302726c3aa321361641a9c8e0e51365e4dd256f10e048bbaa3fa034ee314d76c2d89709daf2628b3cb149a79298b5a2a57939296ffea2493c1fd0146c6483bd50ccb6d8b5a72e08445cd55bb6034141bd09398c2cdb2ae82102c136365850afceb0be8fbdf3a6c8794191dd6a941d9ae36703f1411dd1d40b2fcd8e2b6aa874b805828", 0xe3}], 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x300, 0x40040}, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) fcntl$setsig(r1, 0xa, 0x2d) mkdirat$cgroup(r5, &(0x7f0000000740)='syz0\x00', 0x1ff) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) dup2(r1, r2) tkill(r0, 0x15) 00:17:08 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x2000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x3, 0x0, 0x3, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000100)={r1, 0x240000000000}) epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)) readv(r5, &(0x7f0000f46000)=[{&(0x7f0000000180)=""/101, 0x65}], 0x2c9) 00:17:08 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x40, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x100, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8000, 0x80000) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000000c0)={0x2, 0x20}, 0x2) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000200)={r1, r2+30000000}) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) r3 = syz_open_pts(r0, 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) linkat(r4, &(0x7f0000000040)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00', 0x400) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000180)={0x0, 0xfffffffffffffff7, 0x9, 0x1000000101, 0x0, 0x1d4f, 0x4000000000, 0x3, 0xd, 0x3, 0xffffffffffffffdd}) write(r3, &(0x7f0000000240), 0x0) [ 760.011803] libceph: parse_ips bad ip '::0.Qnullb' 00:17:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x0, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:09 executing program 1: eventfd2(0x0, 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000fe0ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000deb000)) 00:17:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:09 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) times(&(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101000, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0xd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x1f0, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, &(0x7f0000000240), &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}, 0x31e) getsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000040), &(0x7f0000000100)=0x4) 00:17:09 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x10000) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x9, 0xfffffffffffffffb}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r2, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r3, &(0x7f0000000000)={&(0x7f0000893ff8)=@sco, 0x80, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) 00:17:09 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x42070200, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x0, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) r0 = msgget(0x2, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) msgrcv(r0, &(0x7f0000000140)={0x0, ""/45}, 0x35, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000bc000000000000000700000090ffffff000000000000009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 00:17:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000000000002}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[]}}, 0x0) r1 = memfd_create(&(0x7f0000000000)='vboxnet0proc\x00', 0x2) socket$vsock_stream(0x28, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x8843, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x6, @remote, 0x2}, @in6={0xa, 0x4e23, 0x5, @local, 0x2}}}, 0x118) [ 760.721757] kernel msg: ebtables bug: please report to author: Wrong len argument [ 760.753358] libceph: parse_ips bad ip '::0.Qnullb' 00:17:10 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r0) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="1640e6ddaccdc9a4fe237ba227b979688d96dcbbb93b9ac7d8bfd7c63650dea19f14266b3e080000000000000002a09e", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000003c0)={@loopback, @multicast1}, 0x8) r3 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@sco, &(0x7f0000000000)=0x80, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x8, 0x4) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x0, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:10 executing program 1: lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=@random={'user.', "2f2f73656c696e757800000101"}, &(0x7f0000000080)="2f2f73656c696e757800000101", 0xd, 0x0) 00:17:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, &(0x7f0000000140)}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) [ 761.408068] libceph: parse_ips bad ip '::0.Qnullb' 00:17:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 761.502822] binder: 18746:18749 Acquire 1 refcount change on invalid ref 3 ret -22 [ 761.593793] binder: 18746:18749 Acquire 1 refcount change on invalid ref 3 ret -22 00:17:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55b0906151", 0x2b7) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/44, 0xf}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2) 00:17:10 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00c0786eb5b6183be118ed8f6d0a651542ac24", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10031, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x214000, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x7ff, &(0x7f0000000080)=0x1) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000001000/0x4000)=nil, 0x4000}, &(0x7f0000005980)=0x10) 00:17:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x0, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:11 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r3, 0x5421, &(0x7f00005ebff8)=0xbf7fffffffd) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) prctl$getreaper(0x0, &(0x7f0000000180)) r5 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$inet_dccp_int(r5, 0x21, 0x6, &(0x7f0000000140)=0x2, 0x4) dup2(r1, r2) fcntl$setsig(r3, 0xa, 0x1c) tkill(r0, 0x15) 00:17:11 executing program 1: prctl$seccomp(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) get_robust_list(0x0, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000300)=0x18) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000540), &(0x7f0000000580)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x400000, 0x0) r3 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in=@broadcast, @in=@rand_addr, 0x4e22, 0x0, 0x4e20, 0x7, 0x2, 0x20, 0xa0}, {0x268, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, {}, 0x0, 0x6e6bb0, 0x3}, {{@in, 0x0, 0x6c}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x5, 0xfb4}}, 0xe8) getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000007c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000580), 0x0, &(0x7f00000008c0)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x40000) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r4 = getpid() setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000500), 0x1) pipe2(&(0x7f0000000080), 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000004c0)) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000480)) capset(&(0x7f00000001c0)={0x0, r4}, &(0x7f0000000300)={0x2, 0x8, 0x0, 0x3f}) r5 = getuid() sendfile(r3, r2, &(0x7f0000000240), 0x2000005) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0x78, 0x0, 0x7, {0x81, 0x8001, 0x0, {0x3, 0xd01a, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, r5, 0x0, 0x8, 0x54892704}}}, 0x78) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) [ 762.063963] libceph: parse_ips bad ip '::0.Qnullb' 00:17:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000000c0)=0x800020000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="9f6b27f4"], 0x4) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f7f"], 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x220900, 0x10) openat(r4, &(0x7f0000000040)='./file0\x00', 0xc1, 0x2) 00:17:11 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000200)="50f073656c696e75786367726f757000"], &(0x7f0000000500)=[&(0x7f0000000380)='wlan0proc)user\x00', &(0x7f00000003c0)='keyring]&%^#-vmnet0[\\Jcpuset\x00', &(0x7f0000000400)='-em1^ppp1', &(0x7f0000000440)='::0.Qnullb:\x00', &(0x7f0000000480)="5e2d5e242376626f786e65743076626f786e657430f7262d21295c267d2700", &(0x7f00000004c0)='vmnet1\x00']) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000580)='vboxnet0(\x00', &(0x7f00000005c0)='-em1^ppp1', &(0x7f0000000600)='vmnet1\x00'], &(0x7f00000007c0)=[&(0x7f0000000680)='\x00', &(0x7f00000006c0)="73656c662a2129f86b657972696e6747504c00", &(0x7f0000000700)='\x00', &(0x7f0000000740)='system.posix_acl_access\x00', &(0x7f0000000780)='wlan0proc)user\x00']) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x0, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 762.758962] libceph: parse_ips bad ip '::0.Qnullb' 00:17:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:12 executing program 3: unshare(0x2000400) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x2000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/147) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)) 00:17:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x0, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:12 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="d3e20f979e18452fdae6e36c039a860c1dd4d60570232aaea58417c49a69992993353031ffd9ad04cb2ce57e00b9263b3f414ae240075832a098cfe5204090a86b24e5abfd06cd09a03fc999d2b7197c4df963abc44ca9b6276270e76281f9c90d575db660ff7c56c3e0e09f55e94d8d8dac8ca7e38b548d66192a9c1c0314acaaebb58c00e771d93d6380", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 763.328444] libceph: parse_ips bad ip '::0.Qnullb' 00:17:12 executing program 3: socketpair(0x1, 0x4, 0x7fffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x9, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000000), 0x4) 00:17:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x0, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:12 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000000)='system.posix_acl_access\x00') r0 = geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000b40)=0x1) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() getresgid(&(0x7f0000000cc0)=0x0, &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="bb1f17ee3b3edc0dcc2e7b853a761ca2f0c2a1622bb09023152e7efe4086b305ad5367a47a6f94d8b153092d54f96ef9f74325ad43fba153feee82b7ff003a9b44152679389d86f95866aca4bb8fc96a59c40077ed1560d58eaa02d69ebda77832b9707f8d7df7714b620f0ddd4d45ba273b658fbd71a731a4cfae6c405a646426d74428cae2214c679aef4cd458f94eb9ecba4f7cc6b4be48b38faf427db8dddd8313b623016e823829854ce0dff327d80b395f119e8b9d678ad94ecdbdfc946c1c8ad250", @ANYRES32], 0x2, 0x0) getegid() r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x28000, 0x0) r7 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x8, 0x400) r8 = socket$nl_crypto(0x10, 0x3, 0x15) r9 = socket$bt_hidp(0x1f, 0x3, 0x6) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/sequencer2\x00', 0x2000, 0x0) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r13 = socket$key(0xf, 0x3, 0x2) r14 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/urandom\x00', 0x200000, 0x0) r15 = socket$key(0xf, 0x3, 0x2) r16 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/exec\x00', 0x2, 0x0) r17 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001040)='/dev/vhost-vsock\x00', 0x2, 0x0) r18 = accept$inet(0xffffffffffffff9c, &(0x7f0000001080)={0x2, 0x0, @local}, &(0x7f00000010c0)=0x10) r19 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer\x00', 0x103040, 0x0) r20 = socket$nl_crypto(0x10, 0x3, 0x15) r21 = syz_open_dev$dri(&(0x7f0000001140)='/dev/dri/card#\x00', 0x4, 0x80000) sendmsg$netlink(r6, &(0x7f0000001240)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)=[{&(0x7f00000002c0)={0x14, 0x3f, 0x20, 0x70bd2a, 0x6, "", [@typed={0x4, 0x8c}]}, 0x14}, {&(0x7f0000001a80)={0x13e8, 0x1b, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x4, 0x57}, @generic="32b17e1d3e9bc51a9489c46fcff1dd6403d7a1b28672beda1bd023", @nested={0xfc, 0x34, [@typed={0x8, 0x65, @ipv4=@multicast2}, @typed={0xc, 0x44, @u64=0x3}, @generic="cf583156d6eb831c26ce6f8f0400c6200bd1f9696c1bce1fe1537a4bb3d01683b4b2a3213339dc53d54bc93e3ca886df9c7b1c11a19c8e36e4e90a7f6f476c65442b105e238dca5c8dcce854d0f025c980d82d05a7034ca61f5faa9828373c8d2a442aacba336f78bbf7305a2afa82b35fe352e5ee735c42af7eac1dce0d5e7948c59ac57bd3e2e0ea4d10ec3344d1e9f7b86f0c318b14638c21cfad97f8af23a62201c3230893e13b087a0a5e194a28602e710e73bed8", @generic="e0f5de515051c4b0742c1e590ffd9f99713837387089a0148a172bc2f92b8e84ed4ec5e6bc063e399182a3"]}, @typed={0x14, 0xd, @ipv6=@loopback}, @typed={0x14, 0x34, @ipv6=@loopback}, @typed={0xc, 0xf, @u64=0x4a}, @generic="e363e2ad859ab299d91bbfcb4523bfdc1575885b4a537d8cd5c919acf91c5e4cd7bf31fd5f69f417f136ebcda78019bc47fc24d5779bba246b3ae3a6eaef694b337856260a4298c4dd74c6bca0f5d158c3c39e48822116d6825a9cddafe139a3199d08d96fe2511c7a", @nested={0x1220, 0x38, [@typed={0x8, 0x6, @fd=r7}, @typed={0x8, 0x1, @u32=0x9}, @typed={0x30, 0x5e, @binary="56a2e8daf050366d07567fe2f8fa71b70830b0e32d04dd14eeef57d7e5f0caf8861f433bcef9516bb5c7"}, @generic="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", @generic="3a4335940375c663e8cb643388bd03424f486773ce6d848478aafb8a53e0aa971578d664aefde5447c7c13219f551f040e", @generic="39103aca71565840271d1c5d2fedbb111671ba6740a565707f23dd4a5498e5695cbdffcb0ee0dad9b2c887672a774c15afe0ba4bdd569e6dc89792da27386b683f9b43e2ec82663e2346b2f59575186a640a9c05fdb0d0a05ed432699d024d7f5e54d500d50b904bc46dab5c2cc38028600cff08fded6a835906e65e3dc023d5b49ed169145bb7861e662d9fd42b4c279a271385b3f5976609ffa23feb22091b872c55eee3e84e46f636cbb05d58", @generic="cc0394c49881141de6e9527a4b7ac915ea93feb2617b121bbcfd8f90b10e8a516aa126f07be373e25d59fd63b97d1a898f41b5c8f42dc3cbc12d", @generic="edd175d33b0c5b6cff347cc8e12519e05f77d98153cb72119adb85c16a915e6b9ca2139287392209225844cbf3f50e383157ee2947907cc4eecfe6503daef63a94010e3587ca92ac22a6ecd39ce117d4e0d47ee8b502564cb1369ff34d7c54546bf6d38e326abbf9c279afa1f9ff1ea376f19e208bcc61e32de219dc9ed5040ffeaa58870b53c7bc66b33b2db79a13137e98e792706b5f3ce827edf78b57ba26b7681a840641eba15abfefb16ab2021f0aac97a2da92888646ecb4081cfbe8b9e15e28"]}]}, 0x13e8}, {&(0x7f0000000580)={0x208, 0x2c, 0x508, 0x70bd26, 0x25dfdbfe, "", [@generic="85d9df719ecbf805949235c58e1b8d3243a3a95967fef6466a2b1fdb7795f66172e8ce7034be3a50a8d5021f5ef43c50f15a578326eb7a8e3efbe92ef5712c3924cd61d1ac461d23e353e28185b4a4aa6a0b46f1ab03fd2d3844cd35ccb58c305be1f8778cea938df75dad636f92baff748e377587966ab259ed398ed1642c317e6a6d518bbef75bf09002a5070d58a3c01339ea96cbff28ecdab58c625888cb71c754ad05f726f36ee9795a6757521a33a296197cc395e11160282e78a1dd4ec2fea9b1bf7fd2b28f258ef7035d66f2c452df7e05a1a6ff271a8a6fb634a7d8435827a4c0e772b9fd36383fb3fdce3b9d2091c31d7633", @nested={0xe0, 0x39, [@generic="f72ffbb7c8b45181abb214926865533c60fdd8cb6acd31e0b9d0eda2a14028da09b259093ee2697347a607cc84d949c02fc5a7006f98a9dd0b3cec628800e8736e756a0f3df5d9b8c4fe188970df9a9fdf7c8daad5add5f1de33eb26da95264e7e284f040061e6b65f56c40d6a542488a4c339ba4a2651e42f2337ab9f156c74c2b33e68bb8392b965120f252f9f421945f212f55056c78d3216378e477bace36c7db68ac00e611e31a4b6aae9048f60963bfe43a61d2d02ea8790ee22e5c7554982ec18a4acb6f235a7162da4349a733448a50cfc", @typed={0x4, 0xb}]}, @typed={0x20, 0x42, @str='bdevbdev%GPLwlan0vboxnet0\x00'}]}, 0x208}, {&(0x7f00000007c0)={0x248, 0x12, 0x4, 0x70bd26, 0x25dfdbfb, "", [@nested={0x108, 0x45, [@typed={0x8, 0x70, @pid=r1}, @typed={0x8, 0x5f, @ipv4=@local}, @typed={0x8, 0x73, @uid=r0}, @typed={0x14, 0x84, @ipv6=@local}, @generic="2f85fd6880f5b87a107d4786b06a3f0bb76c4e79591d38cfa7e627454b6b8d0591d6ecbb6edd3df3f9d982730bf3fc53048e1773fb906fc4f8e89eb9f6fa7f7be75b843c5f536ca4ebf2382f1934aaa90eb7cadc39b286f3d41781b3b7f9522e53fe5942da45e588d7232691d09d7bdb665a1a4aee9773fecbd01857cbfe9aef80070c435f229f08c4bf079d68edb709a1236fded988352571625a1e278da0582a6e81170c71d0101e4038a7522b5f425648e819d985388d1d509086b622a778ee82ca03cfe390f759bc64f9399ea86900ed249d0d98a6"]}, @generic="f1", @generic="8676ab43851aa07982ee1287a52d2f025dd48b856d42a8fc36b10a8e71d0f2c0d2f16ff2759913f2c96bed62f6a796f21d778a431865cdd4311878e849b253e14bf9dba50ff0ba81f8428101ef6627b5dfd4ac99a37094b89e6cb9a0d9f20bb4d10890f1f0a074e303de3962f8dcaed0b3447affe4f41bf9f34b20789d0eddee2688ddfadea5715f00041c231c82159eafb185180bc497ffce8a4b10dd71b82182aafe9d05", @typed={0x8, 0x5a, @ipv4=@remote}, @generic="902c", @typed={0x80, 0xf, @binary="ea20d8b2b759866ba1a328ec1a2d88abd2fce0186a1b9cd2664b1c83dec4802e4acae7370bfea0da8110096935336c14dc1f05b06e376a57c440fec96020409ac4cb8523ebbff91f72754bff911be542929e3a8585235ce9bd2f93e762a3f8fe3e655244bfd7a0000a7efb6381174281dc1a9573962b629ac74f"}]}, 0x248}, {&(0x7f0000002e80)={0x10f0, 0x13, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="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", @typed={0x8, 0x59, @ipv4=@multicast2}, @nested={0xd8, 0x58, [@typed={0x8, 0x71, @fd=r8}, @typed={0xc, 0x41, @u64=0x9}, @typed={0x8, 0x4a, @str='\x00'}, @typed={0x14, 0x44, @ipv6=@mcast2}, @generic="c34c654fca62c74bec66dfa8b602f98bb64994832aaf7cea04da3d63b38b02c6ce8b16bdc518453eefe2c0b858e980c4b6a8bf92dddec1c1c9518b3be5640d675651ea795aeb323d9e7de94caf355f99095b9a4242921093594c6071d59cf6c5af62f16e2e82917f425ccd3ef0b8bda17e17bfc0b87c84b55e191889e50e496ea24fcab63f31f02bb02457d0cfcdb334760a7593", @typed={0x8, 0x74, @u32=0x4}, @typed={0x8, 0x31, @uid=r3}]}]}, 0x10f0}, {&(0x7f0000000e40)={0x1e0, 0x36, 0x300, 0x70bd2a, 0x25dfdbfd, "", [@nested={0xe8, 0x8a, [@generic="fbece8c6eb03a25024b60faba2c67c1d8ec403e0006ffd9d3e5ea08f7f54e9816c7ca6454d3c6220402fc36afb9e325fe4975b8e45cd7bf2958fe4193e51b64d33845efc6bb475bbe7f0b57d6b34745d2ed8afd5e7fa2cfad61b26212e4514cd02deddaad29e05ab5d7b455d57f61a3d52cca1b2d9364e4028e154b572fb88b096517b1637268a2c3b0a1bf1e2b5c7e87203", @typed={0x10, 0xfffffffffffffc01, @binary="bffbe13ba1a1dd46cdec"}, @generic="609600663063512b682d", @generic="a9295c7158f92059814b1486fa38c01bbd3dc3be0b84010f0eb4e541d86679d00a6ed2b9fb6bc3e5a45ad427ae875858b455ef216805"]}, @generic="49a1f7c4d2eb904d0a8c8c9f34cf49c758190fe26438f2740c142294811713e905ae6fd4b2162e5cea37e34e444d0191bff2fec19ae0578149a7ac4c42efd9d09b040ab295378b35386dfcd1e594cff39f846b483d0235d65433d082ae524a2e8f86190218722cd9", @generic="ed6b4ad2b5f49159e36b179feef9e5df81cf66effdfeccb4b1db279b1fdf24ee302127d425e2047446a47fd4c3d49cfd3023cc3a1f15e3859e9e1b9231b2ec4d4155dd227f30b1131f3a297b1efe32aaef6162a97ca5f249616f23abaee2125cebd2e6ca3ecaa87d52a66ea769e7c8da5ba5a956b81b556f", @typed={0x8, 0x5f, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}]}, 0x1e0}, {&(0x7f0000000480)={0x28, 0x11, 0x408, 0x6, 0x25dfdbfc, "", [@typed={0x8, 0x8f, @uid=r3}, @typed={0x8, 0x80, @pid=r1}, @typed={0x8, 0x113, @u32=0x40000000}]}, 0x28}], 0x7, &(0x7f0000001180)=[@rights={0x18, 0x1, 0x1, [r9, r10]}, @cred={0x20, 0x1, 0x2, r1, r0, r4}, @cred={0x20, 0x1, 0x2, r1, r2, r5}, @rights={0x38, 0x1, 0x1, [r11, r12, r13, r14, r15, r16, r17, r18, r19]}, @rights={0x18, 0x1, 0x1, [r20, r21]}], 0xa8, 0x40}, 0x40) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) uselib(&(0x7f0000000040)='./file0\x00') setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)) [ 763.759410] ceph: device name is missing path (no : separator in /dev/md0) 00:17:14 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e23, 0x8, @loopback, 0xffffffff}}}, 0x84) dup2(r1, r2) tkill(r0, 0x15) 00:17:14 executing program 1: prctl$seccomp(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) get_robust_list(0x0, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000300)=0x18) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000540), &(0x7f0000000580)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x400000, 0x0) r3 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in=@broadcast, @in=@rand_addr, 0x4e22, 0x0, 0x4e20, 0x7, 0x2, 0x20, 0xa0}, {0x268, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, {}, 0x0, 0x6e6bb0, 0x3}, {{@in, 0x0, 0x6c}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x5, 0xfb4}}, 0xe8) getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000007c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000580), 0x0, &(0x7f00000008c0)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x40000) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r4 = getpid() setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000500), 0x1) pipe2(&(0x7f0000000080), 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000004c0)) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000480)) capset(&(0x7f00000001c0)={0x0, r4}, &(0x7f0000000300)={0x2, 0x8, 0x0, 0x3f}) r5 = getuid() sendfile(r3, r2, &(0x7f0000000240), 0x2000005) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0x78, 0x0, 0x7, {0x81, 0x8001, 0x0, {0x3, 0xd01a, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, r5, 0x0, 0x8, 0x54892704}}}, 0x78) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) 00:17:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x10000000, 0x0) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)) connect$l2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x0, 0x4, {0xa, 0x4e23, 0x8, @loopback, 0x54e4}}}, 0x32) listen(r1, 0x0) sendto$inet(r1, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) close(r2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x4) getsockopt(r2, 0x0, 0x1aea, &(0x7f0000000200)=""/146, &(0x7f00000002c0)=0x92) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000180)={0x3b, &(0x7f0000000140)="5d0462b5a3ea44a7fe70291aa9744e55b34dd7d6aa8cd1a45cf377e221db1a4b160f5c05aaa89b2363a090f92ef41fb5ef55a868c6a8e547015f6d"}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8) 00:17:14 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="3ac3818edce3ad963a302e51"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x393ca46d, 0x4000) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2d) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10200, 0x1) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0)) 00:17:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:14 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x2, 0x4, 0x4, 0xebdd}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) [ 766.073388] ceph: device name is missing path (no : separator in :ÃŽÜã­–:0.Q) 00:17:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:15 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x5, 0xc0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000380)={0x6, [0x14d, 0x8000000000000, 0x9, 0x100, 0x4, 0x100]}, 0x10) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() r1 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@l2, &(0x7f0000000000)=0x80) fcntl$getflags(r1, 0x0) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="bace8a", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 766.583582] libceph: parse_ips bad ip '::0.Qnullb' 00:17:15 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 767.027816] libceph: parse_ips bad ip '::0.Qnullb' 00:17:16 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) dup2(r1, r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newneigh={0x2c, 0x1c, 0x814, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x0, r4, 0x2, 0x1, 0xb}, [@NDA_MASTER={0x8, 0x9, 0x7}, @NDA_SRC_VNI={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) tkill(r0, 0x15) 00:17:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:17 executing program 1: unshare(0x400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000100)) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x805) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) pselect6(0x40, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000600)={0x7ff}, &(0x7f0000000680), &(0x7f0000000700)={&(0x7f00000006c0), 0x8}) 00:17:17 executing program 3: setitimer(0x0, &(0x7f0000000080), 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x38, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0x9, 0x0, &(0x7f0000000040)) 00:17:17 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/7, 0x7}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000580)=""/218, 0xda}], 0x3, 0x0, 0x0, 0x6}, 0x81}], 0x1, 0x0, &(0x7f0000000700)={0x77359400}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x7) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0xf4, "fc6967bdcdea49667ac40f7c9624f527eb96de17d878f432a2fb1cd6123e5372d3a8bb9bf0b2e3aa8d4825556009422f44b61cf06b6119c0d492c075251aa10eb746b9535b81a03d80a307d597bcccf07ea08ff97277d410706a7ca4a9caa76e8980ce604ef62600b6f70e69957e56cd99f82bd086583936be5a580eb73bfe1064f6ad9809699155c45bb507cdfe500ff8c6378fa6c39157f2f6b15b2b5b7a72195a434e74e455f9045b5c038d5bdd1ba70f0dc814d47e7e3ff70a5da25e3632c79e6b323fcda99f309e1b3f8e819ecb715d495a40815a1612e5ad8f648016d88a3266e2b56bfa52e09891034e0dc9adba242eec"}, &(0x7f00000000c0)=0xfc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r3, 0xffffffffffffff18, &(0x7f0000000200)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1f}, 0x7}]}, &(0x7f0000000480)=0x10) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x0, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:17 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x0, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:17 executing program 1: r0 = socket(0x40000000015, 0x40000000000005, 0x0) r1 = socket$inet6(0xa, 0x1, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) [ 768.872780] libceph: parse_ips bad ip '::0.Qnullb' 00:17:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f691c0264192f42be07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000001001d61493a63e90f652489f776680000000000000400000000100000"], 0x24, 0xfffffffffffffffc) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_access\x00') setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 00:17:18 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000200), &(0x7f00000000c0)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="6d06000000dec26e661f2885e792a1", @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x4000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) [ 769.410588] libceph: parse_ips bad ip '::0.Qnullb' 00:17:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x18}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000feb000)=0xa90d, 0x4) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000fbef6d)=""/185, 0xb9, 0x1000022, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00008a8000)={0xa, 0x4e23, 0x800000000000000}, 0x366) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 00:17:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x0, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:19 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000140)={@broadcast, @rand_addr}, &(0x7f0000000180)=0xc) fcntl$setsig(r1, 0xa, 0x12) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000040)={{0x81, 0xbf}, {0x40, 0x4}, 0x10000, 0x7, 0x400}) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f00000001c0)=""/173) accept4$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x28b, 0x7fffe) 00:17:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x7fff, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000340)=0xff92, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$alg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="cc", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000040)={'syz0'}, 0x34000) 00:17:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x0) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:19 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000380)="69681ad5f4035610b056f8d0b88b15523c87a5b85eb9f1c739711743b965a86fd044f08abe5e3e1e0df947b757cf2f02b126a8ab0ef413db4e5bc708835db8b580b0c756db3e0b720ce3abd8349305b0385f840b1139fd246a0dd130de6255f7be30fbb726f638034f17eb71b1920d2164645b3409a74ee520583ff3d47d7a8d559c645da696b37b44748494805c569264956071b44a4a01e008753f1ef51442591b33da94811d6d1da65759d99eb18f8692bd13e1b6ecdc44", 0xb9) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'syzkaller1\x00'}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 770.368314] libceph: parse_ips bad ip '::0.Qnullb' [ 770.369450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 00:17:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x0, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 770.635288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 00:17:19 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::0.Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") geteuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) getegid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xc00000, 0x20140) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000200)={0x5, 0x2, [{0x2f4, 0x0, 0x5}, {0x5, 0x0, 0x1}, {0x3, 0x0, 0x2}, {0x400, 0x0, 0x4}, {0x30, 0x0, 0x74}]}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000380)=""/131) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400000, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32], 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001a40)={'syz_tun\x00'}) setreuid(0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 00:17:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x0, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xd0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400000, 0x0) openat(r4, &(0x7f00000000c0)='.\x00', 0x141000, 0x10) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 770.930847] libceph: parse_ips bad ip '::0.Qnullb' 00:17:20 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0xfffffffffffffd38, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000000)={{0x21f900000, 0x401, 0x5, 0x7, 0x7, 0x80}, 0x41, 0x9, 0x5, 0xde, 0x1, "1815d86e5ec1d570cce3e73a9cec3a86aa03211992dfab6e975e1fd196ca4e9884a8012f38a5b57d2f017005c71610396bb6e05eab1cf67b064fd47374710946e32ca44ee996d517726c29147e1dc46d03c11178ee9865760d1f79ad8f0890466cc3c286c94ed7cfc4aa38e1f0da31bbcb70eb13f1af7c950e223e666cfdb426"}) dup2(r1, r2) tkill(r0, 0x15) 00:17:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x0, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:20 executing program 1: socketpair(0x2000800000001, 0x40000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000280)) write$cgroup_int(r1, &(0x7f00000000c0), 0xffffff19) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) close(r0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00000700000003000000000000000000000000000000ff0f00000000000001000000000000000000000000000000000000000000000000000000000000000100000008000000000000000000000000000100000000000500000000000000975b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008da567ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f997ef700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) 00:17:20 executing program 0: setrlimit(0x400000000c, &(0x7f0000000040)={0x5, 0x2}) r0 = socket$inet6(0xa, 0x0, 0x200) pselect6(0x40, &(0x7f0000000140)={0x10b7, 0xfffffffffffffff9, 0x2, 0x453, 0x9, 0x1, 0xffff, 0xffff}, &(0x7f0000000180)={0x100, 0x9, 0x80000001, 0x101, 0x8, 0x8, 0x2, 0xea}, &(0x7f00000001c0)={0x800, 0x8, 0x1, 0x4a0f, 0x0, 0x9, 0x1, 0x5}, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000240)={0x78}, 0x8}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000003f, 0x5, 0x19}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000100)=0x60) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 00:17:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x0) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x0, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200)=0xfffffffffffffef1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[]}}, 0x200088c0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x62acbb44, 0x2000) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x1) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 00:17:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x5, 0x8000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) timer_create(0x6, &(0x7f0000000000)={0x0, 0x32, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_gettime(r1, &(0x7f00000000c0)) 00:17:21 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) getpeername(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x80) recvfrom$unix(r1, &(0x7f0000000580)=""/247, 0xf7, 0x10021, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r2 = fcntl$getown(r0, 0x9) getpgrp(r2) 00:17:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x0, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 772.129893] input: syz1 as /devices/virtual/input/input13 [ 772.289061] input: syz1 as /devices/virtual/input/input14 00:17:21 executing program 0: r0 = socket(0x10, 0xfffffffffffffffe, 0x10) write(r0, &(0x7f0000000000)="1f0000000102ff05fd4354c007f37ffff20501000800010004000100ffdf00", 0x1f) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/80, 0x50}], 0x1, &(0x7f0000000180)=""/100, 0x64, 0x6}, 0x10100) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000240)={@mcast2, r1}, 0x14) 00:17:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x0, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:23 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0x2, 0x4) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r5 = dup2(r1, r2) tkill(r0, 0x15) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) 00:17:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x0) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) r5 = msgget(0x0, 0x86) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000180)=""/105) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r4, 0x9, 0x3}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0f85403, &(0x7f0000000140)={0x3}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000240)={0x1, r4}) dup3(r2, r3, 0x0) dup3(r2, r1, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000200)={0x51b, 0x5, 0x3}) 00:17:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1e}, 0x55b1}, 0x1c) r1 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="ccf96200", 0x4, 0x0, &(0x7f0000000040), 0x1c) 00:17:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept(r0, 0x0, &(0x7f00000000c0)) close(r0) connect$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e) 00:17:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x0, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x0, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:23 executing program 1: r0 = socket$inet(0x2, 0x4020000000000106, 0x8000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x680e40, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x3) getsockopt$sock_buf(r0, 0x1, 0x37, 0xfffffffffffffffe, &(0x7f0000000000)=0xcc44fddd54be8e7d) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) 00:17:23 executing program 3: r0 = timerfd_create(0x7, 0x80800) dup3(r0, r0, 0x80000) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/148, 0xfffffffffffffe5e}], 0x1, 0x0) getpid() gettid() r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000003c0)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80, 0x1) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) syz_open_pts(r0, 0x400000) 00:17:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in6, 0x4e24, 0x9, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0xbf, r2, r3}, {0x101, 0x40, 0x10001, 0xfff, 0x10001, 0x1c, 0x6, 0x10001}, {0x2, 0x80, 0x5, 0x400}, 0x6, 0x6e6bba, 0x2, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d5}, 0x2, @in6=@ipv4={[], [], @broadcast}, 0x3503, 0x0, 0x3, 0x12, 0x8, 0x8, 0xdd1}}, 0xe8) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000000)={0x2, 0x200, 0x100000001, 0x203}) fcntl$setstatus(r0, 0x4, 0x443fc) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) 00:17:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x400000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x2, 0xffffffffffffff9d) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)) 00:17:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x0, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:26 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000000000), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/207, 0xcf) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r5 = semget$private(0x0, 0x7, 0x8) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000240)) r7 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) r9 = getegid() semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000003c0)={{0x4, r6, r7, r8, r9, 0x180, 0xd04}, 0xfff, 0x100, 0x1}) dup2(r1, r2) tkill(r0, 0x15) 00:17:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000040)) sendfile(r1, r2, &(0x7f00000002c0), 0x3f) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000003a40)) sendmsg$alg(r1, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000000b00), 0x0, &(0x7f00000039c0)}, 0x8000) getgroups(0x0, &(0x7f0000000780)) 00:17:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(0xffffffffffffffff, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:17:26 executing program 0: r0 = epoll_create1(0xfffffffffffffffc) r1 = epoll_create1(0x0) close(r0) unshare(0x8000400) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xff, 0x240) pkey_alloc(0x0, 0x2) memfd_create(&(0x7f0000000040)='vboxnet0vmnet0security}\'wlan1\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 00:17:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x40040) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000002c0)="262c132688051ad44454ec3a01ebb3675e4768aa91c7f1719eee850110085c99df1b1fa94817213579b93b00914487b944aa007f92bbbac500de372e14d8a560d949354af1fb4fc8495d65237ceb5a7b87f191a787434ecadf5ca8defd82721920c226a6fe5c730f8b77638f400310e25c429682340d67462370366d2c7541f78e6a6e") getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @empty, 0x5}}, [0x1, 0x7fff, 0x2, 0xfff, 0x1, 0xf68, 0x6, 0x0, 0x8, 0xbf, 0x100, 0x3, 0xa03, 0x4f, 0x80]}, &(0x7f00000004c0)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4832}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000001c0)={0x1, 0x3, {0xffffffffffffffff, 0x0, 0x7, 0x2, 0xfff}}) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000180)=0x3c, 0x4) ioctl(r1, 0x8912, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sync_file_range(r0, 0x4e, 0x50, 0x4) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={{r4, r5/1000+30000}}) ioctl(r0, 0x5, &(0x7f0000000000)="d76e98fe2d4054ad89a5e5c445bb5632022cb12808d0d3d2d43b610040bb4cdc7487f34e050bf7cae758aaaed340a02f11c49d14d8cd66a2f1c10b171ada20318923672bb2dc8836d7a549e95e6987890f4d1fff38c44131016815397f992270ebc88a669922454b99382b6a8974099b0a78621e34695199b11a9600e32461ee13c569e81d2b02022fb3bb1316955d239a892ebfea710cf1cb0b347ee386bb951d9c4333c1454fb8ef7784cbe45324c10608faefe7e4183609dc9e0bdab20457a14703b98ef7983b887520f85a54") 00:17:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x0, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="a5ab0fc75dc566b9b10100000f32b899000f00d0b857000f00d00f005d990f01df1bd9670fc79d06000000", 0x2b}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80050002}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 00:17:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) dup3(r0, r1, 0x0) 00:17:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(0xffffffffffffffff, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:17:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x0, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:27 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8910, &(0x7f0000000000)) 00:17:27 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 00:17:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x5d1, 0x0, 0x0, 0x0, "94136711ea9ee2698a9a88717c70d22a255f84a4d5d0ee0f2128c03eb061b059"}) 00:17:29 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) set_mempolicy(0xae71988dfa2973a6, &(0x7f0000000000)=0x3, 0x4) 00:17:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(0xffffffffffffffff, r4, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$TIOCMBIC(r7, 0x4008af13, &(0x7f0000000040)) close(r5) 00:17:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x0, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, "e775aeca8ea3302ac71149ae6d055dd095cb40fd27a3b3c1ac7d019dbbe242e0d41fb10e24adb56f51b28c67b1cd5bc869f0db4dec5a418a6c54569eef0de158", "2699a29a3c3769fb8b58654b4d3e1a2ea74c2bda7173b5acd364580323244c77aa780d4fe554b5505ffc0bc05a84bc724f826d22d3b60327fc00bcf0d8340aba", "164dd27a2a516b49090f7a6b10b24fdbac66ce3eeebb2f5bb1054a35012b8e27"}) 00:17:29 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) 00:17:30 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8910, &(0x7f0000000000)) 00:17:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000c03000)=[@in], 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="2613739899f82409c00b887f278cfb436247aae5770c2187066672c110e8dd1b837fe2f8babf93aea5cdf4f0225b0809dba1da513091e6304ae1443b58c77a33121101164aa3e53198fa22b63549e9c15e91be5e2b8da81e2c1220d76fea703d476a617ecf3763112def1a7ade279e7bf5b7c39932c55e1288a1c4c10eab1e00e93f0192e4906e46d456691a5522a58c526f865f0775941a9a0e7334a96af152426ed215545f642420df7d576e023db168d2"], &(0x7f0000000000)=0x1) 00:17:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x0, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x5d1, 0x0, 0x0, 0x0, "94136711ea9ee2698a9a88717c70d22a255f84a4d5d0ee0f2128c03eb061b059"}) 00:17:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x7fffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r1, &(0x7f0000000080)="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", 0x10e) 00:17:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x73, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)) 00:17:32 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:17:32 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$TIOCMBIC(r2, 0x4008af04, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 00:17:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x0, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:32 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)=[{0x28, 0x29, 0x2, "0000000000000000000000000000000100"}], 0x28}, 0x0) 00:17:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x0, 0x2, r3}) 00:17:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) 00:17:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x0, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) eventfd(0x0) 00:17:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x20000000000002af, 0x7ffffffff000) 00:17:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x0, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x89, "2ee97e818f99e09dbf16d278fd01ffa4a6c4322d38b567e6153fc48f13a8cc10671cbe89bc0fd2dbb2118201dcde900c8071e76eacf2c2209301fbef4b01817d493224a69cf2ae77100ba80db1e4cc5facfd5d9e3f4c8e161d9653984525165f3094e4848d7d3eb04aae30bbbcbd96c0632a3b3d19c9091b77482529302104db6562f9f91076446211"}, &(0x7f0000000380)=0x91) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 785.331891] *** Guest State *** [ 785.335647] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 785.344803] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 785.353832] CR3 = 0x0000000000000000 [ 785.357589] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 785.363803] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 785.369830] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 785.377031] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 785.385164] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 785.393397] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 785.401486] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 785.409855] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 785.417984] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 785.426158] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 785.434354] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 785.442617] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 785.450629] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 785.458811] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 785.465418] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 785.473068] Interruptibility = 00000000 ActivityState = 00000000 [ 785.479423] *** Host State *** [ 785.482854] RIP = 0xffffffff812bde4b RSP = 0xffff8800a614f428 [ 785.488907] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 785.495592] FSBase=00007fd8d394b700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 785.503542] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 785.509457] CR0=0000000080050033 CR3=00000000a6b1b000 CR4=00000000001426e0 [ 785.516670] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ac01260 [ 785.523497] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 785.529584] *** Control State *** [ 785.533230] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 785.539952] EntryControls=0000d1ff ExitControls=002fefff [ 785.545662] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 785.552794] VMEntry: intr_info=80000024 errcode=00000000 ilen=00000000 [ 785.559499] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 785.566259] reason=80000021 qualification=0000000000000000 [ 785.572831] IDTVectoring: info=00000000 errcode=00000000 [ 785.578319] TSC Offset = 0xfffffe55db924137 [ 785.582867] TPR Threshold = 0x00 [ 785.586267] EPT pointer = 0x00000000a610101e 00:17:35 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x200001, 0x8c) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r6 = getegid() ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000200)={0x6, 0x5}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}]}}) dup2(r1, r2) tkill(r0, 0x15) 00:17:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) 00:17:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x0, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x20000000000002af, 0x7ffffffff000) 00:17:35 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}}, 0x0) 00:17:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(0xffffffffffffffff, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 00:17:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000280)=ANY=[]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, "e03aa1fd1bd2d075875d26b526c3e51d00c7d2e12ca873219ba62caedfaf2723"}) 00:17:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x0, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)=ANY=[@ANYBLOB="1400000022000100000000000000000000006fa8"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x0, 0xfffffffffffffffd, @loopback}}, 0x0, 0x4, 0x100000001}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={r3, 0xbf, "2ee97e818f99e09dbf16d278fd01ffa4a6c4322d38b567e6153fc48f13a8cc10671cbe89bc0fd2dbb2118201dcde900c8071e76eacf2c2209301fbef4b01817d493224a69cf2ae77100ba80db1e4cc5facfd5d9e3f4c8e161d9653984525165f3094e4848d7d3eb04aae30bbbcbd96c0632a3b3d19c9091b77482529302104db6562f9f91076446211e829f28a9506cefd32246a4d4dcc742b0204622015d4f6aba38479c373e99ee7fdc0d4efd890c6453538fae92d5923060bbeca2fdeb5"}, &(0x7f0000000380)=0xc7) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c40)) 00:17:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x0, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000003080)=""/4096) [ 788.043213] *** Guest State *** [ 788.046760] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 788.056011] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 788.065077] CR3 = 0x0000000000000000 [ 788.068833] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 788.075047] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 788.081069] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 788.088064] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 788.096267] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.104530] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.112738] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.120769] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.129002] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.137144] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 788.145450] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 788.153628] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 788.161664] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 788.169915] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 788.176504] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 788.184279] Interruptibility = 00000000 ActivityState = 00000000 [ 788.190558] *** Host State *** [ 788.193984] RIP = 0xffffffff812bde4b RSP = 0xffff8800a617f428 [ 788.200032] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 788.206711] FSBase=00007f000c9c8700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 788.214695] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 788.220634] CR0=0000000080050033 CR3=00000000a6a30000 CR4=00000000001426f0 [ 788.227892] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac01260 [ 788.234732] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 788.240831] *** Control State *** [ 788.244538] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 788.251279] EntryControls=0000d1ff ExitControls=002fefff [ 788.257021] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 788.264188] VMEntry: intr_info=8000009f errcode=00000000 ilen=00000000 [ 788.271649] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 788.278470] reason=80000021 qualification=0000000000000000 [ 788.284965] IDTVectoring: info=00000000 errcode=00000000 [ 788.290486] TSC Offset = 0xfffffe546a6ac745 00:17:37 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000002c0)=0x10) fcntl$setsig(r1, 0xa, 0x12) r5 = accept4$inet(r4, &(0x7f0000000300)={0x2, 0x0, @multicast1}, &(0x7f0000000340)=0x10, 0x80800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fef000/0x11000)=nil, 0x11000}, &(0x7f00000003c0)=0x10) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20440, 0x0) write$vnet(r6, &(0x7f0000000080)={0x1, {&(0x7f0000000040)=""/13, 0xd, &(0x7f0000000140)=""/225, 0x3, 0x2}}, 0x68) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:17:37 executing program 0: syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000006fa8)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000}) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sync() write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) sched_setparam(r0, &(0x7f0000000280)) socket(0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000140)) exit(0x0) 00:17:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(0xffffffffffffffff, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x0, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 788.295064] TPR Threshold = 0x00 [ 788.298486] EPT pointer = 0x00000000a720301e [ 788.403588] *** Guest State *** [ 788.407048] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 788.416126] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 788.425120] CR3 = 0x0000000000000000 [ 788.428863] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 788.435056] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 788.441067] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 788.447913] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 788.456156] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.464353] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.472585] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.480722] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.488921] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 788.497074] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 788.505322] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 788.513568] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 788.521607] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 788.529804] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 788.536396] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 788.544071] Interruptibility = 00000000 ActivityState = 00000000 [ 788.550386] *** Host State *** [ 788.553825] RIP = 0xffffffff812bde4b RSP = 0xffff8800a723f428 [ 788.559864] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 788.566615] FSBase=00007f000c9a7700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 788.574601] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 788.580546] CR0=0000000080050033 CR3=00000000a6a30000 CR4=00000000001426f0 [ 788.587838] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac01260 [ 788.594697] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 788.600794] *** Control State *** [ 788.604483] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 788.611206] EntryControls=0000d1ff ExitControls=002fefff [ 788.616907] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 788.624011] VMEntry: intr_info=8000009f errcode=00000000 ilen=00000000 [ 788.630748] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 788.637562] reason=80000021 qualification=0000000000000000 [ 788.644103] IDTVectoring: info=00000000 errcode=00000000 [ 788.649598] TSC Offset = 0xfffffe546a6b0a5e [ 788.654146] TPR Threshold = 0x00 [ 788.657559] EPT pointer = 0x00000000a720301e 00:17:37 executing program 3: 00:17:37 executing program 0: 00:17:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x0, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:38 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xaaa9, 0x600800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x4, 0xc51}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x7ff}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:17:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)=ANY=[]}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xbf, "2ee97e818f99e09dbf16d278fd01ffa4a6c4322d38b567e6153fc48f13a8cc10671cbe89bc0fd2dbb2118201dcde900c8071e76eacf2c2209301fbef4b01817d493224a69cf2ae77100ba80db1e4cc5facfd5d9e3f4c8e161d9653984525165f3094e4848d7d3eb04aae30bbbcbd96c0632a3b3d19c9091b77482529302104db6562f9f91076446211e829f28a9506cefd32246a4d4dcc742b0204622015d4f6aba38479c373e99ee7fdc0d4efd890c6453538fae92d5923060bbeca2fdeb5"}, &(0x7f0000000380)=0xc7) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c40)) 00:17:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x5, 0x0, 0xfffffffffffffffe, 0x0, "e03aaffd1bd2d075875d26b526c3e51d00c7d2e12ca873219ba62caedfaf2723"}) 00:17:38 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000000000000e0700015000000020000db"]}) 00:17:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x0, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(0xffffffffffffffff, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 789.621472] *** Guest State *** [ 789.625228] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 789.634337] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 789.643352] CR3 = 0x0000000000000000 [ 789.647110] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 789.653407] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 789.659533] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 789.666475] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 789.674648] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 789.682866] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 789.690911] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 789.699279] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 789.707456] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 789.715752] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 789.723928] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 789.731958] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 789.740199] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 789.748395] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 789.755055] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 789.762693] Interruptibility = 00000000 ActivityState = 00000000 [ 789.768967] *** Host State *** [ 789.772563] RIP = 0xffffffff812bde4b RSP = 0xffff88011e17f428 [ 789.778609] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 789.785657] FSBase=00007fd8d396c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 789.793641] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 789.799583] CR0=0000000080050033 CR3=00000000a7af6000 CR4=00000000001426f0 [ 789.806887] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac01260 [ 789.813733] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 789.819823] *** Control State *** [ 789.823532] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 789.830244] EntryControls=0000d1ff ExitControls=002fefff [ 789.835959] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 789.843065] VMEntry: intr_info=8000009f errcode=00000000 ilen=00000000 [ 789.849787] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 789.856689] reason=80000021 qualification=0000000000000000 [ 789.863172] IDTVectoring: info=00000000 errcode=00000000 [ 789.868672] TSC Offset = 0xfffffe539298247c [ 789.873278] TPR Threshold = 0x00 [ 789.876700] EPT pointer = 0x00000000a4ea701e 00:17:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xffff, 0x0, 0x0, 0x40a3d274}) 00:17:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x0, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:39 executing program 0: 00:17:39 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r0, 0xa, 0x12) fcntl$setownex(r0, 0xf, &(0x7f0000704000)={0x2}) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r1) tkill(0x0, 0x15) 00:17:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)=ANY=[]}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xbf, "2ee97e818f99e09dbf16d278fd01ffa4a6c4322d38b567e6153fc48f13a8cc10671cbe89bc0fd2dbb2118201dcde900c8071e76eacf2c2209301fbef4b01817d493224a69cf2ae77100ba80db1e4cc5facfd5d9e3f4c8e161d9653984525165f3094e4848d7d3eb04aae30bbbcbd96c0632a3b3d19c9091b77482529302104db6562f9f91076446211e829f28a9506cefd32246a4d4dcc742b0204622015d4f6aba38479c373e99ee7fdc0d4efd890c6453538fae92d5923060bbeca2fdeb5"}, &(0x7f0000000380)=0xc7) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c40)) 00:17:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x0, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 790.794405] *** Guest State *** [ 790.797785] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 790.806949] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 790.816091] CR3 = 0x0000000000000000 [ 790.819849] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 790.826093] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 790.832284] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 790.839007] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 790.847200] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 790.855481] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 790.863649] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 790.871687] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 790.879877] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 790.888084] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 790.896280] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 790.904466] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 790.912719] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 790.920728] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 790.927392] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 790.935117] Interruptibility = 00000000 ActivityState = 00000000 [ 790.941382] *** Host State *** [ 790.944852] RIP = 0xffffffff812bde4b RSP = 0xffff88009b42f428 [ 790.950900] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 790.957613] FSBase=00007fd8d396c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 790.965619] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 790.971555] CR0=0000000080050033 CR3=00000000a7a37000 CR4=00000000001426e0 [ 790.978900] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ac01260 [ 790.985835] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 790.991934] *** Control State *** 00:17:39 executing program 0: 00:17:39 executing program 1: [ 790.995670] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 791.002523] EntryControls=0000d1ff ExitControls=002fefff [ 791.008030] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 791.015213] VMEntry: intr_info=8000009f errcode=00000000 ilen=00000000 [ 791.021933] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 791.028802] reason=80000021 qualification=0000000000000000 [ 791.035562] IDTVectoring: info=00000000 errcode=00000000 [ 791.041055] TSC Offset = 0xfffffe52ef22f69d [ 791.045622] TPR Threshold = 0x00 [ 791.049050] EPT pointer = 0x00000000a6b3c01e 00:17:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:40 executing program 1: 00:17:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x0, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:40 executing program 0: 00:17:40 executing program 3: 00:17:40 executing program 0: 00:17:40 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r3, 0x4, &(0x7f0000000000)=0x3d) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:17:40 executing program 1: 00:17:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x0, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:41 executing program 3: 00:17:41 executing program 0: 00:17:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x0, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:41 executing program 1: 00:17:41 executing program 3: 00:17:41 executing program 0: 00:17:41 executing program 1: 00:17:42 executing program 3: 00:17:44 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x902c0) sendto$unix(r2, &(0x7f0000000080)="79c40ef8b03c8588056ebeaec68afd684b36afdc7c5b3583fb1eaa734822b6b3d03a319285177cf43ad029001d7f29e04c536d385decf2b2dfd9cad3ddd2609b662ed20968a83f0bc2595cb78391ad731a191d2430d46bf5a0c0", 0x5a, 0x8000, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000040), 0x1) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r5 = dup2(r1, r2) tkill(r0, 0x15) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) 00:17:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x0, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:44 executing program 0: 00:17:44 executing program 3: 00:17:44 executing program 1: 00:17:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:44 executing program 1: 00:17:44 executing program 3: 00:17:44 executing program 0: 00:17:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x0, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:44 executing program 0: 00:17:44 executing program 3: 00:17:45 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r0, 0xa, 0x12) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) fcntl$setownex(r0, 0xf, &(0x7f0000704000)={0x2}) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r1) tkill(0x0, 0x39) tkill(0x0, 0x15) 00:17:45 executing program 1: 00:17:45 executing program 3: 00:17:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x0, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:45 executing program 0: 00:17:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(0x0, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) 00:17:45 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$vnet(r1, &(0x7f0000000000)={0x1, {&(0x7f00000000c0)=""/208, 0xd0, &(0x7f0000000280)=""/243}}, 0x68) close(r1) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) splice(r0, 0x0, r1, &(0x7f0000000240), 0x18, 0x0) 00:17:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:17:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x0, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) [ 797.248357] binder: send failed reply for transaction 10 to 19492:19496 00:17:46 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, &(0x7f0000000280)) 00:17:46 executing program 4: clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 00:17:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:17:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(0x0, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:47 executing program 1: tkill(0x0, 0x0) timer_create(0x0, &(0x7f0000000180), &(0x7f0000000000)) timer_delete(0x0) [ 798.073912] binder: send failed reply for transaction 12 to 19511:19513 00:17:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:17:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2, 0x3}, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000140)="f6de6164065a7e0802c6de883dc51867a6ee3f23b04c1706edd347508326ae4b7f7775f25ae50790be79d6ea5f48fefebb8040a1c56c67e0a399f1e5dca9c3f867f9c2779bcaf53fc15b5e097dcdf463a5c38447d557280e28a812bbf4c431f4a833caefb89307977a3cf174ed9de8fa6b3b90c21ff95474ae03cdba9111cfb3250466baf121639cfd8a8d11efa41917ded0380594b84ac15e9ddf9e6ced5ee1d3c171affaa312fb0ba62d11225e76756f9fda5c0cf7ff740b9430348da59bbf8c8a81e484b08a1338db98186c9853c20dd2848813bf1d6d31bb637868b8", &(0x7f0000000080)=""/8}, 0x18) [ 798.688887] binder: send failed reply for transaction 14 to 19531:19533 00:17:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:17:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 799.373733] binder: BINDER_SET_CONTEXT_MGR already set [ 799.379188] binder: 19550:19552 ioctl 40046207 0 returned -16 00:17:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(0x0, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:17:50 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffff0000, 0x82000) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x200, 0x6, 0x1ff, 0xe6, 0x3, 0x4, 0x9, 0x40, 0xae, 0x0, 0x7, 0x3}) clone(0x0, &(0x7f00000001c0), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000000140)) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r2, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x6, 0xc00, 0x10001, 0x8, 0x4, 0x7ff, 0x5, 0x0, 0xfffffffffffffab6, 0xffffffff, 0x4, 0x2}) recvmsg(r3, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 00:17:50 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$inet6(0xa, 0x4, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)="2e00000000000000000000000e0000d5", 0x10}], 0x1, &(0x7f0000000100)}, 0x0) 00:17:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:17:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x0, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:50 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000340)={{0x7fffffff}, {0x1, 0xb6cd}, 0x1, 0x3, 0x7fff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r1, &(0x7f0000000200)="288738fc", 0x4) close(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x2, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) splice(r0, 0x0, r1, 0x0, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={r4, 0xef, "21161751245949738d8f4679b5d0f12d2aae63c0a184ee215a0f2e57c0eeea3d0a020cf5f60370456170454d5449dbea847ed14896d1c289b947a2df8033c8e887c436a2d40d18dae9734717ad0bc5f5242cbd75116f775783f3d2af458defa56abcea83ef3f5e521837b620403ee8b226c072ac37840632b2e9dc0b483ad43cbbf8fe33d72c1446540d9eb03f0e037deb6597aa93907d93516948d07a7df13c3e93f2c55cd4356d42e14ecf28c3a44e03b4626a93d869ff6dd6813f8346474dc7bfb59acfc3e39f866f232d5cf28536528f313790d5657718717c6d290c2b82249ccb411d42f6754c80a844e63d29"}, &(0x7f0000000140)=0xf7) [ 801.162169] binder: BINDER_SET_CONTEXT_MGR already set [ 801.167676] binder: 19565:19566 ioctl 40046207 0 returned -16 00:17:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x0, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:17:50 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000005c0)="30046e41c568427f0861615c9a374f4c1d5a181a26e4f5da476b8fbfa8ae7e77e2274c7a76b004f24df72cd785f8c91628908cb259f04e56478a036a935f1ba6178198b47f7f3af8071a83955e2327e1dc6132a9386c50cb05409231dde276e6ec5da8fb0679c6c61740d8568bd2696c51ec7e029b26e63ce5167dc9d59add056c34dfe4e7c25bead52eaf78e234b5b907ae0b7ff804256ca85f979cf5881e749d8a2d8312f6b33cff1f9741213ff2ec16da72c8a40bfe5529e9b48973774b818a9186bce2f8fdb8c2f77f8031ac5c4d0e32041c2bf13587ee9fffae8f29022692f78c16c91f2dcb567a0d15f1552242deb6f393645d1332fe735d921cc66bc8") r1 = memfd_create(&(0x7f0000000380)="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", 0x0) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x733, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x4000000000000, 0x100, 0x0, 0x1e, 0x1}, 0x2c) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)) read(r0, &(0x7f00000004c0)=""/244, 0xfffffea0) 00:17:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 801.933121] binder: release 19565:19566 transaction 16 out, still active 00:17:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 802.748201] binder: BINDER_SET_CONTEXT_MGR already set [ 802.753928] binder: 19599:19600 ioctl 40046207 0 returned -16 00:17:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 802.828906] binder: release 19599:19600 transaction 17 out, still active 00:17:51 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000005c0)="30046e41c568427f0861615c9a374f4c1d5a181a26e4f5da476b8fbfa8ae7e77e2274c7a76b004f24df72cd785f8c91628908cb259f04e56478a036a935f1ba6178198b47f7f3af8071a83955e2327e1dc6132a9386c50cb05409231dde276e6ec5da8fb0679c6c61740d8568bd2696c51ec7e029b26e63ce5167dc9d59add056c34dfe4e7c25bead52eaf78e234b5b907ae0b7ff804256ca85f979cf5881e749d8a2d8312f6b33cff1f9741213ff2ec16da72c8a40bfe5529e9b48973774b818a9186bce2f8fdb8c2f77f8031ac5c4d0e32041c2bf13587ee9fffae8f29022692f78c16c91f2dcb567a0d15f1552242deb6f393645d1332fe735d921cc66bc8") r1 = memfd_create(&(0x7f0000000380)="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", 0x0) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x733, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x4000000000000, 0x100, 0x0, 0x1e, 0x1}, 0x2c) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)) read(r0, &(0x7f00000004c0)=""/244, 0xfffffea0) 00:17:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 803.142580] binder: BINDER_SET_CONTEXT_MGR already set [ 803.148042] binder: 19606:19607 ioctl 40046207 0 returned -16 [ 803.335142] IPVS: ftp: loaded support on port[0] = 21 00:17:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = dup2(r1, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x2, &(0x7f0000000240)=[{}, {}]}) sched_getaffinity(r2, 0x8, &(0x7f0000000000)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x6) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001ac0)={0x53, 0xffffffffffffffff, 0xee, 0x400, @scatter={0x9, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000080)}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000740)=""/169, 0xa9}, {&(0x7f0000000800)=""/4096, 0x1000}]}, &(0x7f00000018c0)="75451e98486b3d25deb99a8a4f37cbdd08b3c6ac8cb2d17987be1f6b6f619efdbaa7f3aca1da4850a0bbfbf49baafa3d42a3c29821e0f299415c832ca4687f7e52a994f2be0d807c536223b95a3e58bc1902ac913b444bbccd57fa16394350c8bc38826af3903797d5f3692638b89d06176ff667eff0a9b22343cfe1810384444e7a9dc1c446940d4fe8e89d7bd869c3b6137eba32c497ba1ad5331615b176e0bf693b5dbc8ff680344cb70984bbd276aa5794fcc97620c59642c1d873e7b9a60eeb876f99be621d360b5f29610be8467970107b3ce13f98dbae5643099e2d4b58803aab0b2b15b9ef87155693f2", &(0x7f00000019c0)=""/168, 0x1b0, 0x1, 0x1, &(0x7f0000001a80)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000180)={0x7a, 0x0, [0x4b564d00, 0x35fd]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 805.812805] device bridge_slave_1 left promiscuous mode [ 805.818599] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.873726] device bridge_slave_0 left promiscuous mode [ 805.879326] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.105168] team0 (unregistering): Port device team_slave_1 removed [ 809.118204] team0 (unregistering): Port device team_slave_0 removed [ 809.130561] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 809.178739] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 809.258857] bond0 (unregistering): Released all slaves [ 810.027647] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.034447] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.042962] device bridge_slave_0 entered promiscuous mode [ 810.187589] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.194219] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.202755] device bridge_slave_1 entered promiscuous mode [ 810.343712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 810.443832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 810.806433] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 810.888530] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 811.321608] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 811.329323] team0: Port device team_slave_0 added [ 811.408760] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 811.416417] team0: Port device team_slave_1 added [ 811.497266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 811.504315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 811.513157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 811.594105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 811.601035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 811.609870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 811.688121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 811.695597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 811.704960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 811.784545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 811.792311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 811.801207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 812.677572] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.684048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.690759] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.697346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.705169] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 813.453191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 815.872303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.173006] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 816.472866] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 816.479408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 816.487634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 816.786693] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.739726] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! 00:18:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:07 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x2080, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000007700)={{0x8, 0x3, 0x80, 0xde9, 'syz0\x00', 0x1f}, 0x0, [0x36c9, 0xfffffffffffffff7, 0x219e, 0x644d, 0x7, 0x7bba, 0x101, 0x7, 0x3, 0x400, 0x0, 0x7, 0x0, 0x0, 0x800, 0x1, 0x2, 0x0, 0x6, 0xffffffffffffff81, 0x2, 0x80000001, 0x8, 0x8000, 0x3, 0xb405, 0x1, 0x23, 0x7f, 0x3, 0x0, 0x82ca, 0x9, 0x9, 0x2, 0x9, 0x4, 0x4, 0x7fff, 0x1, 0x8, 0x5, 0x848b, 0x3ff, 0x7, 0xfffffffffffffff9, 0x1400000000, 0xfffffffffffffffb, 0xfff, 0x3, 0xa4e, 0x2, 0x1, 0x70d0bdfd, 0x8, 0x4, 0x9, 0x1ff, 0x800, 0x8001, 0x8001, 0xfffffffffffffe00, 0x8, 0x1, 0x1ff, 0x9, 0x798e, 0x10000, 0x6, 0x5, 0x404000000000, 0xfffffffffffffffc, 0x1, 0x3, 0x0, 0x6, 0x5, 0x3, 0x9, 0x7a5, 0x5, 0x2104, 0x2, 0x0, 0x3, 0xfffffffff26d7f8b, 0xfff, 0x3, 0x3, 0x80000001, 0x5, 0x7ff, 0x7, 0x400, 0x10001, 0x2, 0xd65, 0x1000, 0x5b7, 0x16e8, 0x7fffffff, 0x6, 0xfff, 0x4, 0xea2c, 0x1000, 0x1, 0x6, 0x5, 0x66c9, 0x3, 0x4, 0x40, 0x2, 0x800, 0x2, 0x6, 0x6, 0x3, 0xfb, 0x824, 0x7, 0x4, 0x3f, 0x80, 0x0, 0x80000001, 0x4], {0x0, 0x1c9c380}}) unshare(0x20400) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f00000074c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/113, 0x71}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000200)=""/237, 0xed}], 0x5, &(0x7f0000000380)=""/95, 0x5f, 0x7f}, 0x6}, {{&(0x7f0000000400)=@generic, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/181, 0xb5}], 0x3, &(0x7f0000000600)=""/246, 0xf6, 0x7fff}, 0xf0c}, {{&(0x7f0000000700)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)=""/60, 0x3c}, {&(0x7f00000007c0)=""/117, 0x75}, {&(0x7f0000000840)=""/150, 0x96}], 0x3, &(0x7f0000000940)=""/4096, 0x1000, 0x8}, 0x4}, {{&(0x7f0000001940)=@rc, 0x80, &(0x7f0000003cc0)=[{&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/207, 0xcf}, {&(0x7f0000001b00)=""/35, 0x23}, {&(0x7f0000001b40)=""/86, 0x56}, {&(0x7f0000001bc0)=""/28, 0x1c}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/19, 0x13}, {&(0x7f0000003c40)=""/100, 0x64}], 0x9, 0x0, 0x0, 0x6}}, {{&(0x7f0000003d80)=@alg, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/152, 0x98}], 0x2, &(0x7f0000003f40)=""/4096, 0x1000, 0x80000001}, 0x800}, {{&(0x7f0000004f40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000007100)=[{&(0x7f0000004fc0)=""/197, 0xc5}, {&(0x7f00000050c0)=""/32, 0x20}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006100)=""/4096, 0x1000}], 0x4, &(0x7f0000007140)=""/4, 0x4, 0x9}, 0x9}, {{&(0x7f0000007180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000007480)=[{&(0x7f0000007200)=""/216, 0xd8}, {&(0x7f0000007300)=""/143, 0x8f}, {&(0x7f00000073c0)=""/165, 0xa5}], 0x3, 0x0, 0x0, 0x3}, 0xffffffff}], 0x7, 0x10002, &(0x7f0000007680)) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000076c0)={@mcast2, r2}, 0x14) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c) 00:18:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x0, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:07 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000005c0)="30046e41c568427f0861615c9a374f4c1d5a181a26e4f5da476b8fbfa8ae7e77e2274c7a76b004f24df72cd785f8c91628908cb259f04e56478a036a935f1ba6178198b47f7f3af8071a83955e2327e1dc6132a9386c50cb05409231dde276e6ec5da8fb0679c6c61740d8568bd2696c51ec7e029b26e63ce5167dc9d59add056c34dfe4e7c25bead52eaf78e234b5b907ae0b7ff804256ca85f979cf5881e749d8a2d8312f6b33cff1f9741213ff2ec16da72c8a40bfe5529e9b48973774b818a9186bce2f8fdb8c2f77f8031ac5c4d0e32041c2bf13587ee9fffae8f29022692f78c16c91f2dcb567a0d15f1552242deb6f393645d1332fe735d921cc66bc8") r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x733, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x4000000000000, 0x100, 0x0, 0x1e, 0x1}, 0x2c) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)) read(r0, &(0x7f00000004c0)=""/244, 0xfffffea0) 00:18:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', '(\x00'}) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x12) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r3, &(0x7f0000000240), 0x12) 00:18:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 818.931991] binder: BINDER_SET_CONTEXT_MGR already set [ 818.937746] binder: 19893:19896 ioctl 40046207 0 returned -16 00:18:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 819.058928] binder: release 19893:19896 transaction 19 out, still active 00:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0x0, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:08 executing program 0: r0 = epoll_create(0x9) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000003}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1000, 0x800) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) [ 819.351616] binder: BINDER_SET_CONTEXT_MGR already set [ 819.357394] binder: 19911:19914 ioctl 40046207 0 returned -16 00:18:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 819.644650] binder: BINDER_SET_CONTEXT_MGR already set [ 819.650317] binder: 19923:19924 ioctl 40046207 0 returned -16 00:18:08 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1}) 00:18:08 executing program 0: r0 = socket$kcm(0x2, 0x40000000000005, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f00000000c0)=r1, 0x18c0f5c42f5c6cf1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1b72ea03}, 0xfeed) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e24, @broadcast}}, 0x7, 0x6, 0x9, "87b0329acc13ccdee7af4b76406f127cd02516f332c3b3a6104e4f1ff2744c3f97fdcd4e5b4f284db9141ba7a54d298a08dcac253847505e7da10426fcde1de188d77561f521d0f37887a01c81e38d46"}, 0xd8) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x1, r2}) 00:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0x0, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:18:09 executing program 4: execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=[&(0x7f0000000040)='/dev/input/event#\x00'], &(0x7f0000000100)=[&(0x7f00000000c0)='/dev/input/event#\x00']) unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)) 00:18:09 executing program 0: keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000040004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001840), &(0x7f00000000c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) fstat(r0, &(0x7f0000001400)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000001480)=0xc) stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x3f000000) 00:18:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0x0, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 820.408609] binder: release 19923:19924 transaction 21 out, still active 00:18:09 executing program 1: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffe, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000140)={{}, 'port0\x00', 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x2c0, 0x0, 0x0, 0x7fff}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYPTR=&(0x7f0000000080)=ANY=[]], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpgrp(0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) tgkill(r4, r5, 0xd) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 00:18:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:09 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioperm(0xc6, 0x7, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000001c0)=""/132, 0x84, 0x0, &(0x7f0000000040)=@abs, 0x6e) 00:18:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x0, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 820.877744] binder: BINDER_SET_CONTEXT_MGR already set [ 820.883433] binder: 19961:19962 ioctl 40046207 0 returned -16 00:18:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x40012, 0x5}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 821.017018] binder: release 19961:19962 transaction 22 out, still active 00:18:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000340)='system\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="5f28998a37475b273df95bf8df276a0e3b008bbf4e8a9f4d27046fd5bcd3b3a3e0277ef7f47acec95843dc95a4947435342919e5d15b2c2aa307ed1efdb5e6000000000000080cc4832a", 0x1}], 0x3d6, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x2, r1}) r2 = socket$inet6(0xa, 0x10000000003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") sendfile(r0, r0, &(0x7f0000000140), 0x20000102000007) 00:18:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:18:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x0, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 821.421815] binder: BINDER_SET_CONTEXT_MGR already set [ 821.427565] binder: 19978:19980 ioctl 40046207 0 returned -16 00:18:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) [ 821.639263] binder: release 19978:19987 transaction 23 out, still active [ 822.043872] binder: BINDER_SET_CONTEXT_MGR already set [ 822.049394] binder: 20001:20003 ioctl 40046207 0 returned -16 [ 822.162519] binder: release 20001:20003 transaction 24 out, still active 00:18:11 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101400, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x78c98950}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100)="5dbd039429f5a94ac1bcace7ad9a6a45fe6d28ce92b5fa9d18f069fa54b7fbbf8aeb5464baaca1d848b3e8387a401716ad266a02df038c0919cc6c1303e19e710a10057298ae10e7bd2c69ca8a06538ffa28a848599296f45e20064d5e8583d63752e1432490b7bde649", 0x6a, 0x20004000, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x3}, 0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xfffffffffffffffe) sendmmsg$unix(r0, &(0x7f0000000200), 0x0, 0x4008000) r3 = open(&(0x7f0000000240)='./file0\x00', 0x84000, 0x2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x32, 0x2, 0xe40, "dedeef5d8297277964a6c64492273303", "b1a24e9965ebf2804ac8b15d72b31f5c195de4fdfa006b65e7ef4ae4b6"}, 0x32, 0x1) listen(r3, 0x7f) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000300)={'irlan0\x00', {0x2, 0x4e24, @local}}) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r1, 0x4) write$binfmt_aout(r3, &(0x7f0000000380)={{0x1cc, 0x6, 0x3, 0x350, 0x4, 0x0, 0x122, 0x7fff}, "9ad9b9db1ce1fa352e784819c1a00d5c75804aefae8b008cf32145218b7496ea71839c", [[], [], [], [], [], []]}, 0x643) ioctl$KDSETMODE(r3, 0x4b3a, 0xe2a1) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000a00)={r1, 0x7, 0x2, 0x9}, &(0x7f0000000a40)=0x10) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000a80)=""/22, &(0x7f0000000ac0)=0x16) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x5}, @in6={0xa, 0x4e23, 0xfffffffffffffc00, @empty, 0x2}, @in6={0xa, 0x4e20, 0x80, @dev={0xfe, 0x80, [], 0x1c}, 0x7f}, @in6={0xa, 0x4e20, 0x3f, @mcast1, 0xdb5}, @in={0x2, 0x4e21, @loopback}], 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000bc0)={r1, 0x5}, 0x8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/rfkill\x00', 0x10200, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000c40)='/dev/adsp#\x00', 0x7, 0x20000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000d80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000d40)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000dc0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000d00)=0x8, r6, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000e00)={0x15, 0x110, 0xfa00, {r6, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x81, 0x3, {"b239d0ba55e369bc9980a890741cf6aa"}, 0xa186, 0x5, 0xf9}, @ib={0x1b, 0xc5, 0x100, {"c391be0d2704145913e2dbf096c1abb0"}, 0x2, 0x20, 0x6}}}, 0x118) sendmsg$xdp(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000f40)="b25807f542f2a7f303c12c0c2d20c7fc5e28e517fe06bb51527e157c123b109ab84f0c99d4d0c3e8abb89d383398da0f1427809081f623755c5ddfac9ffa9ede9fa3ce381d3c095ff51a1cbe33253471cc214a7c3f62977105434844cf0cf08971f562a30f74518002b06deda90631c323d4014c4c2befa58b80971696cb320e57eaeb83ed9b04f86ec6491bf8f88051db8f4ff5cd7eaee86f2939c840af0f24e6689d522be57f77d1dd1b0bcfc8ebe92327b51d5c6a940fbe869e94b5d708bc", 0xc0}, {&(0x7f0000001000)="adab7d85a23ca6c72dc440ad7d87b6aed605d614a83e89df7f3876e20ee87338034f490c1db2f4cff47d3def9ad6627e62252d9eaf34a8619a96ea8248c02ffc9dd72cd077737b6f7f413d", 0x4b}, {&(0x7f0000001080)="c76f397c9471323416a72b314f13f68090583d0a561c5604c51fd37dd68dda7522b6ccccfbadcd112d0c8f83fc03e6238e4157f51e6654f3dd93285e012d8f3be42651c2c48d292cf80f670853820ea5fb022cff09e2d6a47284bd07dcba36b76450558808c28686136ba121f2d6c61d805353520fe5fdebd2349e342aa2247f1e54072f33333a1732fa02ea82d557b7a1538d9c35666bcf0d943ec0c6b7b17152a4fbb6f635f3528f644e87576fc96fdf121c208da3d82657a514b7dfafcbc60c26d368a15d4beb987e22c0062d6bdb98ab1dc2a74457cf9412602729637ab0", 0xe0}], 0x3, 0x0, 0x0, 0x48000}, 0x8010) setxattr(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)=@known='trusted.overlay.origin\x00', &(0x7f0000001280)='trusted.overlay.upper\x00', 0x16, 0x2) write$P9_RFLUSH(r5, &(0x7f00000012c0)={0x7, 0x6d, 0x1}, 0x7) fcntl$setflags(r0, 0x2, 0x1) accept(r0, &(0x7f0000001300)=@pppol2tp, &(0x7f0000001380)=0x80) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001540)={0xc, 0x8, 0xfa00, {&(0x7f00000013c0)}}, 0x10) 00:18:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x0, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:11 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x401) 00:18:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 822.522687] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:18:11 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x0) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="d13ff3d776", 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 822.576884] binder: BINDER_SET_CONTEXT_MGR already set [ 822.582558] binder: 20015:20017 ioctl 40046207 0 returned -16 [ 822.727694] binder: release 20015:20017 transaction 25 out, still active 00:18:13 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000000)="fc7621efd918a5") ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) r2 = semget$private(0x0, 0x0, 0x4) semctl$GETNCNT(r2, 0x4, 0xe, &(0x7f0000000100)=""/141) socket$xdp(0x2c, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000000, 0x0) sendto$unix(r3, &(0x7f00000002c0)="c090f479690c86f1649e079798cc2be3c121a3b1f537f1ded55d16c85f1ea595f5ffb897d85f404c4a66f8a80fc3a1cc294071d71563accbf3e008e71f1b8c3a4c7ba23759de545dd52e3a143835da680e8fb0023b38ca34ebef4b076d6a157ea3dd2ef5a7d62b6c46e246717ae3cfa33965e36df5fb18ab404c56ff2819275381600eb3547a43f27feb027cc7c91607b67ffb92026bf4eb555d19e4abcf487ee656de44a5c01e865db2adb4dfae8d05123d3582c408a24262d52864753109074ebcf7b28dce01f5adaff05c599238e304c31566443f0eaf77460e2f551a940c517111515b0a9eefb9ffafba7879e44afb049ac9a8a099", 0xf7, 0x4000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) 00:18:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x0, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:13 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x44000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3256b9ff, @mcast1, 0x6}, {0xa, 0x4e24, 0x2, @ipv4}, r1, 0x401}}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000009000000000000000200000000000000010000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c3ff88c4fb5995465debd6de1258701e268b716f5712b7a9f7cfe28250fe86cb505986b"]) 00:18:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:13 executing program 0: unshare(0x8000400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x0, 0x800, 0xfffffffffffffffe) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x401, @remote, 0xfff}, 0x1c) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x802, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz1\x00') r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffffad) 00:18:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 824.296551] binder: BINDER_SET_CONTEXT_MGR already set [ 824.302008] binder: 20045:20049 ioctl 40046207 0 returned -16 00:18:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:13 executing program 4: r0 = timerfd_create(0x2, 0x800) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x3}, 0x28, 0x2) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0xff, 0x35, 0x4}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:18:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x0, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 824.615954] binder: BINDER_SET_CONTEXT_MGR already set [ 824.621515] binder: 20061:20062 ioctl 40046207 0 returned -16 00:18:13 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000380)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDDISABIO(r2, 0x4b37) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x5, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x2, 0x7, 0x100000000}) listen(r1, 0x0) 00:18:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x240) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000140)={0x6, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000080)=0x8) [ 824.777051] sctp: [Deprecated]: syz-executor4 (pid 20070) Use of int in maxseg socket option. [ 824.777051] Use struct sctp_assoc_value instead [ 824.833509] binder: release 20061:20062 transaction 27 out, still active 00:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x0, 0x7082, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:14 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8001, 0x0) write$input_event(r0, &(0x7f0000000080)={{0x77359400}, 0x16, 0x800, 0x9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x10115) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_LK(r1, &(0x7f0000000180)={0x28, 0x0, 0x1, {{0x7}}}, 0x28) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x17}, 0x5}, {0xa, 0x4e22, 0x9, @mcast1, 0x6}, 0x1, [0x7fffffff, 0xdd5, 0x8, 0x588c, 0xfffffffffffffff7, 0x8, 0x1, 0xffff]}, 0x5c) write$binfmt_elf32(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfffffff7) fcntl$setstatus(r0, 0x4, 0x804) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000780)='./file0\x00', 0x6) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x7fffffff, @mcast1, 0x8}}, 0x1c, 0xffffffff}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x5}, &(0x7f0000000340)=0x8) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000740)={0x1, &(0x7f0000000500)=[{0xc89, 0x2, 0x4c, 0x2}]}, 0x10) r4 = getegid() ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000800)=""/170) write$FUSE_ENTRY(r1, &(0x7f0000000440)={0x90, 0x0, 0x4, {0x5, 0x1, 0xffffffffffff030a, 0x1, 0x7, 0x4, {0x0, 0x6d, 0x3f, 0x20, 0x7, 0x100000000, 0x7fff, 0x7, 0x60000000000000, 0x401, 0x4, r3, r4, 0x4, 0x75de3e4}}}, 0x90) ioctl$int_in(r0, 0xc0000840045010, &(0x7f0000000000)=0xfdfdffff) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x32f, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, [{}]}, 0x58) 00:18:14 executing program 1: unshare(0x20400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) fdatasync(0xffffffffffffffff) [ 825.290464] binder: BINDER_SET_CONTEXT_MGR already set [ 825.296163] binder: 20086:20088 ioctl 40046207 0 returned -16 00:18:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x0, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x7, 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffffffffffec4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x100000000000fffd, 0x0, 0x11}, 0x98) 00:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x0, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3f}, 0x1c) r2 = dup(r1) r3 = dup2(r1, r0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r3) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x80080, 0x0) sendmmsg(r0, &(0x7f0000000280), 0x40000ff, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000180)) accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x80800) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) [ 826.034145] binder: release 20086:20088 transaction 28 out, still active 00:18:15 executing program 1: socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000800000000000000000000000000000000000000000080000"], 0x20) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_rr_get_interval(r3, &(0x7f0000000080)) 00:18:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x39, 0x9, [0x100000000, 0x4a, 0xeb0b, 0x8000, 0xfffffffffffffe20, 0x9823, 0x7ff, 0x9, 0xffffffffffffff01]}}) 00:18:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x0, 0x800, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 826.493767] binder: BINDER_SET_CONTEXT_MGR already set [ 826.499221] binder: 20126:20127 ioctl 40046207 0 returned -16 00:18:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 826.619412] binder: release 20126:20131 transaction 29 out, still active [ 826.626577] binder: undelivered TRANSACTION_COMPLETE 00:18:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = accept4(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={{0x0, 0x7, 0x2dc, 0x2, 0x9, 0x7fc}, 0x4}) read(0xffffffffffffffff, &(0x7f0000000880)=""/4096, 0x112e) 00:18:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:17 executing program 4: ioctl(0xffffffffffffffff, 0x120, &(0x7f00000000c0)="a231ec51e3807f48095b67398ba86ffb256961a58786c81f070055b90400ff030000d1f16ba483") r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x20b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) 00:18:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:18:17 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x36) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$unix(r2, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 00:18:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x0, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 828.428692] binder: BINDER_SET_CONTEXT_MGR already set [ 828.434452] binder: 20152:20157 ioctl 40046207 0 returned -16 00:18:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x600) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @multicast1}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000340)=0x2, 0x334) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000200)=0x1ff, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x1000000, 0x4) [ 828.637227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 00:18:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x0, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:17 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000050c0), 0x132c) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x1}, 0x50) chmod(&(0x7f0000000180)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002000), 0x1000) fadvise64(r0, 0x0, 0xfffffffffffffffb, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 828.865482] binder: BINDER_SET_CONTEXT_MGR already set [ 828.871133] binder: 20171:20175 ioctl 40046207 0 returned -16 00:18:18 executing program 4: ioctl(0xffffffffffffffff, 0x120, &(0x7f00000000c0)="a231ec51e3807f48095b67398ba86ffb256961a58786c81f070055b90400ff030000d1f16ba483") r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x20b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) 00:18:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x400000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$kcm(0x29, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000019c0)='wchan\x00') ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) sendfile(r0, r3, &(0x7f0000000000), 0x80000002) 00:18:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x0, 0x0, 0x80000001, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 829.367396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 00:18:18 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x3, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xa0, "ddfd1868faa8871a1a5756a180ebcb34e1f9f8c38a2a47dd677d91b5b163d31db35fd21d01ab96e5bc946c7918a844c634aa8e0d67da0396c8af12b69937b5ade488886c8ea2b33281038ab99aee841e97a74a880057e382ee634d1927a122c8d18c6424b07b62d8f8066005cccace70b7786ccb8b1c4ecaaca0ce2097ae999902186cd623c60ef3f37067e88261f5766ec4d7ba7c7bfef8dbcbfbe4ef3960be"}, &(0x7f0000000100)=0xa8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0x8, 0x4, 0x3f, 0x3, 0x7, 0x9, 0x81, {r3, @in6={{0xa, 0x4e21, 0x3, @ipv4={[], [], @local}, 0x4}}, 0x79, 0xf, 0x31b, 0x0, 0xeb6}}, &(0x7f0000000300)=0xb0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x7fffffff}) 00:18:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:18:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x20, 0x1}, {0x4, 0x6}]}, 0x14, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0xc05, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14}]}, 0x30}}, 0x0) [ 829.623648] binder: release 20171:20175 transaction 30 out, still active 00:18:18 executing program 4: ioctl(0xffffffffffffffff, 0x120, &(0x7f00000000c0)="a231ec51e3807f48095b67398ba86ffb256961a58786c81f070055b90400ff030000d1f16ba483") r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x20b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) 00:18:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x0, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0x40, @mcast2}}, 0x9, 0x7fffffff}, &(0x7f0000000440)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000480)={r2, 0x6}, 0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) [ 830.034572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 00:18:19 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000080)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz'}, 0x0) 00:18:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x0, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:19 executing program 4: ioctl(0xffffffffffffffff, 0x120, &(0x7f00000000c0)="a231ec51e3807f48095b67398ba86ffb256961a58786c81f070055b90400ff030000d1f16ba483") r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x20b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) 00:18:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4, 0x600d00) write$P9_RREMOVE(r2, &(0x7f0000000140)={0x7, 0x7b, 0x1}, 0x7) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x242000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000240)=0x7, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000003c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1a9aa5a8c1350884, 0x5, 0x7, 0x3ff, 0x23, 0x1, 0x521f}, 0x2c) clone(0x0, &(0x7f0000000480), &(0x7f0000744000), &(0x7f0000000540), &(0x7f0000000180)) 00:18:19 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r2, r2, r2) setresuid(r1, r1, 0x0) [ 830.645564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 00:18:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) 00:18:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x0, 0x80, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 830.841997] binder: release 20213:20214 transaction 31 out, still active 00:18:20 executing program 4: ioctl(0xffffffffffffffff, 0x120, &(0x7f00000000c0)="a231ec51e3807f48095b67398ba86ffb256961a58786c81f070055b90400ff030000d1f16ba483") r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x20b) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) 00:18:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x1f, 0x0, "e948f6abe4f393cecae62418b1c2c0200ebceea0b263266c314dc35fb4782eeee84a21e2f38cdb48302b37cb25f8b59a11b4738aa9e1aaa43deab559419a818e3d5ae0337b3b63866604743e18866c44"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x4000040000000013, &(0x7f00000056c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f0000000040), 0x10000004d, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendto$inet6(r0, &(0x7f0000005800), 0x0, 0x0, &(0x7f0000005840)={0xa, 0x0, 0x0, @dev}, 0x1c) connect(r0, &(0x7f0000000280)=@un=@abs, 0x80) socket$inet6(0xa, 0x0, 0x81) 00:18:20 executing program 4: ioctl(0xffffffffffffffff, 0x120, &(0x7f00000000c0)="a231ec51e3807f48095b67398ba86ffb256961a58786c81f070055b90400ff030000d1f16ba483") r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) [ 831.370182] binder: release 20253:20257 transaction 32 out, still active 00:18:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x0, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 831.667552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 00:18:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x0, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 832.019648] binder: release 20271:20272 transaction 33 out, still active 00:18:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000040)={r2, 0x2}) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000001c00)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000000000000000000000000000"], 0x1c}}], 0x1, 0x0) 00:18:21 executing program 4: ioctl(0xffffffffffffffff, 0x120, &(0x7f00000000c0)="a231ec51e3807f48095b67398ba86ffb256961a58786c81f070055b90400ff030000d1f16ba483") socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) 00:18:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000580)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x200000) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x3f, 0x3, 0xfff, 0x8, 0x6, 0xfffffffffffffffc, 0x2, 0x1, 0xb22, 0x56, 0x4}, 0xb) 00:18:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x0, 0x2}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 832.606329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 832.689940] binder: release 20291:20296 transaction 34 out, still active 00:18:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488da626766070") r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000002c0)=0x6, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) fchmod(r0, 0xa) 00:18:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x2e, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 00:18:21 executing program 4: ioctl(0xffffffffffffffff, 0x120, &(0x7f00000000c0)="a231ec51e3807f48095b67398ba86ffb256961a58786c81f070055b90400ff030000d1f16ba483") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) 00:18:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() fchdir(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x10001) r5 = syz_open_pts(r4, 0x80000200201) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x14) dup3(r2, r5, 0x0) dup3(r5, r4, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r8 = dup(r7) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$TIOCMBIC(r8, 0x4008af13, &(0x7f0000000040)) close(r6) [ 833.252505] binder: BINDER_SET_CONTEXT_MGR already set [ 833.257963] binder: 20313:20315 ioctl 40046207 0 returned -16 [ 833.281590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 00:18:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) poll(&(0x7f0000000040)=[{r0, 0x4e}], 0x1, 0x0) 00:18:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)=ANY=[@ANYBLOB="1400000022000100000000000000000000006fa8"], 0x1}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xbf, "2ee97e818f99e09dbf16d278fd01ffa4a6c4322d38b567e6153fc48f13a8cc10671cbe89bc0fd2dbb2118201dcde900c8071e76eacf2c2209301fbef4b01817d493224a69cf2ae77100ba80db1e4cc5facfd5d9e3f4c8e161d9653984525165f3094e4848d7d3eb04aae30bbbcbd96c0632a3b3d19c9091b77482529302104db6562f9f91076446211e829f28a9506cefd32246a4d4dcc742b0204622015d4f6aba38479c373e99ee7fdc0d4efd890c6453538fae92d5923060bbeca2fdeb5"}, &(0x7f0000000380)=0xc7) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c40)) [ 833.639163] *** Guest State *** [ 833.642894] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 833.651789] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 833.660952] CR3 = 0x0000000000000000 [ 833.664847] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 833.671575] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 833.677809] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 833.684746] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 833.693278] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 833.701319] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 833.709511] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 833.717695] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 833.725875] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 833.734055] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 833.742297] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 833.750320] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 833.758507] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 833.766727] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 833.773423] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 833.775464] binder: release 20326:20332 transaction 35 out, still active [ 833.780909] Interruptibility = 00000000 ActivityState = 00000000 [ 833.780926] *** Host State *** [ 833.780960] RIP = 0xffffffff812bde4b RSP = 0xffff880163a1f428 [ 833.781011] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 833.781053] FSBase=00007f000c9c8700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 833.781085] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 833.781121] CR0=0000000080050033 CR3=0000000164422000 CR4=00000000001426e0 [ 833.781156] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ac01260 [ 833.781187] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 833.781214] *** Control State *** [ 833.847993] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 833.854945] EntryControls=0000d1ff ExitControls=002fefff [ 833.860439] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 833.867620] VMEntry: intr_info=8000009f errcode=00000000 ilen=00000000 [ 833.874500] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 833.881120] reason=80000021 qualification=0000000000000000 00:18:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1000000000000a, 0x80000000005, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000400)="153f6234488d6d5d766070") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[], &(0x7f0000003ff6)="73797a7b616c6c65cce1", 0x0, 0xc3, &(0x7f0000000200)=""/195}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0xffffff7f00000000, 0x0, r3, 0x0, 0xf0fffffffffffe}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) 00:18:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) 00:18:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 00:18:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) [ 833.887678] IDTVectoring: info=00000000 errcode=00000000 [ 833.893581] TSC Offset = 0xfffffe3bfb3f70b6 [ 833.897938] TPR Threshold = 0x00 [ 833.901344] EPT pointer = 0x00000001057b901e [ 834.113565] device ip6gre0 entered promiscuous mode [ 834.120908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 834.133739] *** Guest State *** [ 834.137179] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 834.146316] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 834.155339] CR3 = 0x0000000000000000 [ 834.159174] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 834.165340] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 834.171437] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 834.178292] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 834.186502] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 834.194682] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 834.202892] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 834.210957] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 834.219166] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 834.227323] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 834.235511] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 834.243670] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 834.251791] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 834.259952] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 834.266582] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 834.274310] Interruptibility = 00000000 ActivityState = 00000000 [ 834.280646] *** Host State *** [ 834.284019] RIP = 0xffffffff812bde4b RSP = 0xffff8801645af428 [ 834.290055] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 834.297395] FSBase=00007f000c9a6700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 834.305385] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 834.311400] CR0=0000000080050033 CR3=0000000164422000 CR4=00000000001426f0 [ 834.318611] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac01260 [ 834.325498] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 834.331604] *** Control State *** [ 834.335241] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 834.342160] EntryControls=0000d1ff ExitControls=002fefff [ 834.347694] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 834.354871] VMEntry: intr_info=8000009f errcode=00000000 ilen=00000000 00:18:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1000000000000a, 0x80000000005, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000400)="153f6234488d6d5d766070") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[], &(0x7f0000003ff6)="73797a7b616c6c65cce1", 0x0, 0xc3, &(0x7f0000000200)=""/195}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0xffffff7f00000000, 0x0, r3, 0x0, 0xf0fffffffffffe}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) 00:18:23 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="20000000020101000000000000000000000000000c00020008000100e0001a26"], 0x20}}, 0x0) [ 834.361592] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 834.368397] reason=80000021 qualification=0000000000000000 [ 834.374887] IDTVectoring: info=00000000 errcode=00000000 [ 834.380444] TSC Offset = 0xfffffe3bfb3f4b11 [ 834.384925] TPR Threshold = 0x00 [ 834.388332] EPT pointer = 0x00000001057b901e 00:18:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x6000, 0x0, 0xf, 0x800, 0x0, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x100000000}, {0x2001, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff9, 0xb8, 0x800, 0x8000, 0xfffffffffffffc01, 0x4, 0x9}, {0x6000, 0xd000, 0x9, 0x3, 0x8001, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7fffffff, 0x9}, {0xd000, 0x7, 0xf, 0x0, 0x4, 0x8, 0x0, 0x4, 0x48, 0xfffffffffffeffff, 0x6, 0x7}, {0xd000, 0x2, 0x1f, 0x10000, 0x80, 0x8, 0x6, 0x3, 0x5, 0x3, 0x401, 0xffffffffffffffff}, {0x3000, 0x3000, 0x1f, 0x8, 0x5, 0x4, 0x4, 0x6, 0x4ec, 0x100000001, 0x9, 0x7ff}, {0x0, 0x11f000, 0x0, 0xffffffff00000000, 0x7fff, 0x9, 0x7082, 0x800, 0x0, 0x80000001, 0x80}, {0x10000, 0x3000, 0xa, 0x78ab18, 0x1, 0x400, 0x1, 0xfffffffffffffff8, 0x10000, 0x9, 0x29}, {0x7002, 0x6001}, {0x6004}, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x8000, 0x0, [0x7, 0x0, 0x9, 0x38]}) [ 834.624991] ================================================================== [ 834.632062] BUG: KMSAN: uninit-value in memcmp+0x117/0x180 [ 834.632062] CPU: 1 PID: 20361 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #69 [ 834.632062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.632062] Call Trace: [ 834.632062] dump_stack+0x306/0x460 [ 834.632062] ? memcmp+0x117/0x180 [ 834.632062] kmsan_report+0x1a2/0x2e0 [ 834.632062] __msan_warning+0x7c/0xe0 [ 834.632062] memcmp+0x117/0x180 [ 834.672207] dev_uc_add_excl+0x165/0x770 [ 834.672207] rtnl_fdb_add+0x10ad/0x12a0 [ 834.672207] ? rtnl_dump_all+0x540/0x540 [ 834.672207] rtnetlink_rcv_msg+0xa53/0x1590 [ 834.672207] ? __msan_poison_alloca+0x17a/0x210 [ 834.672207] ? kmsan_set_origin_inline+0x6b/0x120 [ 834.698432] ? kmsan_set_origin_inline+0x6b/0x120 [ 834.698432] ? kmsan_set_origin+0x83/0x140 [ 834.698432] netlink_rcv_skb+0x394/0x640 [ 834.698432] ? rtnetlink_bind+0x120/0x120 [ 834.698432] rtnetlink_rcv+0x50/0x60 [ 834.698432] netlink_unicast+0x166d/0x1720 [ 834.698432] ? rtnetlink_net_exit+0x90/0x90 [ 834.698432] netlink_sendmsg+0x1391/0x1420 [ 834.698432] ___sys_sendmsg+0xe47/0x1200 [ 834.698432] ? netlink_getsockopt+0x1560/0x1560 [ 834.698432] ? __fget+0x8f7/0x940 [ 834.745206] ? __fdget+0x318/0x430 [ 834.745206] __se_sys_sendmsg+0x307/0x460 [ 834.745206] __x64_sys_sendmsg+0x4a/0x70 [ 834.745206] do_syscall_64+0xbe/0x100 [ 834.745206] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.745206] RIP: 0033:0x457569 [ 834.745206] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 834.745206] RSP: 002b:00007fa02aa98c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.745206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 834.745206] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 834.745206] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 834.745206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa02aa996d4 [ 834.745206] R13: 00000000004c38a5 R14: 00000000004d5700 R15: 00000000ffffffff [ 834.745206] [ 834.745206] Uninit was created at: [ 834.745206] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 834.745206] kmsan_kmalloc+0xa4/0x120 [ 834.745206] kmsan_slab_alloc+0x10/0x20 [ 834.745206] __kmalloc_node_track_caller+0xb43/0x1400 [ 834.745206] __alloc_skb+0x422/0xe90 [ 834.745206] netlink_sendmsg+0xcaf/0x1420 [ 834.745206] ___sys_sendmsg+0xe47/0x1200 [ 834.745206] __se_sys_sendmsg+0x307/0x460 [ 834.745206] __x64_sys_sendmsg+0x4a/0x70 [ 834.745206] do_syscall_64+0xbe/0x100 [ 834.745206] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.745206] ================================================================== [ 834.745206] Disabling lock debugging due to kernel taint [ 834.745206] Kernel panic - not syncing: panic_on_warn set ... [ 834.745206] [ 834.745206] CPU: 1 PID: 20361 Comm: syz-executor0 Tainted: G B 4.19.0-rc7+ #69 [ 834.745206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.745206] Call Trace: [ 834.745206] dump_stack+0x306/0x460 [ 834.745206] panic+0x54c/0xafa [ 834.745206] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 834.745206] kmsan_report+0x2d3/0x2e0 [ 834.745206] __msan_warning+0x7c/0xe0 [ 834.745206] memcmp+0x117/0x180 [ 834.745206] dev_uc_add_excl+0x165/0x770 [ 834.745206] rtnl_fdb_add+0x10ad/0x12a0 [ 834.745206] ? rtnl_dump_all+0x540/0x540 [ 834.745206] rtnetlink_rcv_msg+0xa53/0x1590 [ 834.745206] ? __msan_poison_alloca+0x17a/0x210 [ 834.745206] ? kmsan_set_origin_inline+0x6b/0x120 [ 834.745206] ? kmsan_set_origin_inline+0x6b/0x120 [ 834.745206] ? kmsan_set_origin+0x83/0x140 [ 834.745206] netlink_rcv_skb+0x394/0x640 [ 834.745206] ? rtnetlink_bind+0x120/0x120 [ 834.745206] rtnetlink_rcv+0x50/0x60 [ 834.745206] netlink_unicast+0x166d/0x1720 [ 834.745206] ? rtnetlink_net_exit+0x90/0x90 [ 834.745206] netlink_sendmsg+0x1391/0x1420 [ 834.745206] ___sys_sendmsg+0xe47/0x1200 [ 834.745206] ? netlink_getsockopt+0x1560/0x1560 [ 834.745206] ? __fget+0x8f7/0x940 [ 834.745206] ? __fdget+0x318/0x430 [ 834.745206] __se_sys_sendmsg+0x307/0x460 [ 834.745206] __x64_sys_sendmsg+0x4a/0x70 [ 834.745206] do_syscall_64+0xbe/0x100 [ 834.745206] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.745206] RIP: 0033:0x457569 [ 834.745206] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 834.745206] RSP: 002b:00007fa02aa98c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.745206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 834.745206] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 834.745206] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 834.745206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa02aa996d4 [ 834.745206] R13: 00000000004c38a5 R14: 00000000004d5700 R15: 00000000ffffffff [ 834.745206] Kernel Offset: disabled [ 834.745206] Rebooting in 86400 seconds..