8c5065e90c19d0acdf68cb97866be9e6ba9c1e61d84", 0x90, 0x9}], 0x200000, &(0x7f0000000840)={[{@discard='discard', 0x2c}]}) 09:20:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:20:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8}) 09:20:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x624e9c1a) ioctl(r0, 0x890e, &(0x7f0000000080)="025cc83d6d345f8f761c70e8097104930a00807bcb715a6f368ab3cf63250f27bb444693096874940dfc796b703ac0bfa8a6e8532820a15cfabe552131db7c52d6cd60d2917eb78289d4a8fe39c9160d2673517f9e6f3d97bb4120effd24aba08602cac21905db0df0974957994da33db5b292591f2660") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xffffffffffff1074) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000f7ff000000"]) 09:20:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r2, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r3 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r3, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 09:20:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x5) 09:20:46 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:20:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0045878, &(0x7f0000000000)={0x80, 0x8}) 09:20:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) [ 223.462075] XFS (loop5): Invalid superblock magic number 09:20:47 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:20:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={r1}) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="1eea6a8f326eb2b3bfd6661428fdf927018ea8ef1a4c8120d8fead18e92bd45ba5d3e1a99025478cc30e6bcd1a6075e062255ef53c15a5a10ea1184826ee982e1ab2d68cb012c813f13beb0662301ed59c61b2c958ee45fc44d1623a5cf08a598e89a042791cfa24070109178971fb388bdbaa63c6eed88b4ee03be0805bf0dfb13c1d37bec4b0453106cb561f2baf96971aefa8b8f1410f45ad8f60a6a538a131d8f2709d655749f2a27ffd6f966ee8f3eb17238dec3f290d362a2387dd1e4622ee29a20aad489ef193a0b1a096d331978d0c8b7703191e", 0xd8, 0xffffffffffffffff) fchmodat(r0, &(0x7f0000000240)='./file0\x00', 0x100) keyctl$revoke(0x3, r2) 09:20:47 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:20:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x200000) name_to_handle_at(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="da00000009000000d198d7ac940c6545620ae4e571feebd42c30b3fe13f7f8e861e7163d019d711da879f1676514bb61d0885eeffa7a187c1db281d5c1d6edd99aa78e017681e91703b3d5cc8b31cea0edbeda088010fb3e72580635f2234a11b429b93074775c08edec72554e38e754b0cc027cca7d63bc248e397560d3a03e3f05f0038daaf26a7774d45ab5630bdfde1ad1e487416103bd600696cb99a161de9323253a3a3ad6396208be6d80fe5e6c1b5a49ad1d453e92f64924294bb4df703f7f7d3f1e8040430f4ad5d143d1feb225ea933da18c372462"], &(0x7f0000000080), 0x1400) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)) 09:20:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4020940d, &(0x7f0000000000)={0x80, 0x8}) 09:20:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) 09:20:47 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) sendto$unix(r1, &(0x7f0000000300)="40ea729feee7e2e06a82237cc8719a62a659e3b51f2568ecd8ba32d4b9078d23826463d8818d4dd4e7a8556ee40dda4c037d269b121737c6171dc8357e68e232087a58918a00dedb2958fdfac69086c10bf216475199ecb76296600e41f2", 0x5e, 0x4081, &(0x7f0000000400)=@file={0x1, './control/file0\x00'}, 0x6e) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@file={0x0, './control\x00'}, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x1, 0x8000000000}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:20:47 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) [ 224.021409] encrypted_key: master key parameter '+[ᩐ%Gk`ub%^<H&.֌;b0՜aXEDb:\YBy$' is invalid 09:20:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 09:20:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x402c5342, &(0x7f0000000000)={0x80, 0x8}) [ 224.066587] encrypted_key: master key parameter '+[ᩐ%Gk`ub%^<H&.֌;b0՜aXEDb:\YBy$' is invalid 09:20:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r2, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r3 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r3, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 09:20:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000}) 09:20:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="5d7ca9515c90a056764a2070") syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x2, 0x40001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000000c0)=ANY=[@ANYBLOB="1691a32549216ee20000"]) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x3) 09:20:47 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:20:47 executing program 4: socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0305302, &(0x7f0000000000)={0x80, 0x8}) 09:20:48 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000440)={{0x2, 0x4e22, @broadcast=0xffffffff}, {0x0, @random="4734a0df776b"}, 0x22, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 'lo\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:20:48 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:20:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0045877, &(0x7f0000000000)={0x80, 0x8}) 09:20:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 09:20:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x80000000, 0x401}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x80000000}, &(0x7f0000000340)=0x8) fanotify_mark(r1, 0x20, 0x10000, r1, &(0x7f00000000c0)='./file0\x00') ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x5) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)={0x5, 0x1}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000002c0)=0x4) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x7, 0x1, 0xb4dd, 0x9, 0x2f}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={r5, 0xffffffffffffffe0, 0x7f, 0xa900000000000000}, &(0x7f00000001c0)=0x10) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b470572bfee10b9857867599a1e89546dbc42d92d8843fca6ea1180840b3b149f77a79f7c9b6f8d7c888673706d7a67dfa719cd04c075c5c19b2bf08dd7e50f1d98c59ada329efe4b147493b"]) 09:20:48 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:20:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:20:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00}) 09:20:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40605346, &(0x7f0000000000)={0x80, 0x8}) 09:20:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="bff40401081000000000000000000000000000000a000000"], 0x18) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) ptrace$setopts(0x4200, r1, 0x200, 0x1) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e24, 0x9, @loopback={0x0, 0x1}, 0x9}, {0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x4}, 0x7fffffff, [0xbce, 0xb0bf, 0xfc, 0x9, 0x6, 0x7, 0x6, 0x8000]}, 0x5c) syslog(0x9, &(0x7f0000000040)=""/152, 0x98) socket$key(0xf, 0x3, 0x2) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000140)={0x7f, 0xfff, 0x1, 0x6, 0x7f, 0x200, 0x7f}) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x4, 0x8, 0xfffffffffffffffa, 0xffffffffffffffff, 0x10}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000b80)={r4, @in6={{0xa, 0x4e21, 0x15, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) sysfs$2(0x2, 0x3ff, &(0x7f0000000880)=""/133) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000840)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r5, 0x2}}, 0x18) symlink(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r6, 0x1}}, 0x18) 09:20:48 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000300)='./control/file0\x00', 0xc69, 0x2, &(0x7f0000000340)=[{&(0x7f0000000400)="ef44f85971b464aef78b2aee02fc6250ad759cb48654cc219818917ef36dff75328f564408b419c8d605e3e5814172f979a6844f37801344705a0585bdc96afab224508f2211180324ff4b62b23cb9e3238844f805c50ff8c1934051d900e4cf", 0x60, 0x2}, {&(0x7f0000000480)="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", 0xff, 0x2}], 0x2000, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '1250'}, 0x2c}, {@nodots='nodots', 0x2c}, {@fat=@fmask={'fmask', 0x3d, 0x1}, 0x2c}, {@dots='dots', 0x2c}, {@nodots='nodots', 0x2c}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="ffffffffffffffff8900000000000000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) rmdir(&(0x7f00000005c0)='./control/file0\x00') close(r0) rename(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)='./control/file0\x00') 09:20:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 09:20:48 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0189436, &(0x7f0000000000)={0x80, 0x8}) 09:20:48 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x400a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x5, 0x7fffffff, 0x4, 0x8001, 0x0, 0x5, 0x22045, 0x0, 0x4, 0x0, 0x8001, 0x7e, 0x200, 0x0, 0xfffffffffffffff9, 0xc28, 0x7, 0x4, 0x6059, 0xfc, 0x6, 0x5, 0xd2, 0x6, 0x20, 0x6, 0x1, 0x1, 0x46b, 0xfffffffffffff321, 0x7, 0x100000001, 0xafb00000, 0xff, 0xbb49, 0x8a0000, 0x0, 0x5, 0x0, @perf_config_ext={0x79, 0xfffffffffffffff8}, 0x23, 0x4, 0xffffffffffffffa2, 0x0, 0x368, 0x5, 0xffffffffffff0001}, r2, 0x8, r0, 0x1) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:49 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffffd7e, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:20:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 09:20:49 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r1 = syz_open_pts(0xffffffffffffffff, 0x800) ioctl$VT_WAITACTIVE(r1, 0x5607) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) fsetxattr(r2, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)="7b6e6f6465765d776c616e303abc637075736574776c616e3000", 0x1a, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xd}, 0xfff, 0x3, 0x2, 0x4, 0x891, 0x3, 0x7}, 0x20) 09:20:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x2, &(0x7f0000000000)={0x80, 0x8}) 09:20:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)=ANY=[@ANYBLOB="19008000"]) 09:20:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) 09:20:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0105303, &(0x7f0000000000)={0x80, 0x8}) 09:20:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}) 09:20:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f00000006c0)='./file0\x00', 0x4, 0x4, &(0x7f0000000880)=[{&(0x7f0000000700)="3c7e0e6c9225a9391b047d985702575c60b286dbd50e54dc96b9feeeb00155b5b821a08b34fb7af6d11fa834a62f128b9051540182a90a9e72179387f038e5715deb527b2525d781ef8160cc1ed14b2cdb9831c6b43f2557f3b1f1895cc54e80c67779d4877e9c4f3cb581a106", 0x6d, 0x4}, {&(0x7f0000000780)="30a68470109f1c7c35426099218de88d7ed7bf3683ff1e42285604e9a1d6629a1dcd626a13849bcd783e3a9ab1465c44182da5f723a8d4a1d175b7e67596c516606c40b9eaba3239e6da8268d413b5ac6d929fbc3e", 0x55, 0x4}, {&(0x7f0000000800)="306dfdec953493605e1e", 0xa}, {&(0x7f0000000840)="a62813c2270378b17f27e7451b6aa1", 0xf, 0xf602}], 0x20000, &(0x7f0000000900)={[{@jqfmt_vfsv1='jqfmt=vfsv1', 0x2c}, {@auto_da_alloc='auto_da_alloc', 0x2c}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3ff}, 0x2c}]}) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x5, &(0x7f0000000600)=[{&(0x7f0000000100)="12d662d44825c49bd37a63bd0d15698f192152bd000fa33c5ac6cef70406dcee73c2e1c0c6c0d1d0c926941d06e14a88771acd1baceb0fa2b5539773db9435817b7a6c0430fe550fe322dcf0345975e10bdda945", 0x54, 0x3}, {&(0x7f0000000200)="e789a0ac3514dd324966dde7bf070832d3a445ddcde42784de53e5299cdd096642c407593ece86906afbb25814c5027b4474497dd9fb92a40977ccd77e019f53cbf55a0fed955516dd22f47630b7743ed7459ba3e39b75d847b42a36239fcbcdbe0ddfcce42755f90a006ac02893d4842149c45fcd27edf5d5e10af66d0be87127", 0x81, 0x100000000}, {&(0x7f0000000340)="e32ca495c57058f7878434ec4e074d8ca225e68ae26256f37e847f7aad6932f1c19d0202be6792fd8b1343fdff9e334e0b34642b8a012b6f6fa20e233c3b1be33b54ce3f79e4225ce9aa98f2968cca98b8720dd2f5805dfb3f0844085740d3c73762c647d569e95ed49241b55587c87157e5093128b830361c5bb77405116049446acebbc2b8bb4e", 0x88, 0x2}, {&(0x7f0000000400)="bcadcd06cdaa2a58b54d4724eaf44451743ebea350269c15c15a2f497e3aaf8a517c51233ed97923c2dd87b6b4184923ef1b2906aa9fcae0fb9ef9ccdc26566c9273b03ef64669870e33c90b97c6a8768c647d3f4c70d93e37d7b029d4cdea6789e36e428cf28da96cc8803e4dbffab73cbcc19df8e87610517e772990b732b0746ac0cf0788beccacba2ba8815e215af5afbaa66b0b01b9db0e8d34e9d2a1ada44f68b564d6b8bf773ccefd69eb563ccffa8c1989b001597d988e827fe73442865e416a3148e386e6b74a221e8bd81c97f61df2b6f4ac64dddc320b2d6cdc631bf8b7fb2f496f", 0xe7, 0x1}, {&(0x7f0000000500)="2bea9cba7da9a404a31bed4331c5478e27631e49530e0b158887b3525fe5985a3ec87c748ed79e7450edd353286f736b5e1f90eaa9b3f3dbf0ac3436c47fffb52af756ac4f784ebd9cffb212e12b952327cc344ec17289a44bc8843ea502f00389b6f95097fdfd4e9c5ab278a6d97bed2c55e04aa7dc29793f81fcde0968a2537ad28495c75752f509ede011fe1748519ec0b488991cf987cadb46d98616250c498e975f3600bffcfda4f155cf8c1cd3f9a1a9daf1ca0bd7ce78e9ed5a1810289bb8a4b929ddf7", 0xc7, 0x4}], 0x0, &(0x7f00000002c0)={[{@uni_xlateno='uni_xlate=0', 0x2c}, {@uni_xlate='uni_xlate=1', 0x2c}, {@utf8='utf8=1', 0x2c}, {@shortname_winnt='shortname=winnt', 0x2c}, {@nonumtail='nnonumtail=1', 0x2c}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:20:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) unlink(&(0x7f00000000c0)='./file0\x00') ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000001c0)) [ 226.267680] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value 09:20:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0a85320, &(0x7f0000000000)={0x80, 0x8}) 09:20:49 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}) 09:20:49 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000cc0)=""/224, 0xe0}], 0x1}, 0x3) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="3a5ebdf51c1f0aefdbe1ee279fe71b88e9e1c3489e23016012622f20b51e1476ddee2bf84d51708e8412ea5b9e7eb5c551f58e2a71c0d4c7e40d6c63c4164acbed21236d8d7a68f661dc3a290beab2705b5086ef203c2ce4a948bda4890dee036655089f8492a6a886a46a969646d88de2baef39cf25c30fe4c3ec6736074ab915683f805c446225628ade46a5d6614887c14d667b3920d970c9cd22ce71adbd63bd36b1f3da", 0xa6}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="ca00eb8000595e82e02252651b6526f2e99b4b97279fcc791bc00dd854b7af46bf1daddc8c0ad798a769aecc6c93d9b802e13f738a3f9c0d71dbbe534d23cee6467198fa71b2c42ba332a38d3287cf088adc7acda9506af4da07fa4d6d3db8a9fea84ac9a8b5f7444fdcf683a3f3155f856b817fba439eaebeb136bbca224697529c279a141ef4c88761c0b760233471ccc735df5b5bc9f02f7519d4a15cf60481cf005d2a564f2ae403e83b3f257f8eb36d82d5625178864185282a4f118306375bc4", 0xc3}, {&(0x7f0000000880)="b8d4a038049b9d8e1a4246f0a2a989fb30b4716a866cc9484e495816cd4540ad697076bea701f27e324b62fa67cfea9f8febcf1d8300ea0e9b66555d49f5253a4771db405671c361d07fa7f48f9e6f3a343014064a9b1a8e8890e8d08379c096aa96620d6d2e2dcfefc82c64cb45c0aa466b2d01fefca2197e9b604941ea32851c0864881c1a95e01a10f27baf32e02e12923c96d5c6173efbd9b5b5", 0x9c}, {&(0x7f0000000600)="5b278e0edd11d1033e74fd54bec5fda9738e0042f3f48ed150a0a793c60435b1d0e121dc70acc19694c226f3559d97f50bfab3996014c8147babcea27e74b9b35c8696", 0x43}, {&(0x7f0000000940)="e54c9524c47d3ee52b21b71ce5133812738326ea9c5287afae698b964b3f40a47e8ed799b8d3236e62d5da79ebeead63cba9c570647327afa9b4b9f454e851d7def700d5bfaa2a838221b7f8b109baf666dee42ed6277a08068375bded05e4f46fa116a692953fd1ecf48fcdb21c0260150f7c34d245946c0f2b97e928509d6f95628ffe40f012", 0x87}, {&(0x7f00000007c0)="7659da091d6be4c888a64f073fb9954e333df37d0d03a1def4d99eb8701fb23c1e0c8baf8e13a5022a041f7866dedb", 0x2f}], 0x5, 0x0, 0x0, 0x20004000}, {0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=[@assoc={0x18, 0x117, 0x4, 0xc0e5}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3}], 0x48}], 0x3, 0x40000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000680)={r1, r2}) 09:20:49 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="10000000000022000100000001000000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:20:49 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a80)=""/185, 0xb9}, 0xfffffffffffffffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x5b) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140), 0x0, 0xfffffffffffffffe}, 0x20000810) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) [ 226.383339] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value 09:20:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000b7"]) 09:20:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00}) 09:20:49 executing program 4: r0 = eventfd(0x2) ioctl$void(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000540)={@loopback={0x0, 0x1}, 0x7, 0x2, 0x2, 0x2, 0x34, 0x0, 0x5}, 0x20) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x80800) flock(r2, 0x9) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x202082, 0x0) getsockname$netlink(r3, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000600)) socket$inet6(0xa, 0x7, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x6008080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet6_dccp_int(r3, 0x21, 0x1, &(0x7f0000000140)=0x2, 0x4) 09:20:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x404c534a, &(0x7f0000000000)={0x80, 0x8}) 09:20:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) 09:20:50 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) socket$kcm(0x29, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:20:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 09:20:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40bc5311, &(0x7f0000000000)={0x80, 0x8}) 09:20:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x32, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000000)) 09:20:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000100), 0x7) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x80045300, &(0x7f0000000000)={0x80, 0x8}) 09:20:50 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:20:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) r0 = shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 09:20:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xffffffffa876cad1}, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)) 09:20:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x408c5333, &(0x7f0000000000)={0x80, 0x8}) 09:20:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) 09:20:51 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback=0x7f000001, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:20:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40049409, &(0x7f0000000000)={0x80, 0x8}) 09:20:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x200) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x7f}, &(0x7f0000000200)=0x8) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r2, 0x0, 0x3f, &(0x7f0000000280), 0x4) socket$inet6(0xa, 0x3, 0xa) write$P9_RLERRORu(r0, &(0x7f00000002c0)={0x35, 0x7, 0x1, {{0x28, 'wlan1vmnet0$@wlan1]ppp0:\b%wlan1lo}]$user'}, 0xc0}}, 0x35) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d000000}) 09:20:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000000c0)='/dev/kvm\x00') get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000ffd000/0x1000)=nil, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)) 09:20:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505331, &(0x7f0000000000)={0x80, 0x8}) 09:20:51 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = add_key(&(0x7f00000005c0)='id_legacy\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000640)="d303", 0x2, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000700)="3b5edf23b53ecb0f28f9e7137007b4821971170bdd82230cb19626c1ed49", 0x1e, 0xfffffffffffffffe) r3 = request_key(&(0x7f0000000740)='.request_key_auth\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000007c0)='nnonumtail=1', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r2, r3}, &(0x7f0000000840)=""/194, 0xc2, &(0x7f0000000980)={&(0x7f0000000940)={'cmac(khazad-generic)\x00'}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000300)='./control\x00', 0x80000001, 0x2, &(0x7f0000000340)=[{&(0x7f0000000400)="8f0d375ea999f31e9c3f512f752943da69204e6f54c215097cc846840b8d6d510ab11eaa116a839232f56ca30c56990604328b59fbb87647cded35ea410eed21c51358d54ea212ba85658447969234319c06c1217489c7d34701d0ec06c00453f510ea184c94fc6cb0fc1b2f6c4776efa5284fde4adf0dce523962238b135005f2e2d48af4e650153ebc86e2fc6bc299c253ab682ca06f3e58e9e0b580ab3607e4d07699422677451c40941336d590852f031ba7c335d8399beda9e2ebcafaa3f476ff8f4c92558570d8e9213c12be37930793a68cdc84eefddce59f789901c9", 0xe0, 0x4}, {&(0x7f0000000500)="6a6306df9c72f5d1d046b53c63936b524ae6658c84b9ceaa04713413efb276593c479ae0f5e2cd8335cb48158da50bcbe00fb7222de1be3980712a0c898644858e7dfc6f37b97e983a4b0c0daf3a52087d99a0f8fd9e809adab3a46affd8890e0e69577e4a2413868be3215da5d3ff37c1e82981d13331df", 0x78, 0x40}], 0x42400, &(0x7f00000009c0)=ANY=[@ANYBLOB="73686f72749eff6a8ed0915fb59f6e616d613d778c6e39352c756e695f786c6174653d302c79d50c31ed2e7795e069e8cf3c5db537b86734546cbf3456aead8f82af301f2f2efbe545d7fbee"]) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="100000de00000100000001000000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) 09:20:51 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6, 0x5f, 0x51f, 0x5, 0x0, 0xffffffffffffff81, 0x240, 0x8, 0xfff, 0xfffffffffffffffd, 0xfff, 0x1, 0xfffffffffffff001, 0x2, 0x8ca, 0x1, 0x401, 0x1, 0x7, 0x2, 0x3, 0x100000000, 0x9f0, 0xd77, 0x1, 0x8, 0xc0, 0xc908, 0x0, 0xfff, 0x1, 0x3, 0x955, 0x80000000, 0x5, 0x6, 0x0, 0x401, 0x2, @perf_config_ext={0x1, 0x800}, 0x4000, 0x0, 0x7fffffff, 0x0, 0x2, 0x5, 0x9}, r1, 0x10, r0, 0x0) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 09:20:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000001000246414a4a9a5bc1cd1bc9ef993808d589844c8d993ab27a58cd17b5e4f5472cbfc3ecec66bc9c4bf58c50000000000000005fa8853ca7dc454c8a2b5ef2ae27b7984eb7f4651ea4ef4e47eaae8ca793e2f8951138201f0693bcebbd8acebdd09a682f4c5809d9df9f53d1a90d1b50f452044471da8fe9dca8a88d555815e3830caa82258674946a7dd1a64ab6388ff1b3500703c6f4392ea3d68ad874b4119598668e3f4b91841b0c43640f6c10c2b2ae77cac07ab74c800d791a4ec1e1ec92449c130d8f34db5e36a3c"]) 09:20:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000000)={0x80, 0x8}) 09:20:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 09:20:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:20:52 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000500)={{0x2, 0x1}, {0x9, 0x3}, 0x96, 0x6, 0x4}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000140)=[{}, {}, {}], 0x0, [{}]}, 0x88) 09:20:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:52 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) fcntl$notify(r0, 0x402, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc08c5334, &(0x7f0000000000)={0x80, 0x8}) 09:20:52 executing program 6: r0 = socket$inet6(0xa, 0x2000000080040001, 0x3) ioctl(r0, 0x890b, &(0x7f0000000000)="025c0164d8e082e3a6493d8ff401c7b7113f65db35e83d6d347ddd96e15e") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)) 09:20:52 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 09:20:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc02c5341, &(0x7f0000000000)={0x80, 0x8}) 09:20:52 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:20:52 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 09:20:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)={0x7, 0x0, [{0x8000000b, 0x7, 0x5, 0xfffffffffffffffd, 0x3, 0x1, 0xbb35}, {0x8000001f, 0x24, 0x2, 0xfffffffffffff795, 0x4, 0x4, 0x100}, {0x6, 0x4, 0x1, 0x8, 0x1, 0x2, 0x5}, {0x80000019, 0x7, 0x0, 0x1000, 0x1, 0x7de, 0x5}, {0x0, 0x7fffffff, 0x1, 0x9a0c, 0x3, 0x1f}, {0xc0000001, 0x4, 0x4, 0x4b, 0xde, 0x7, 0x9}, {0x8000001d, 0xfffffffffffffff8, 0x7, 0x9, 0x9, 0x401, 0x52}]}) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000001c0)=ANY=[@ANYBLOB="e40000002ff70000"]) 09:20:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0a85322, &(0x7f0000000000)={0x80, 0x8}) 09:20:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xffff, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r0}) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:20:53 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000500)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) r5 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x0, 0x2000) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000440)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) sendto(r0, &(0x7f0000000380), 0x0, 0x10, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) timerfd_gettime(r5, &(0x7f0000000480)) 09:20:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0605345, &(0x7f0000000000)={0x80, 0x8}) 09:20:53 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x9) pipe2(&(0x7f0000000100), 0x80000) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) unshare(0x100) 09:20:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 09:20:53 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:20:53 executing program 6: r0 = memfd_create(&(0x7f0000000180)="5d29736563757269747976626f786e657431a076626f786e65743173656375726974792970726f63262300", 0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e24, 0xfffffffffffff95d, @empty, 0x6}}, 0x1, 0x0, 0xe87e, 0xbe98, 0x88}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={r1, 0x6}, 0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200003, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000040)={0xc, 0x4, 0x1e1c}) socketpair$inet(0x2, 0x7, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000005804000058020000000000000000000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaa180000000000000000000000000000000000000000000000000000e0000002ffffffff0300000000000000e0000001ac1414bbffffff00000000ff412061cdda1d00000000000000000000000000000000000000ff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ff0000ff00ff000000000000000000000008ffff001ffc0100030001726f7365300000000000000000000000626f6e645f736c6176655f300000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a0000000000000000000000f0001801000000000000000000000000000000000000000000000000000028000000000000000000000000000000000000000000000000000000000000004001000000000000ffffffff00000003ffffffff000000ffaaaaaaaaaaaa00000000000000000000000000000000000000ffff00ffff00000000000000000000a5c20c3068d9000000000000000000000000000000000000b8ffffffffff000000000000000000000002000101ff00040d520006697036746e6c3000000000000000000065716c0000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a8) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f00000001c0)) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) 09:20:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:20:53 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet6(0xa, 0x40000000000003, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x5) 09:20:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc04c5349, &(0x7f0000000000)={0x80, 0x8}) 09:20:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) socketpair(0x4, 0x0, 0x8000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000000c0)=""/179) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@generic={0x1d, "43fba50f9da2d822d791a4e26016db3e2085003508862415438535624a6d83f558ba175d48ced3ef6bb49236d1ccc4aae3ded9e938d98574caae84806035f99b21afdc7e267feed1701352b33bfa472fd8c3fc07f949d899940f2ac029ffd02a6d4f7b91cceaddc99489ec44a25e0d4a74d002cb2414ed92f81dbaf2cd9c"}, {&(0x7f0000000200)=""/45, 0x2d}, &(0x7f0000000240)}, 0xa0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f000000}) 09:20:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x80045301, &(0x7f0000000000)={0x80, 0x8}) 09:20:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:20:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)) 09:20:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40a85321, &(0x7f0000000000)={0x80, 0x8}) 09:20:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}) 09:20:54 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000300)={0x8, 0x1, 0x8, 0x1}, 0x8) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000010000db064f30fe84110001000000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:20:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x2, 0x40000000, 0x0, 0xffffffffffffffc1}, 0x20) ioctl(r0, 0x10005, &(0x7f0000000340)="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") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) ioctl$TIOCNXCL(r1, 0x540d) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000200)={0x8, 0x8, 0x1, 0x8, 0x80000000, 0x1ff, 0xaad, 0x9, 0x5, 0x4}) 09:20:54 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}]}}) socketpair(0x5, 0xb, 0x1, &(0x7f0000000380)) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r5) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:20:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc05c5340, &(0x7f0000000000)={0x80, 0x8}) 09:20:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 09:20:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @multicast1}, &(0x7f0000000040)=0xc) r4 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x0, 0x4e24, 0x0, 0x0, 0x80, 0x80, 0x11, r3, r4}, {0x7, 0x2, 0x8, 0x8000000000, 0x2a8, 0xa8d, 0x4, 0x8}, {0xfffffffffffffff8, 0x7fff, 0x5, 0x1}, 0xfffffffffffffff7, 0x6e6bb5, 0x0, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0x2, 0x4d3, 0x3c}, 0xa, @in, 0x3506, 0x1, 0x1, 0x303b2dc3, 0x1, 0x0, 0x1}}, 0xe8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000ff070000237823f0a103b0316919cee10a"]) 09:20:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x200002, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000340)={'nat\x00', 0x1000, "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"}, &(0x7f00000000c0)=0x10a5) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0bc5310, &(0x7f0000000000)={0x80, 0x8}) 09:20:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 09:20:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:20:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000001c0)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40001, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000080)={0x7d, @rand_addr=0x2, 0x4e23, 0x1, 'ovf\x00', 0x11, 0x9, 0x38}, 0x2c) 09:20:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x24a) exit_group(0x3) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc08c5336, &(0x7f0000000000)={0x80, 0x8}) 09:20:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/8) 09:20:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00}) 09:20:55 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000440)={{0x3, 0x3}, 'port1\x00', 0xc0, 0x1000, 0xfffffffffffffc00, 0x5, 0x1000, 0x1, 0xfffffffffffffffc, 0x0, 0x2, 0x80000001}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) getsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000380), &(0x7f0000000500)=0x4) 09:20:55 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) open_by_handle_at(r0, &(0x7f0000000400)={0x8c, 0x4a9, "ee4e8bbcc6da900df9b16283cda493d028be62b7f3f00fcf471aff0a88d8478557af0c70eca18c886c19d81d8743f2ba9b9f1819adf165c1593605a05a4fb722e3ef016d539cac31df40b1d4339f5618a4246598108c3721ca8f60bd332c606eecbe6478fb506c671cfca3e49cb3f0cd4e3c0a10595fa47b7c9fba7e9db75e7def03c71a"}, 0x800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x10181) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000300)=0x3ff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000540)='efs\x00', 0x1, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:20:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2481, 0x4) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000230000000200"]) 09:20:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/8) 09:20:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x5450, &(0x7f0000000000)={0x80, 0x8}) 09:20:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00}) 09:20:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffff2f) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/8) 09:20:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='quota=off'}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000400)={0x6, r1, 0x1}) socket$inet6(0xa, 0x5, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x2, &(0x7f0000000280)=[{&(0x7f0000000200)="70ea776993", 0x5}, {&(0x7f0000000240)="a49ea543088541dcda4b5ba94184e153dccea8e3b35db82d796e4eb8b42abb2f53353b4bf414193ff4f5d3d735d6", 0x2e, 0x3e}], 0x31000, &(0x7f00000002c0)={[{@quota_off='quota=off', 0x2c}, {@localflocks='localflocks', 0x2c}, {@quota_account='quota=account', 0x2c}]}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000440)=0x10001, 0x4) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:20:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40a85323, &(0x7f0000000000)={0x80, 0x8}) 09:20:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}) 09:20:55 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="bff40401081000000000000000000000000000000a000000"], 0x18) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) ptrace$setopts(0x4200, r1, 0x200, 0x1) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e24, 0x9, @loopback={0x0, 0x1}, 0x9}, {0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x4}, 0x7fffffff, [0xbce, 0xb0bf, 0xfc, 0x9, 0x6, 0x7, 0x6, 0x8000]}, 0x5c) syslog(0x9, &(0x7f0000000040)=""/152, 0x98) socket$key(0xf, 0x3, 0x2) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000140)={0x7f, 0xfff, 0x1, 0x6, 0x7f, 0x200, 0x7f}) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x4, 0x8, 0xfffffffffffffffa, 0xffffffffffffffff, 0x10}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000b80)={r4, @in6={{0xa, 0x4e21, 0x15, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) sysfs$2(0x2, 0x3ff, &(0x7f0000000880)=""/133) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000840)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r5, 0x2}}, 0x18) symlink(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r6, 0x1}}, 0x18) 09:20:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="bff40401081000000000000000000000000000000a000000"], 0x18) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) ptrace$setopts(0x4200, r1, 0x200, 0x1) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e24, 0x9, @loopback={0x0, 0x1}, 0x9}, {0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x4}, 0x7fffffff, [0xbce, 0xb0bf, 0xfc, 0x9, 0x6, 0x7, 0x6, 0x8000]}, 0x5c) syslog(0x9, &(0x7f0000000040)=""/152, 0x98) socket$key(0xf, 0x3, 0x2) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000140)={0x7f, 0xfff, 0x1, 0x6, 0x7f, 0x200, 0x7f}) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x4, 0x8, 0xfffffffffffffffa, 0xffffffffffffffff, 0x10}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000b80)={r4, @in6={{0xa, 0x4e21, 0x15, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) sysfs$2(0x2, 0x3ff, &(0x7f0000000880)=""/133) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000840)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r5, 0x2}}, 0x18) symlink(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r6, 0x1}}, 0x18) 09:20:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x5451, &(0x7f0000000000)={0x80, 0x8}) 09:20:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={r1}) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="1eea6a8f326eb2b3bfd6661428fdf927018ea8ef1a4c8120d8fead18e92bd45ba5d3e1a99025478cc30e6bcd1a6075e062255ef53c15a5a10ea1184826ee982e1ab2d68cb012c813f13beb0662301ed59c61b2c958ee45fc44d1623a5cf08a598e89a042791cfa24070109178971fb388bdbaa63c6eed88b4ee03be0805bf0dfb13c1d37bec4b0453106cb561f2baf96971aefa8b8f1410f45ad8f60a6a538a131d8f2709d655749f2a27ffd6f966ee8f3eb17238dec3f290d362a2387dd1e4622ee29a20aad489ef193a0b1a096d331978d0c8b7703191e", 0xd8, 0xffffffffffffffff) fchmodat(r0, &(0x7f0000000240)='./file0\x00', 0x100) keyctl$revoke(0x3, r2) [ 232.558180] encrypted_key: master key parameter '+[ᩐ%Gk`ub%^<H&.֌;b0՜aXEDb:\YBy$' is invalid 09:20:56 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:20:56 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="bff40401081000000000000000000000000000000a000000"], 0x18) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) ptrace$setopts(0x4200, r1, 0x200, 0x1) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e24, 0x9, @loopback={0x0, 0x1}, 0x9}, {0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x4}, 0x7fffffff, [0xbce, 0xb0bf, 0xfc, 0x9, 0x6, 0x7, 0x6, 0x8000]}, 0x5c) syslog(0x9, &(0x7f0000000040)=""/152, 0x98) socket$key(0xf, 0x3, 0x2) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000140)={0x7f, 0xfff, 0x1, 0x6, 0x7f, 0x200, 0x7f}) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x4, 0x8, 0xfffffffffffffffa, 0xffffffffffffffff, 0x10}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000b80)={r4, @in6={{0xa, 0x4e21, 0x15, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) sysfs$2(0x2, 0x3ff, &(0x7f0000000880)=""/133) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000840)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r5, 0x2}}, 0x18) symlink(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r6, 0x1}}, 0x18) 09:20:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}) 09:20:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x5460, &(0x7f0000000000)={0x80, 0x8}) 09:20:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000000c0)) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff6000/0x4000)=nil) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) r1 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)='/dev/sequencer2\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)=']\x00', r1) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:20:56 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:20:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:20:56 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffffffff, 0x200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000300)=0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000400)=0x4) timer_create(0x4, &(0x7f0000000440)={0x0, 0x16, 0x1, @tid=r2}, &(0x7f0000000480)) close(r0) ioctl$int_in(r0, 0x0, &(0x7f00000004c0)=0x10000) 09:20:56 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:20:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00}) 09:20:56 executing program 6 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000200)=""/210) 09:20:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x5421, &(0x7f0000000000)={0x80, 0x8}) [ 233.514906] FAULT_INJECTION: forcing a failure. [ 233.514906] name failslab, interval 1, probability 0, space 0, times 0 [ 233.526198] CPU: 1 PID: 15519 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 233.534956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.544316] Call Trace: [ 233.546916] dump_stack+0x1c9/0x2b4 [ 233.550551] ? dump_stack_print_info.cold.2+0x52/0x52 [ 233.555757] ? alloc_set_pte+0xaf6/0x1790 [ 233.559926] should_fail.cold.4+0xa/0x11 [ 233.564016] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 233.569128] ? trace_hardirqs_on+0x10/0x10 [ 233.573375] ? xa_set_tag+0x40/0x40 [ 233.577030] ? environ_open+0x90/0x90 [ 233.580832] ? trace_hardirqs_on+0x10/0x10 [ 233.585067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 233.590611] ? trace_hardirqs_on+0x10/0x10 [ 233.594841] ? lock_acquire+0x1e4/0x540 [ 233.598818] ? lock_acquire+0x1e4/0x540 [ 233.602785] ? fs_reclaim_acquire+0x20/0x20 [ 233.607100] ? lock_downgrade+0x8f0/0x8f0 [ 233.611240] ? rcu_note_context_switch+0x730/0x730 [ 233.616176] ? check_same_owner+0x340/0x340 [ 233.620493] ? rcu_note_context_switch+0x730/0x730 [ 233.625420] __should_failslab+0x124/0x180 [ 233.629651] should_failslab+0x9/0x14 [ 233.633456] kmem_cache_alloc_trace+0x2cb/0x780 [ 233.638120] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 233.643135] snd_mixer_oss_get_volume1_vol.isra.13+0xa3/0x5d0 [ 233.649028] ? lock_release+0xa30/0xa30 [ 233.653004] ? check_same_owner+0x340/0x340 [ 233.657327] snd_mixer_oss_get_volume1+0x231/0x618 [ 233.662255] snd_mixer_oss_ioctl1+0x305/0x1ce0 [ 233.666837] ? snd_mixer_oss_get_volume1_vol.isra.13+0x5d0/0x5d0 [ 233.672976] ? snd_mixer_oss_proc_read+0x290/0x290 [ 233.677911] ? lock_acquire+0x1e4/0x540 [ 233.681877] ? __fget+0x4ac/0x740 [ 233.685320] ? lock_downgrade+0x8f0/0x8f0 [ 233.689461] ? lock_release+0xa30/0xa30 [ 233.693425] ? pid_task+0x115/0x200 [ 233.697048] ? __f_unlock_pos+0x19/0x20 [ 233.701021] ? __fget+0x4d5/0x740 [ 233.704479] ? ksys_dup3+0x690/0x690 [ 233.708190] ? kasan_check_write+0x14/0x20 [ 233.712607] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 233.717530] snd_mixer_oss_ioctl+0x47/0x60 [ 233.721754] ? snd_mixer_oss_ioctl_compat+0x70/0x70 [ 233.726775] do_vfs_ioctl+0x1de/0x1720 [ 233.730654] ? fsnotify_first_mark+0x350/0x350 [ 233.735223] ? __fsnotify_parent+0xcc/0x420 [ 233.739535] ? ioctl_preallocate+0x300/0x300 [ 233.743932] ? __fget_light+0x2f7/0x440 [ 233.747895] ? fget_raw+0x20/0x20 [ 233.751342] ? __sb_end_write+0xac/0xe0 [ 233.755334] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 233.760870] ? fput+0x130/0x1a0 [ 233.764139] ? ksys_write+0x1ae/0x260 [ 233.767944] ? security_file_ioctl+0x94/0xc0 [ 233.772362] ksys_ioctl+0xa9/0xd0 [ 233.775808] __x64_sys_ioctl+0x73/0xb0 [ 233.779690] do_syscall_64+0x1b9/0x820 [ 233.783565] ? finish_task_switch+0x1d3/0x870 [ 233.788054] ? syscall_return_slowpath+0x5e0/0x5e0 [ 233.792970] ? syscall_return_slowpath+0x31d/0x5e0 [ 233.797901] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 233.802910] ? prepare_exit_to_usermode+0x291/0x3b0 [ 233.807926] ? perf_trace_sys_enter+0xb10/0xb10 [ 233.812585] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 233.817424] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.822600] RIP: 0033:0x455e29 [ 233.825777] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 233.845085] RSP: 002b:00007f642ef42c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.853045] RAX: ffffffffffffffda RBX: 00007f642ef436d4 RCX: 0000000000455e29 09:20:57 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:20:57 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=0xffffffffffffff9c, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) [ 233.860313] RDX: 0000000020000040 RSI: 0000000080404506 RDI: 0000000000000014 [ 233.867570] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 233.874844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 233.882108] R13: 00000000004bd5b5 R14: 00000000004cbbe8 R15: 0000000000000000 09:20:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 09:20:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x5452, &(0x7f0000000000)={0x80, 0x8}) 09:20:57 executing program 1: link(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcs\x00', 0x2, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000001640)=0x8e2, 0x4) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x1ff0, 0x8]) syz_emit_ethernet(0x19, &(0x7f0000000140)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@llc_tr={0x11, {@snap={0xaa, 0xab, '-', "cfd5eb", 0xcb7d, 'S^t'}}}}}, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, [0x179, 0x8]}) 09:20:57 executing program 6 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:57 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f00000003c0)=""/213, 0xd5}], 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000002c0)=r2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000005c0)={r5, 0x62, "395c034aaadb6f1d7300300796aac9a6d1b9731665c1e932a4af40788f9c5b625f96d0d89328b54d3d52f72406c06d2db1cf298d6673058728643bd18d1ae473a0bc87fb52249a0cde54f35839bc1d47810fd9174f77901ac6a7b2f104306b914984"}, &(0x7f0000000280)=0x6a) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x1b, 0x100}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000500)={r6, @in6={{0xa, 0x4e20, 0x3, @empty, 0x2}}}, &(0x7f0000000100)=0x84) [ 234.004976] FAULT_INJECTION: forcing a failure. [ 234.004976] name failslab, interval 1, probability 0, space 0, times 0 [ 234.016464] CPU: 0 PID: 15547 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 234.025048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.034401] Call Trace: [ 234.036998] dump_stack+0x1c9/0x2b4 [ 234.040627] ? dump_stack_print_info.cold.2+0x52/0x52 [ 234.045913] ? __kernel_text_address+0xd/0x40 [ 234.050406] ? unwind_get_return_address+0x61/0xa0 [ 234.055332] should_fail.cold.4+0xa/0x11 [ 234.059405] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 234.064502] ? save_stack+0xa9/0xd0 [ 234.068115] ? save_stack+0x43/0xd0 [ 234.071744] ? kasan_kmalloc+0xc4/0xe0 [ 234.075630] ? kmem_cache_alloc_trace+0x152/0x780 [ 234.080462] ? snd_mixer_oss_get_volume1_vol.isra.13+0xa3/0x5d0 [ 234.086507] ? snd_mixer_oss_get_volume1+0x231/0x618 [ 234.091953] ? snd_mixer_oss_ioctl1+0x305/0x1ce0 [ 234.096697] ? do_vfs_ioctl+0x1de/0x1720 [ 234.100743] ? ksys_ioctl+0xa9/0xd0 [ 234.104353] ? __x64_sys_ioctl+0x73/0xb0 [ 234.108400] ? do_syscall_64+0x1b9/0x820 [ 234.112458] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.117816] ? trace_hardirqs_on+0x10/0x10 [ 234.122041] ? lock_acquire+0x1e4/0x540 [ 234.126006] ? lock_acquire+0x1e4/0x540 [ 234.129970] ? fs_reclaim_acquire+0x20/0x20 [ 234.134279] ? lock_downgrade+0x8f0/0x8f0 [ 234.138426] ? rcu_note_context_switch+0x730/0x730 [ 234.143364] ? check_same_owner+0x340/0x340 [ 234.147769] ? rcu_note_context_switch+0x730/0x730 [ 234.152691] __should_failslab+0x124/0x180 [ 234.156924] should_failslab+0x9/0x14 [ 234.160719] kmem_cache_alloc_trace+0x2cb/0x780 [ 234.165380] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 234.170401] snd_mixer_oss_get_volume1_vol.isra.13+0xde/0x5d0 [ 234.176280] ? lock_release+0xa30/0xa30 [ 234.180240] ? check_same_owner+0x340/0x340 [ 234.184569] snd_mixer_oss_get_volume1+0x231/0x618 [ 234.189674] snd_mixer_oss_ioctl1+0x305/0x1ce0 [ 234.194261] ? snd_mixer_oss_get_volume1_vol.isra.13+0x5d0/0x5d0 [ 234.200402] ? snd_mixer_oss_proc_read+0x290/0x290 [ 234.205354] ? lock_acquire+0x1e4/0x540 [ 234.209322] ? __fget+0x4ac/0x740 [ 234.212768] ? lock_downgrade+0x8f0/0x8f0 [ 234.216913] ? lock_release+0xa30/0xa30 [ 234.220877] ? pid_task+0x115/0x200 [ 234.224521] ? __f_unlock_pos+0x19/0x20 [ 234.228507] ? __fget+0x4d5/0x740 [ 234.231952] ? ksys_dup3+0x690/0x690 [ 234.235664] ? kasan_check_write+0x14/0x20 [ 234.239889] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 234.244829] snd_mixer_oss_ioctl+0x47/0x60 [ 234.249055] ? snd_mixer_oss_ioctl_compat+0x70/0x70 [ 234.254074] do_vfs_ioctl+0x1de/0x1720 [ 234.257953] ? fsnotify_first_mark+0x350/0x350 [ 234.262522] ? __fsnotify_parent+0xcc/0x420 [ 234.266838] ? ioctl_preallocate+0x300/0x300 [ 234.271249] ? __fget_light+0x2f7/0x440 [ 234.275222] ? fget_raw+0x20/0x20 [ 234.278686] ? __sb_end_write+0xac/0xe0 [ 234.282653] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 234.288179] ? fput+0x130/0x1a0 [ 234.291447] ? ksys_write+0x1ae/0x260 [ 234.295254] ? security_file_ioctl+0x94/0xc0 [ 234.299699] ksys_ioctl+0xa9/0xd0 [ 234.303146] __x64_sys_ioctl+0x73/0xb0 [ 234.307023] do_syscall_64+0x1b9/0x820 [ 234.310898] ? finish_task_switch+0x1d3/0x870 [ 234.315399] ? syscall_return_slowpath+0x5e0/0x5e0 [ 234.320317] ? syscall_return_slowpath+0x31d/0x5e0 [ 234.325231] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 234.330235] ? prepare_exit_to_usermode+0x291/0x3b0 [ 234.335245] ? perf_trace_sys_enter+0xb10/0xb10 [ 234.339900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.344739] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.349919] RIP: 0033:0x455e29 [ 234.353099] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.372393] RSP: 002b:00007f642ef42c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.380101] RAX: ffffffffffffffda RBX: 00007f642ef436d4 RCX: 0000000000455e29 [ 234.387358] RDX: 0000000020000040 RSI: 0000000080404506 RDI: 0000000000000014 [ 234.394614] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 09:20:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}) 09:20:57 executing program 6 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) [ 234.401878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 234.409133] R13: 00000000004bd5b5 R14: 00000000004cbbe8 R15: 0000000000000001 09:20:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:20:57 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100900800000009700000000000000004b1186ab155693d98954fdb6cbf9bc8c2a57539bc32b404da45b226dcf7dcc99f664b50f93528e181e1f4fbe13632fead217ac5f93215a179cd1f94b"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:20:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc08c5332, &(0x7f0000000000)={0x80, 0x8}) 09:20:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f00000001c0)={0x1c, 0x28, 0x1, 0x0, 0x0, {0xffffffffffffffff}, [@generic="7b6c6e6605"]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xd, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2, 0x1d}}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000200)=""/189, &(0x7f0000000140)=0xbd) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000180)) 09:20:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:20:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 09:20:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000600)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000640)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@deltfilter={0x3c, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, r2, {0xf, 0x3}, {0x9, 0xfffb}, {0xffff, 0xf}}, [@filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xf}}]}}]}, 0x3c}, 0x1}, 0x14) 09:20:57 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1, 0x0, 0x0, 0x80000000}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:20:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x40049409, &(0x7f0000000040)=""/8) 09:20:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)) 09:20:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:20:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x5452, &(0x7f0000000040)=""/8) 09:20:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) [ 234.831357] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:20:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x5460, &(0x7f0000000040)=""/8) 09:20:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) 09:20:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0xc020660b, &(0x7f0000000040)=""/8) 09:20:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:20:59 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x101600) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./control\x00', 0x40) creat(&(0x7f0000000440)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000000)={0x80, 0x8}) 09:21:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 09:21:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x5450, &(0x7f0000000040)=""/8) 09:21:00 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 09:21:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100008000000000000000130d4f"]) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0xc0010140]}) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8, 0x22001) 09:21:00 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$P9_RLERRORu(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1100000007010004006964077e39e78b31"], 0x11) r4 = dup2(r1, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000440)={{0x3, 0x0, 0x1f, 0x2, 0x4}, 0x1ff, 0x8f13, 'id0\x00', 'timer1\x00', 0x0, 0x28a, 0x3d8, 0x7, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000a00)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0xfffffffffffffef8, &(0x7f0000000780), 0xd3}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r5) connect(r1, &(0x7f0000000540)=@xdp={0x2c, 0x1, r5, 0x1}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) statx(r4, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000880)) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x4, &(0x7f0000000380)=@raw=[@alu={0x7, 0x100000000, 0x7, 0x0, 0xf, 0xfffffffffffffffc, 0x1}, @exit={0x95}], &(0x7f00000005c0)='GPL\x00', 0x0, 0x18, &(0x7f0000000600)=""/24, 0x41100, 0x1, [], r5}, 0x48) 09:21:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0xc0045878, &(0x7f0000000040)=""/8) 09:21:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x400000) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x5, 0xfe8, 0x4, 0x3}) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00000000000000}) 09:21:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc020660b, &(0x7f0000000000)={0x80, 0x8}) 09:21:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404505, &(0x7f0000000040)=""/8) 09:21:00 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000140)=""/251) r1 = perf_event_open(&(0x7f000001d000)={0x8000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc603, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 09:21:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) r0 = shmget(0x0, 0x2000, 0x54000c00, &(0x7f0000ff6000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) 09:21:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 09:21:01 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000540)=0xa80, 0x8) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000580)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f00000008c0)='./control\x00', &(0x7f0000000800)="627485667300b20d11f8d204032bb4e7dcd7e1dbb7cc5ba6d19b42b6c2edccd7771145a04a66446042bbefd9e75aea080e5f67df8505931d4c976d449f1cb7f477884e600517b4400d01e97dd8b254ea1cf5f6ade07a95f0354bbeb1c20e260dbc487291ad1b200ed4954cb5d7debf674d3f67b4db0299d7280db04cb638c18a5c38720c66dc307b39e18f921ff4e740eb3ec0ed3d75ff", 0x48, &(0x7f0000000900)="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") umount2(&(0x7f0000000200)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="10000000000000000000000016000000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) io_setup(0x7, &(0x7f0000000080)=0x0) io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x2, r3, &(0x7f0000000400)="56037412ee53367b84e449bab0bc4cc6810c5ba7fe98720f693f31deb470096301a2a4db2adc50c3864f4be116db14a3c4d319db6d86f34422483f00a972a6ca19b2f792f9d2f4c3471d45fc326894457fde54214d98ca6ef575ad83aa3085ba343e68a02d5be342fb77015c3bcc85c526b2ce8cb1f9fa645174730b4ede85853b4b61f700e3db9f65e96aa37ababc174d98067c2f001206cddec1a64f941178011e86ac4aa1aceb2df9f8444bbe38c48d4f121ef935f271570c72dbf1969a2bb44daf47b390267e3cf698476def4343d2f48c172fba94843573e9a100c2c207a4", 0xe1, 0x93, 0x0, 0x0, r3}, &(0x7f0000000340)) 09:21:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc08c5335, &(0x7f0000000000)={0x80, 0x8}) 09:21:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in6=@local}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) 09:21:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000100)={0xa, 0x3, 0xffffffffffffffc1, 0x4, '\x00', 0x1000}) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x6b373d41, 0x9, "cc23d74946ed697af042a3e89e9947de2b9fe1c60afbd20a476d057968e20765a241fc0562cb8badc8707875e5b2b25df15e035d2f4503c5baaad62f050f71a507937321d2abbd63197b3071ea7e088ea3fddaeaff28696f08749ef1a4c8eb526182a96cb2a6931a23c60caf6f42e26a6e0d81502c845e310aeb1144973cb84866f94809224587ff60eec226bf3e93055c400afe4f4024752a132011fb584c8b65280865d4afdbe50284ef9481334109a1dcce8f563bf5a1db2944b4edc71694e0f80710b11bc9fa5055010526cbd4b18bb08e5c9dbd7ddec755f9c26e76a2d842df065020402aa589b532601a282761f1a29aed1b6a685af2703e0f8464a6ab", 0x2f, 0x49f27674, 0xb1b, 0xffffffffffffffff, 0xc92b0e8, 0x3800000000000000, 0x6}, r1}}, 0x120) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) 09:21:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x8040451e, &(0x7f0000000040)=""/8) 09:21:01 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d000000}) 09:21:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:01 executing program 0: socketpair$inet(0x2, 0xf, 0xe5, &(0x7f0000000380)) r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) getsockname(r0, &(0x7f0000000440)=@in={0x0, 0x0, @loopback}, &(0x7f0000000140)=0x80) 09:21:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0xbf, 0x8}) 09:21:01 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 09:21:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x5451, &(0x7f0000000040)=""/8) 09:21:01 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x80010, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x98, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, r2, 0x4}, @acquire={0x40046305, 0x3}, @register_looper={0x630b}, @release={0x40046306, 0x3}, @dead_binder_done={0x40086310, 0x4}, @reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x30, 0x40, &(0x7f0000000100)=[@flat={0x73622a85, 0x0, r3, 0x2}, @flat={0x73682a85, 0x10a, r4, 0x3}], &(0x7f0000000140)=[0x28, 0x28, 0x28, 0x38, 0x20, 0x70, 0x28, 0x70]}, 0x70000}}, @acquire={0x40046305, 0x2}, @register_looper={0x630b}, @increfs={0x40046304}, @exit_looper={0x630d}], 0xfc, 0x0, &(0x7f0000000340)="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"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:01 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x101600) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./control\x00', 0x40) creat(&(0x7f0000000440)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0xc0045877, &(0x7f0000000040)=""/8) 09:21:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x5}) 09:21:02 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fadvise64(r0, 0x0, 0x8, 0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'nat\x00'}, &(0x7f0000000080)=0x78) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:02 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 09:21:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/85) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r2) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x9) 09:21:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0xc0189436, &(0x7f0000000040)=""/8) 09:21:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x7}) 09:21:02 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x101600) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./control\x00', 0x40) creat(&(0x7f0000000440)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:02 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:02 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) mount$9p_tcp(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYBLOB="6bed2ccd417cecbf8a837472616e733d7463702c706f72743d3078303030303030303030303030346532322c6d6d61701b6163636573733d757365722c6361"]) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x5421, &(0x7f0000000040)=""/8) 09:21:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xffffffffffe00004) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x3, 0x8, 0x80000000, 0x7}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x1, 0x7, 0x1f, 'queue1\x00', 0xffff}) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:03 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 09:21:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x2}) 09:21:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x3}) 09:21:03 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00000000000000}) 09:21:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x2, &(0x7f0000000040)=""/8) 09:21:03 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x200, 0x4440) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000480)=""/4096) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) setrlimit(0x6, &(0x7f00000000c0)={0x100, 0x1000}) 09:21:03 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./control\x00', 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x6}) 09:21:03 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 09:21:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x4020940d, &(0x7f0000000040)=""/8) 09:21:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0xb831, 0x101000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x100000000}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000004c0)=r1, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x58) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) getsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f00000002c0)=""/217, &(0x7f00000003c0)=0xd9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000280)=0x3db, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, 0x61, r3}) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:03 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x4200, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000180)={0x88, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) syz_mount_image$reiserfs(&(0x7f0000001800)='reiserfs\x00', &(0x7f0000001840)='./file0\x00', 0x0, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) [ 240.703355] REISERFS warning (device loop1): super-6514 reiserfs_parse_options: unknown quota format specified. 09:21:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x158, r1, 0x800, 0x70bd27, 0x25dfdbff, {0x1}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x26}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast2}, &(0x7f00000000c0)=0xc) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000140)=@ll={0x11, 0x17, r2, 0x1, 0x1f, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="7198b05fa87c4b28be19f0f3", 0xc}, {&(0x7f0000000200)}], 0x2, &(0x7f00000002c0)=[{0xa8, 0x13f, 0x2306, "203d5f72b27a21c8f3b0c88e777729f5258f0f421c3dbf2e9169fc1ee4a6a273a4b5f9b822d759b05b769cf39418f3b618563ef9a35a5aed474c97d89cbf070f7daa6b48462d4e98bca7b5fb08aa35225d0901f3a7ae525c7c9f8ccda080e68d9f1b46df3877c9eff64456b75b92bad86b9413a8b9e0df2f7fddcb2ce7dbb090148b18cd20a59981e9a7094910ec18c779252e3f"}], 0xa8, 0x41}, 0x10) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000100)=""/8) 09:21:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x1f4}) 09:21:04 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r3, 0x3, 0x100000001}, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=r1, 0x4) 09:21:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) [ 240.775899] REISERFS warning (device loop1): super-6514 reiserfs_parse_options: unknown quota format specified. 09:21:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 09:21:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x4}) 09:21:04 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200802, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:21:04 executing program 4: prctl$getname(0x10, &(0x7f0000000340)=""/4096) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:05 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) statx(r1, &(0x7f0000000080)='./control/file0\x00', 0x4400, 0x20, &(0x7f0000000400)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="10feff00000000000100000001000000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:05 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)={0x6, 0x0, [{0x1, 0x13, &(0x7f0000000040)=""/19}, {0x12000, 0xd3, &(0x7f0000000100)=""/211}, {0x0, 0x64, &(0x7f0000000200)=""/100}, {0x1d001, 0xdc, &(0x7f0000000340)=""/220}, {0xd004, 0x68, &(0x7f0000000440)=""/104}, {0xd000, 0xa0, &(0x7f00000004c0)=""/160}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 09:21:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0xfffffdfd}) 09:21:05 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x200, 0x0) fstat(r0, &(0x7f0000000080)) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x2) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f00000002c0)="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", 0x1000) 09:21:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r0 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r0, 0x800, &(0x7f0000000140)) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x0, 0x4, {0xa, 0x4e21, 0x40, @empty, 0x5}}}, 0x3a) r3 = gettid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000340)=0xe8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000380)={r4, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0xe5d, 0x1756, 0x1, 0x89ca, 0x0, 0x7, 0x8, 0x0, 0x7, 0x4d2, 0x4, 0xb76, 0x9a7, 0xffffffff80000000, 0x800, 0x6, 0x4, 0x82, 0x1, 0x401, 0x7, 0x3, 0x100, 0x6, 0x0, 0x81, 0x0, 0x7fffffff, 0x498, 0x8, 0x4, 0x3, 0x86, 0x7fff, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x3, @perf_config_ext={0x1, 0x3}, 0x24000, 0xffffffffffffffe1, 0x4, 0x7, 0x3, 0x54a, 0x1}, r3, 0x7, r2, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 09:21:05 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0xfdfdffff00000000}) 09:21:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/8) 09:21:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f000000}) 09:21:05 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) sched_yield() recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000380)=0x10001, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14, 0x800) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xbb}, @empty, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff, 0x3, 0x81, 0x100, 0x1, 0x80000000, r1}) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000001340)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 09:21:05 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000000080)="7c3f92dee8415ee427db150ed0ec0b8c0962b09a36552d20fb82624a183de811977835f5da06273f5a71b6718fbb44f5262e48ec82e42382c46db17e866baadbf16ccd6bc4db16840a5df06149fdd29803f38f1977e887d0886fcb0afd3c50968623be8f4300768b91e945d1bd41e90e157ec80f39530b1758a4e860bbab4492d1a9e4adeca24a510224cd8858beb5b4e09bf453a7fb459c", 0x98, 0x6, &(0x7f0000000180)={r2, r3+30000000}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000000)) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x7ffc, 0x0) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000040)=""/8) 09:21:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x12001) write$binfmt_misc(r2, &(0x7f00000002c0)=ANY=[], 0x0) fchdir(r3) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 09:21:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0xffffffff00000000}) 09:21:06 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="4e16f4c114ef684cfcb17659"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 09:21:06 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x8, 0x1, 0x1, 0xffffffffffffff1b, 0x0, 0x100, 0x80002, 0x2, 0xfff, 0x3, 0xfff, 0x4, 0xffffffff, 0x7f, 0x0, 0x6, 0x8, 0x5, 0x8, 0x80, 0x40, 0x9, 0x9, 0x8, 0x4, 0x3, 0x0, 0x100000001, 0x1, 0x8, 0x1, 0x22f1, 0x8001, 0x1, 0x5, 0x6, 0x0, 0x8001, 0x3, @perf_config_ext={0x9, 0x8}, 0x20, 0xed, 0x3, 0x3, 0xfffffffffffffffc, 0x1000, 0x20}, r2, 0xa, r0, 0x2) 09:21:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="afb331115a6abf32d3825b6e8cf584b3ccdefeb945302f8cbb563f0a6b0c5232f15c1ef52732d838d4371cf42c72b3d32c1a1bc7f6bb5973084ac4c17ae5892ab820cb6618a2e5a236", 0x49}, {&(0x7f0000000100)="8271df67f081e975164403639f766a297661", 0x12}, {&(0x7f0000000140)="b618a6e46c02a83d8f65ced38e1acbcd64a39955284f1217548c11c0b259908922d2fc478f2f159c31564d7949cd28c12ab825505625fc3b10485bfe152af556f114ac3a03a9dbeeb2986c55a43f624846db40ea2c62e42e4ba50f1c51af32549c982b58c0b345af360d2d05776a7fedb162db502568d6c4a7d74dca84547bd345db58a341ddd84e4bfc43d30b27d52c003ec223aa460abb2d55a7b1bd719a66d1", 0xa1}, {&(0x7f00000002c0)="606ada323ad286b653521dfbc85fc76870fd763e1a14fcbbf93764d681ca22193a3a593e7590d51876702c96984120b8cdbdab39a15a215330da7cc13fefcc77d4775456f9faa59067a75bdc2ab0769e13d52cba4a6a135bf0418161c1f3f71a65b4a923eba4fe5a91058b70278ec1a4b0461d9ddf93bc85c955f064e30a4db530cd5e45ed1d7bcb6c3268ca204467c72275d81c978155d812e6fa4bae2dd49417bd2390c117", 0xa6}, {&(0x7f0000000380)="655b058c3e54c3acaf2e92c253d63968f5c56f4960859672c60eebf1282ec131a1059681ef9585a641d788c37e03412585a960ca3a99f5f5acfa0a15c266f2294fef51dcd392fb90393e3531804a919872e4cb76bebfc2f0ae132dd5549d9e301a34aedb0f3178fd9c52dd0439042552f4e7a0aae921311d95b5dda9e52067a703e29c26349b622f3cf1d80d2c358913dbd951a7f925096a74614145aaaa7666fa808f65f597ab4e92e67229ce31cc88dc9f571f26d963a8af6d3febec1dec6eca7c3605148ed1f6d3abe5d8", 0xcc}], 0x5, 0xe) r1 = creat(&(0x7f00000004c0)='./file0\x00', 0x8) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000500)=""/134) ioctl(r0, 0x25, &(0x7f0000000480)="025cc83d6d345f8f762070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x101000, 0x0) 09:21:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="914100f828ae3cf8befa2470ea2f39893ebf054c767f3a1e21cbcc7e93d321cfd8e1769237a3d709d203892ee5bcab62dd54aaaaeedcab38e9c95169ab5d627e23819f5d7abc431c7ab1a59588ea673e0aba936bae583ae78ab2d4cebcf17f43d4997e6d5542b5f9743164b0a0fb858937259d6fb5188107e98949636b37115a7ed648c54dffd6126cc867b343de6b36ae66fd655d452da29102d16b865ce809e44807c157f4a628", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 09:21:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0xfdfdffff}) 09:21:06 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 09:21:06 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0xfffffdfd}) 09:21:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@broadcast=0xffffffff, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x2e, r2, r3}, {0x5, 0x80, 0x1f, 0xffffffff, 0x1f, 0x1ff, 0x2a85}, {0x80000001, 0x80000001, 0x7, 0x8000}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x3, 0x2}, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x4d2, 0x3b}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3506, 0x1, 0x2, 0x1, 0x200, 0x20, 0x6}}, 0xe8) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/8) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) ioctl(r0, 0x81, &(0x7f0000000040)="82e4fb9620a4c291cc3671ed25f4d551ba6e53d221f5f3bf464cd2f746260ac2f03e7ae5a8cde83f3593e21a23e418b7e63cb14714bc9a00ac1c11f85b20faad") ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000100)={0xfff, 0x8, [0x5, 0x2]}) [ 242.801515] binder: 16034:16035 ioctl c0306201 20007000 returned -14 [ 242.814596] binder_alloc: binder_alloc_mmap_handler: 16034 20000000-20002000 already mapped failed -16 [ 242.856977] binder: BINDER_SET_CONTEXT_MGR already set 09:21:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x7, "3853c0c9004ab3"}, &(0x7f00000000c0)=0xf) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r2, 0x4e7, 0x0, 0xcd04, 0x4}, &(0x7f0000000140)=0x18) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl(r0, 0x200000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0xf2be) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) [ 242.878501] binder: 16034:16035 ioctl 40046207 0 returned -16 09:21:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0xfdfdffff00000000}) 09:21:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000001200)=0x2, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x5}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x0, 0xfffefffffffffffd}) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200, 0x80) sendto$unix(r3, &(0x7f0000000200)="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", 0x1000, 0x40000, 0x0, 0x0) fcntl$addseals(r3, 0x409, 0x4) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000000c0)) 09:21:06 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000053c0)={0x1, 0x7, &(0x7f0000005280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x0, 0x0, 0x7fff}, [@generic={0x6, 0x2, 0x0, 0x207}, @jmp={0x5, 0x9, 0xc, 0x1, 0x7, 0x1, 0xffffffffffffffff}], {0x95}}, &(0x7f00000052c0)='GPL\x00', 0x6, 0x84, &(0x7f0000005300)=""/132, 0x41100, 0x1, [], r3, 0x4}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='I', 0x1}], 0x1, &(0x7f0000005440)=[{0xa8, 0x0, 0x8, "daa0e37eb67443c8b7cf20220f3eb58f8ecffdb0089627434dd4996f27ca30bd1faf44983f87a2d98fa5f29022f43ecdfba488b376a6756d381a92f6dfcda80be5535b3aeb46a87fab0f56ba158bac88b270bef2c5d077b1066329755bd64e4de64287eb59ccc12a55b86900224b85e21eb51d32dbb42670e99a48509fb53f146aebc80ffef8c0df25d0920ba6d23e76c79ee8"}, {0x70, 0x102, 0x9, "d4b832a44f7b84a9a3aed26790310ac619038d2cdcb372f2c544b91b5fae2ccbeaaff77f48e0d7fd9310c7d8f6e715d44bdc75e969c31ecd64781445f44a12d3fde52d82e1051eb5c7ca033729d28d41673b464ee70fcd7cf362b0880a"}, {0x38, 0x0, 0x6470ac4c, "c37c483dd56f14ca0f9334ea6467bc420c0530a7faae23e755a7352019b343ad78414e"}, {0xd8, 0x115, 0xfffffffffffffff7, "a88f5c404cfe6ab33fc728422d04ef642fb629c63da4a41cba5d38757e6a526fabb9e92e1c19ec4168840fcfcad578d846cfff1192b09ddf9414fbce669d5be5a80418082231231d44d8a15da06303190ac4928f8689a270258dbc6dc62e28ea4f2cfacbc60d34805ae2dd4f4dfa3dea7624f461fe17d6c0f488940fa172d02b5b597ae28860f6e81110796533497e7119532518ada9d47ef35ca0c4295ea32d1f4c92cde8cffd89fc4f299e37d2c75d2957970769f644c2004d58321a41c102aa552cccb644"}], 0x228}, 0x8000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) recvmmsg(r1, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/71, 0x47}], 0x1, &(0x7f00000004c0)=""/177, 0xb1, 0x9}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000380)}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000880)=""/240, 0xf0}, {&(0x7f0000000980)=""/141, 0x8d}, {&(0x7f0000000b40)=""/216, 0xd8}, {&(0x7f0000000c40)=""/242, 0xf2}, {&(0x7f0000000d40)=""/145, 0x91}, {&(0x7f0000000e00)=""/182, 0xb6}], 0x8, 0x0, 0x0, 0x2}, 0x8}, {{&(0x7f0000000f40), 0x80, &(0x7f0000001180)=[{&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000fc0)=""/246, 0xf6}, {&(0x7f00000010c0)=""/185, 0xb9}, {&(0x7f0000000a40)=""/36, 0x24}], 0x4, &(0x7f00000011c0)=""/77, 0x4d, 0xdc78000000000000}, 0x10001}, {{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000001480)=[{&(0x7f00000012c0)=""/27, 0x1b}, {&(0x7f0000001300)=""/127, 0x7f}, {&(0x7f0000001380)=""/232, 0xe8}], 0x3, &(0x7f00000014c0)=""/64, 0x40}, 0xffffffff}, {{&(0x7f0000001500)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001580)=""/160, 0xa0}, {&(0x7f0000001640)=""/24, 0x18}, {&(0x7f0000001680)=""/116, 0x74}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/190, 0xbe}, {&(0x7f00000027c0)=""/97, 0x61}, {&(0x7f0000002840)=""/205, 0xcd}], 0x7, &(0x7f00000029c0)=""/215, 0xd7, 0x3}, 0x100000000}, {{&(0x7f0000002ac0)=@generic, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/184, 0xb8}], 0x1, 0x0, 0x0, 0x6}, 0xbee}, {{&(0x7f0000002c40)=@generic, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)=""/75, 0x4b}, {&(0x7f0000002d40)=""/79, 0x4f}], 0x2, &(0x7f0000002e00)=""/4096, 0x1000, 0xff}, 0x205}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/182, 0xb6}, {&(0x7f0000004ec0)=""/73, 0x49}], 0x3, &(0x7f0000004f80)=""/166, 0xa6, 0x10001}}], 0x8, 0x100, &(0x7f0000005240)) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000005680)=0x80000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000380), 0x2) 09:21:07 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x105000, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000400)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x8000, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000300)={@remote, @multicast2}, &(0x7f0000000340)=0x8) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x14) dup3(r0, r2, 0x80000) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00'}) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r4) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000080)=0x2) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000440)={0x9, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) 09:21:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 09:21:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$setregs(0xd, r1, 0x80000001, &(0x7f0000000a00)="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") fallocate(r0, 0x3, 0x7fff, 0x8001) fallocate(r0, 0x3, 0x5e89, 0xfff9) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, [], 0x21}, 0x73}, 0x1c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0xffffffff00000000}) 09:21:07 executing program 1: r0 = socket(0xc, 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000001600)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000011000100bc9d00000000040000000700"], 0x14}, 0x1}, 0x0) 09:21:07 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)="e2f91527291f27e42c2f54276cf71067acdaf21fe29583672d256b2ee7b9632c8bac846d65347542b1150588010e94cb3fbb8fca3eb8f05acb4c538ab209e767cbdbb266143232c5f692efde9e1aeffeec487af738aea03cf5f7269f2b78bc3ce9a9abb83fa7dedb0947d6cb6410495738f01829ca840f956c08ebe137da0aa64c1f96e6978d7b73933a58ca34253707260319429d33105fc92f6329d1fd9d89ff36073e1644a83a9eb0bb46ccb237c2d4bed18480722bf622ac98e34b723b6f0900d13d324fd51524214de89abd3526b3c2974837d6fdc830943e0950b89ffa") recvfrom$inet(r1, &(0x7f0000000080)=""/92, 0x5c, 0x100, &(0x7f0000000100)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000}) 09:21:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0xfdfdffff}) 09:21:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000840)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) open_by_handle_at(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00Qy\x00\x00%^P'], 0x0) ioctl$VT_RELDISP(r0, 0x5605) 09:21:07 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x7f, 0x10, 0x1, 0x8000}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={r4, 0x54, "2c0642e4d38cb1cbe25b0a0018f210c1748fdfbef8db819b5dea115853cb24cb4f1f4ed02520fcb1e5eb390e50a63a9e5e9ad229e0ddf6435f664a0c075f44b9ed16e2f4252fa7f197c723b44038166f5944ecb7"}, &(0x7f00000004c0)=0x5c) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000500)={r4, 0x3, 0x3}, 0x8) 09:21:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:21:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0xfffffdfd}) [ 243.972622] FAT-fs (loop1): bogus number of reserved sectors [ 243.978537] FAT-fs (loop1): Can't find a valid FAT filesystem [ 244.003866] FAT-fs (loop1): bogus number of reserved sectors [ 244.009783] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x80000) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:08 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:08 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:21:08 executing program 1: r0 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x1, 0x9}) recvmsg(r0, &(0x7f0000a97000)={&(0x7f0000a25ff0)=@ax25, 0x10, &(0x7f00000b6000)=[{&(0x7f0000121000)=""/123, 0x7b}], 0x1, &(0x7f0000e08000)=""/248, 0xf8}, 0x0) 09:21:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0xffffffff00000000}) 09:21:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x12, 0xb9, &(0x7f0000000080)="4c90a246cc59fbe723a598b231bd335a4c113f96b414991a88a510cc9dc3d77fda94827e1d722a9baf1a341db10b674605f3c464748b57e8f7580de12706424713e6bdf41e7d5f5ce6ccee200efde31386b27222c082f1f4e927d7224b76a227e6f0f35806650d8f5f31b031a56306f8a03aea29085878195d100f9dfba2de0c929c1a12529945d943aa279ce91ebc9bfddd2bf08830f3816a3d2b2294ae300158b6cdc44de4d67da9983198891405d04baa5b2893e7958eca"}) 09:21:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800)='/dev/hwrng\x00', 0x2, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000840)={0x7, 0x33, 0x1}, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) r4 = shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x4000) shmdt(r4) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000008c0)) process_vm_writev(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f00000000c0)=""/176, 0xb0}], 0x3, &(0x7f0000000780)=[{&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000600)=""/64, 0x40}, {&(0x7f0000000640)=""/197, 0xc5}, {&(0x7f0000000740)=""/59, 0x3b}], 0x5, 0x0) 09:21:08 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:08 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x300) socketpair(0x2, 0x2, 0x4, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000380)={0x303, 0x33}, 0x4) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='reno\x00', 0x5) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000480)=r3, 0x13e) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r2, 0x4) ioctl$FICLONE(r3, 0x40049409, r0) 09:21:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0xfdfdffff00000000}) 09:21:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000680)={0x8, 0x10, [0xab, 0x2, 0x2, 0x8]}) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0xd5ed, {{0xa, 0x4e22, 0x8, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}, 0x7}}}, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000180)={{0x1, 0x3, 0x1, 0x7, 'syz1\x00', 0xa73}, 0x1, [0x20, 0x0, 0x9, 0x2, 0x10000, 0xffffffff, 0x1, 0x401, 0x4, 0x6, 0xf4, 0xba6, 0xffffffffffff8000, 0xffffffffffffffe1, 0x23, 0x8, 0xf5, 0x0, 0x7, 0x8c68, 0x2, 0x800, 0x0, 0x8, 0x3, 0x400, 0x3f, 0xfff, 0xfffffffffffff64a, 0x8000, 0x7, 0x3ab, 0x9, 0x8c37, 0xffffffffffff8001, 0x1000, 0x0, 0x7f, 0x20, 0xe2ae, 0x7, 0x7, 0xff, 0x8112, 0x2, 0x7fba8794, 0x100, 0x6, 0x40, 0x10001, 0x81, 0x9, 0x286, 0xfffffffffffffe00, 0x725e2e19, 0xb6a8, 0x8, 0x7f22, 0x101, 0x1, 0xa2, 0x9, 0xffffffffffffffe1, 0x60b, 0x7fffffff, 0x6, 0x81, 0x9, 0x63, 0xfffffffffffffffc, 0x1, 0xfffffffffffeffff, 0x3, 0x0, 0xfff, 0x7, 0x3, 0xfffffffffffffffb, 0x7, 0x45a, 0x47, 0x2, 0x4, 0x7, 0x6, 0x7ff, 0x11cbcab2, 0x7fffffff, 0x4, 0x4, 0x2, 0xfffffffffffffffa, 0x100, 0x9, 0x31, 0x0, 0x8, 0x63, 0x3ff, 0xf2, 0x8, 0x8001, 0x8, 0x4, 0x38e, 0x6, 0x8, 0x6, 0xb234, 0x4, 0x3, 0x0, 0xa87, 0x3, 0x0, 0x40, 0x6, 0x9, 0x3f, 0xfffffffffffffffd, 0x3, 0x20, 0x6, 0x14000000, 0x2, 0x8001, 0x5, 0x2], {0x0, 0x1c9c380}}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000006c0)={'security\x00', 0x1000, "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"}, &(0x7f0000001700)=0x1024) 09:21:08 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00000000000000}) 09:21:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000340), 0x100000080000) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:08 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:08 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306087b6150", 0x60, 0x1a0}]) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101040, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000240)=0x9, &(0x7f0000000280)=0x2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000180)={0x3, 0xa050}) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00000002c0)) ioctl$void(r0, 0xc0045c7f) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000001c0)={0x3, 0x4, 0x5, 0x1, 0x3f, 0x8}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x3, 0x5, 0x0, "9b358f2f9ecc2d7c1bac8fbe9e9d3d1b16044058146929d7d880b78e390c2b8758d173a9bfc170b2809ad35013c53cb47e561f060be6885b0a382592006658eb", "ec9d91f02c8138feda560d3429770796c66b648307ffb0793666e7ff971171e652b2def5555ab55f6bf6eaad972f05322eb6dca3f2b67d77b6c72eefc6d4e233", "b4d75f11b7c5c145972ddc6383335178eb6c4f55b59b0d7b5d18426b14bebc4c", [0x1f, 0x180]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x60000, 0x0) 09:21:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0xfdfdffff}) [ 245.427372] loop1: [ICS] [ 245.460408] loop1: [ICS] 09:21:09 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x400) r2 = epoll_create(0x6) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x100010, r2, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) timerfd_gettime(r0, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000400)={0xf5, 0x0, [0x0, 0x0, 0xfffffffffffffff8, 0x5]}) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="100000000000000001000000016b3de1623d7fe6e2fdcdcbea613385a9780aa7fc9b781d4c3d009b6efbafebc64c1912f7731541d869b18b4597dfe948975bbcc1457950c67044f9e9e1e4703641c16f07983d368dc7cc848771d34446620802e3dbb11a147cf6012a3b3dd629"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r3) 09:21:09 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 09:21:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x1}, 0x20) socket$xdp(0x2c, 0x3, 0x0) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:09 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000006c0)=""/152, &(0x7f0000000600)=0x98) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x25, 0x2, @thr={&(0x7f0000000080)="862089347dde58b4eee2ef5a4c421cf9de6da6fa668f53418c67bb5f7db999a78b91ca82830d78889e8fad412d72586a7ad7a0e7b1842d28190de864a5d859c45941413dfbff17580e7ee7d22c84b3f02c1e107f1adda1e2", &(0x7f0000000100)="8cd49c0443c741f879c9690f36ad7626e1e129a3ec2498316b7f0441e917a4a252174daac885f22a72e5571d86e1d3726460e3c05b958607a5396156be8111d978bd5b55053ad8ec9913e552b10eb95bdbdfbf843305d0b12dd97572b7aa5c09b175d0b9cf63313365687ffcd25bf6dcab47b1b59230dd25eeaa6a6471b42b79422f9acc06f084a7f5392e886c35a6274cad9043e0b56498930c17457a1d3c488b6b8d821a841b"}}, &(0x7f0000000200)=0x0) timer_delete(r2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000680)='/dev/audio#\x00', 0x6, 0xa0080) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000300)={0x10f000, 0x1000}) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00004a5000)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x17}]}, &(0x7f0000000000)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@ldst={0x2, 0x0, 0xb, 0x7a, 0x0, 0xffffff50}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f0000d35000)=""/4096}, 0x48) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={r5, 0xfffffffffffffff9}, &(0x7f0000000640)=0xc) ioctl(r3, 0x8912, &(0x7f0000000580)="025cc83d6d345f8f762070") r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000000040)=""/8) fcntl$getownex(r3, 0x10, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00'}) r7 = getpgrp(0x0) process_vm_writev(r7, &(0x7f0000000440)=[{&(0x7f0000000340)=""/212, 0xd4}], 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)=""/65, 0x41}], 0x1, 0x0) 09:21:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0xfffffdfd}) 09:21:09 executing program 1: mkdir(&(0x7f0000000000)='./control\x00', 0xa0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') rename(&(0x7f00000f7ff0)='./control/file0\x00', &(0x7f0000636000)='./file0\x00') creat(&(0x7f0000000100)='./control/file0\x00', 0x0) dup2(r0, r1) 09:21:09 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 09:21:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x10001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:09 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 09:21:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0xffffffff00000000}) 09:21:09 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000080)="e99a9133d97e89d16f162d19441e363f246cb183a7299d1cf138fadb3b613847610c2b80b0e7ffd8fd26ce4b3ceb4f60e9ef2655984d74b3de7f7f209a25f55cf30fefc9fbb267d62c731d2d73d8b29dd0725b1df690e9c531361085f28fde791e6882dbcae40f6cc4f8714e6b7b628b98cde425c2f93513725fc1da417d0961c414257e5915b2f7d6f43fffe32faa93bc4fd82b413cf32a3c3b0dfbb5c5f3c8b9db318042eb", &(0x7f0000000140)=""/55}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) accept$alg(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff6000/0x3000)=nil, 0x3000}, 0x3}) 09:21:09 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) r3 = dup3(r0, r0, 0x80000) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000440)) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r0, 0x0) 09:21:09 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000016c0)=0x80000001) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000300)='./control/file0\x00', 0x3, 0x6, &(0x7f0000001600)=[{&(0x7f0000000340)="890116b03d4f31b2422c40dddd49dba4d79f8e44387941dc552fa918a9b16df191de110902a6", 0x26, 0x2}, {&(0x7f0000000400)="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", 0x1000, 0x4}, {&(0x7f0000001400)="b2911488e6fad930a2062ab9bc2f20b5fbfbf79dc8778830d1b805b6", 0x1c, 0x2000000000000}, {&(0x7f0000001440)="94ea4267c261fe1262b8476cde0a6459f978ed47772381a262f4e0f8a71b30b9220765e894b198f8522c8e53c7b9e67e588b69610f22f30322a1967a51a34f7bb4b332fcde509b070c0c910468fa29a4079a66db3bfa567aa2cdff7c31b41452199025b9036c709c3487701f6d5d81f9e166afe14af11cbaece49e5880dfdfe33a098d12f8d0124ac8672e5d4adc84170351b54bfd8c554cf8d0b995c188d7fe77484752", 0xa4, 0x9}, {&(0x7f0000001500)="2096adecdd03ea4d308fc809fd02a0e3aff0475f9ac7c6ff935e9c08acc61fcdb3a82d73b25dee3cd7434ecf8bbd9e7444d23ea053c0290ad8332ea4cb8ed62ea2d470ea927d84b01a5e00447d9ade", 0x4f, 0x1000}, {&(0x7f0000001580)="a3c7e078932dddb9180890fd8c229b18f0aec1a50bf1f9dc364155d304f589512bc08f2d1220f4b9920a4a704b1cd7a6477e9fe0c544fbe49eacdfe0d1b91fd40c06adb29ae1a38535b74d73559be98b3a5c35634264d9302e5b8e19b9dd9af10ea6f51183c74a54c766f4e925a573bada127dca", 0x74, 0xffff}], 0x10, &(0x7f0000001700)=ANY=[@ANYBLOB="fd6d124944fc1e8d10bb15dbecc5a2444bc26275c4e0affd39b5d916abe7d8096ee148ad2d4a07000000db06cb6c18d2bee4cee9524c520c0ab83b8496e418"]) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r2) 09:21:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xfff, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) recvfrom$packet(r1, &(0x7f0000000140)=""/254, 0xfe, 0x12040, &(0x7f00000002c0)={0x11, 0x17, r2, 0x1, 0x3ff, 0x6}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)}, 0x10) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) exit_group(0xefffffffffffff0d) 09:21:09 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 09:21:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@can={0xc, {{0x2, 0x981, 0x3, 0x5}, 0x7, 0x2, 0x0, 0x0, "ba9dc3b9d81db00f"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x1d2, 0x3af, 0x621, 0xdef]}) 09:21:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:21:09 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000380)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/108, &(0x7f00000004c0)=0x6c) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2afa, 0x3f, 0x9, 0x3, 0x2, 0x0, 0x80, 0x2b7, 0x40, 0x232, 0x6, 0x5, 0x38, 0x2, 0x8, 0x3, 0x6}, [{0x7474e557, 0x2, 0x2, 0x3d, 0xcfb8697, 0x7, 0x7903, 0x8a1}], "55a1dbdfa5e32852c9cc024cd43f0fb9f0448e36dc0edd90eaa3225a2fee5eec3b03ddafc039ce53668ccd2ebe8f4b71f0d43a0b6a6786565acb25ce57ade78ce7b515781980f7c34d87b49badd4c727b5a8ea09939b629980703b9762fce01f9feb", [[], [], [], [], [], [], []]}, 0x7da) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x6f, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000000c0)='md5sum%posix_acl_access\x00', &(0x7f0000000100)='GPL\x00', &(0x7f0000000140)='@ppp1\'[\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)="e800", &(0x7f0000000280)='\x00', &(0x7f00000002c0)='lobdev\x00'], &(0x7f0000000440)=[&(0x7f0000000380)='@{mime_type\x00', &(0x7f00000003c0)='/securityn', &(0x7f0000000400)='dmd5sumnodevcgroupGPLwlan1\x00'], 0x1d00) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:10 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:10 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:21:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff]}) 09:21:10 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x7ba, 0xffffffffffffcf6a, 0x7fff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x100000000, 0x9, 0x0, 0x3cdc, 0x100000000, 0x8, 0x1, 0x8, 0x8, 0x100000001, 0x6, 0x7, 0x96a0, 0x800, 0x9, 0x0, 0x9, 0x80000001, 0x3f, 0x4, 0x7, 0x73, 0x5, 0x3f, 0x5, 0x7f, 0x11c0000, 0x0, 0x2, 0x1, @perf_config_ext={0x7fff, 0x7}, 0x2012, 0x0, 0x10001, 0x7, 0xffffffff, 0x9, 0x9}, r1, 0x0, r0, 0x8) pipe2(&(0x7f00000000c0), 0x84000) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22004000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x70bd2d, 0x25dfdbff, {0x3}, [@FOU_ATTR_AF={0x8, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4010) 09:21:10 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:10 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xfffffffffffbf05e) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="08006f767bb9f60000b379c6"], &(0x7f0000000140)=0x10) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') accept$packet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004d00)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000004e00)=0xe8) recvmmsg(r1, &(0x7f000000b640)=[{{&(0x7f0000006240)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000063c0)=[{&(0x7f00000062c0)=""/14, 0xe}, {&(0x7f0000006300)=""/150, 0x96}], 0x2, &(0x7f0000006400)=""/116, 0x74, 0x8}, 0x5df3}, {{&(0x7f0000006480)=@nl=@proc, 0x80, &(0x7f0000006580)=[{&(0x7f0000006500)=""/71, 0x47}], 0x1, &(0x7f00000065c0)=""/61, 0x3d, 0x6}, 0xfffffffffffffffc}, {{&(0x7f0000006600)=@hci={0x0, 0x0}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006680)=""/76, 0x4c}, {&(0x7f0000006700)=""/80, 0x50}], 0x2, &(0x7f00000067c0)=""/140, 0x8c, 0xfffffffffffffb32}}, {{&(0x7f0000006880), 0x80, &(0x7f0000006a80)=[{&(0x7f0000006900)=""/96, 0x60}, {&(0x7f0000006980)=""/246, 0xf6}], 0x2, &(0x7f0000006ac0)=""/149, 0x95, 0x7}, 0x8308}, {{0x0, 0x0, &(0x7f0000008040)=[{&(0x7f0000006b80)=""/229, 0xe5}, {&(0x7f0000006c80)=""/231, 0xe7}, {&(0x7f0000006d80)=""/198, 0xc6}, {&(0x7f0000006e80)=""/196, 0xc4}, {&(0x7f0000006f80)=""/4096, 0x1000}, {&(0x7f0000007f80)}, {&(0x7f0000007fc0)=""/76, 0x4c}], 0x7, &(0x7f00000080c0)=""/40, 0x28, 0x40}, 0x9}, {{&(0x7f0000008100)=@generic, 0x80, &(0x7f0000009300)=[{&(0x7f0000008180)=""/136, 0x88}, {&(0x7f0000008240)=""/4096, 0x1000}, {&(0x7f0000009240)=""/77, 0x4d}, {&(0x7f00000092c0)=""/36, 0x24}], 0x4, &(0x7f0000009340)=""/128, 0x80, 0x2}, 0x1}, {{&(0x7f00000093c0)=@un=@abs, 0x80, &(0x7f0000009940)=[{&(0x7f0000009440)=""/36, 0x24}, {&(0x7f0000009480)=""/51, 0x33}, {&(0x7f00000094c0)=""/177, 0xb1}, {&(0x7f0000009580)=""/202, 0xca}, {&(0x7f0000009680)=""/18, 0x12}, {&(0x7f00000096c0)=""/204, 0xcc}, {&(0x7f00000097c0)=""/37, 0x25}, {&(0x7f0000009800)=""/213, 0xd5}, {&(0x7f0000009900)=""/18, 0x12}], 0x9, 0x0, 0x0, 0xfffffffffffffff8}, 0x80000001}, {{&(0x7f0000009a00)=@xdp, 0x80, &(0x7f000000a000)=[{&(0x7f0000009a80)=""/161, 0xa1}, {&(0x7f0000009b40)=""/141, 0x8d}, {&(0x7f0000009c00)=""/167, 0xa7}, {&(0x7f0000009cc0)=""/124, 0x7c}, {&(0x7f0000009d40)=""/73, 0x49}, {&(0x7f0000009dc0)=""/41, 0x29}, {&(0x7f0000009e00)=""/56, 0x38}, {&(0x7f0000009e40)=""/248, 0xf8}, {&(0x7f0000009f40)=""/15, 0xf}, {&(0x7f0000009f80)=""/78, 0x4e}], 0xa, &(0x7f000000a0c0)=""/93, 0x5d, 0x200}, 0x9}, {{&(0x7f000000a140)=@rc, 0x80, &(0x7f000000b500)=[{&(0x7f000000a1c0)=""/188, 0xbc}, {&(0x7f000000a280)=""/214, 0xd6}, {&(0x7f000000a380)=""/226, 0xe2}, {&(0x7f000000a480)=""/4096, 0x1000}, {&(0x7f000000b480)=""/91, 0x5b}], 0x5, &(0x7f000000b580)=""/157, 0x9d, 0x1}, 0xffff}], 0x9, 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f000000b940)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f000000be40)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f000000be80)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f000000bfc0)={@dev, @broadcast, 0x0}, &(0x7f000000c000)=0xc) clock_gettime(0x0, &(0x7f000000d940)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000d8c0)=[{{&(0x7f000000c040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f000000d580)=[{&(0x7f000000c0c0)=""/237, 0xed}, {&(0x7f000000c1c0)=""/157, 0x9d}, {&(0x7f000000c280)=""/4096, 0x1000}, {&(0x7f000000d280)=""/170, 0xaa}, {&(0x7f000000d340)=""/182, 0xb6}, {&(0x7f000000d400)=""/167, 0xa7}, {&(0x7f000000d4c0)=""/129, 0x81}], 0x7, &(0x7f000000d600)=""/157, 0x9d, 0x1}, 0x5}, {{&(0x7f000000d6c0)=@ethernet={0x0, @random}, 0x80, &(0x7f000000d840)=[{&(0x7f000000d740)=""/242, 0xf2}], 0x1, &(0x7f000000d880)=""/52, 0x34, 0x6}, 0x80000000}], 0x2, 0x40000000, &(0x7f000000d980)={r10, r11+30000000}) accept4$packet(r2, &(0x7f000000d9c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f000000da00)=0x14, 0x80800) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000dd80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000dd40)={&(0x7f000000da40)={0x2d4, r3, 0x8, 0x70bd25, 0x25dfdbfb, {0x3}, [{{0x8, 0x1, r4}, {0x188, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3}}, {0x8, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x128, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x94}, 0x40000) 09:21:11 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./control\x00', 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) close(r0) 09:21:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0xfffffdfd]}) 09:21:11 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f000000}) 09:21:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffc) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f00000012c0)=""/7, 0x7}, {&(0x7f0000001300)=""/120, 0x78}, {&(0x7f0000001380)=""/111, 0x6f}], 0x8) 09:21:11 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x3, 0x800, 0x7, {}, {r4, r5/1000+30000}, {0x0, 0x3, 0x1, 0x8}, 0x1, @canfd={{0x1, 0x800, 0x6, 0x7f}, 0x3b, 0x3, 0x0, 0x0, "36bf87027076df5d011fa5b817b1da1662e258fe76df27e4d37e2738bceb0d1eda9aa3c131c1a7f9cab54ca8442a2cc9216f52c120c5203aaff453d05feff64c"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) 09:21:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff00000000]}) 09:21:11 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00}) 09:21:11 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800000000802) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x1) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:11 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000]}) 09:21:11 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00}) 09:21:11 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) umount2(&(0x7f0000000080)='./control/../file0\x00', 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:11 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0xb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:11 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}) 09:21:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}) 09:21:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}) 09:21:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x7) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) pipe(&(0x7f0000000100)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x50200, 0x0) 09:21:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x204000, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)="33134c22d23ada6d7f8e039fb4553921d33d777304921fe8e0278f") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:12 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000b40)=""/4096, 0xff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r2, 0xffffff72) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:12 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 09:21:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff00000000]}) 09:21:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x100, 0xfffffffffffffffc}, 0xfffffe65) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:12 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:12 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) 09:21:12 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000009c0)={0x0, 0xfffffffffffffffa, 0x44}) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000a00)='./file0/file0\x00', 0x30) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') rename(&(0x7f0000000300)='./control/file0\x00', &(0x7f0000000340)='./control\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0/file0\x00', 0x128) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000400)='f2fs\x00', &(0x7f0000000440)='./control/file0\x00', 0x80, 0x6, &(0x7f0000000880)=[{&(0x7f0000000480)="4c50cf6a9736d3f81296ba535ffe039a12e8640888adbf41d4fa2bcb8ef618b1b97ab056e63d5288e89963c7919cc271cf7af5c6a33ef460dd9a854016ae77f04e57c3ec7185b5deeeb7d2a1430921398ef08391b474ca35318845504315cf29a5f5c54baa01c009c16de765a5059932bd88cd6e5fac7e12edb2aa07d65e2c7db5131b20a86f0258b3ecde796424a55dd50ce26bd47efce2255e3db66b94940b63b9d12b2da7e3121f82", 0xaa, 0x3f2b03d8}, {&(0x7f0000000540)="3e8f066303d36e83313a88debd4a7f30592bf18510f9bfa36d735f285e9fb9222c2873d3d12a59c0e8645d5c11bdafd94e682f94a851854bbf0684bb89f88d880a7cbd41ec23092ab2bf0ee1b378f084e46a4222cf8e67269225f94a99e0063dea03cf14a550f780261862cd86b9", 0x6e, 0x81}, {&(0x7f00000005c0)="4b3a4edb88851ca21faa02bd20ffc5dc97d1d9dae1bf8f5d8ab0dc7e2bb90222e647a38b7257a04b9079c588319db7f726b3eaf1366c461699516cbb3f364e0446291e2c671b7bb1ff7e862e98a4218a722edb1d055a92c2a234644742d1452a7e0520d45d63aaf499c4d39b108a9b8c27ea98", 0x73, 0xff}, {&(0x7f0000000640)="44b0f1c9da99a5be756cd62982f0218f482d7ab636580a22bed19f2c2e91272c2772e0dbdc050121d8c1f9266d075cb62d2ec305881966aeec748a2db24894fa9bab0a300e03c07839af0d9d3f5d3522489703624a701cad14cd1633243227051c54d020434222bdd8e94e167386", 0x6e, 0x685}, {&(0x7f00000006c0)="89d6e5ec24dc3b7591eac7f3c0b39e7a3afcf4682fecb1e0a19eb0e42a14f0ece6d93525848bf2bece529a9d12de0b8f9466c6f3bc2b1c4f804473a7a45d6a9e79a236bea86fb528af98814334714b85b2ed8b4854aa1e21ff2bfc143079cfd42037dd21962c07e6bbd9b6803d855204ca9e8fd4d58888457358a71f6bca6b94b397c5abba6ee00b4a897aff426d2e6bf3ba385cd774", 0x96}, {&(0x7f0000000780)="790e2adcba8e9f12cbeece9a224f51efe79d9bfd10bcf18e27fa9df0d4ab3a609285e3db5f4e56770d428eafcbb986e1b0e3017e8a544949960f1d1d13f77ed1696ec46e550c4513c76f6b8bdd065ab786f2919aa50946cce8019271b60c8057a48fc7745d45b7a79896a4df2b904843b60136a309e9fe438bddff689e04bd991e1a7487df97590525dec50049d0325835b05fb0f36a94bf1e1213fc3b8c9487c11c08be4ea348796bacaf00b9c26643360c83fdc473edd09fafada02b7fad26942bf2729e14bb11016705b464ef0629887cb41db0a8bdfac3b5d70aa3dbd87b5cd5", 0xe2}], 0x0, &(0x7f0000000940)={[{@heap='heap', 0x2c}]}) sendmmsg$unix(r2, &(0x7f0000000a40)=[{&(0x7f0000000280)=@abs, 0x312, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1, 0x0, 0x0, 0x10000000000000}], 0x2, 0x0) r3 = creat(&(0x7f0000000980)='./file0\x00', 0x110) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6=@remote, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000dc0)=0xe8) stat(&(0x7f0000000e00)='./file0/file1\x00', &(0x7f0000000e40)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000ec0)={{{@in=@rand_addr, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000fc0)=0xe8) stat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)) geteuid() getegid() stat(&(0x7f0000003800)='./control\x00', &(0x7f0000003840)) fstat(r1, &(0x7f00000038c0)) sendmmsg$unix(r3, &(0x7f00000039c0), 0x5, 0x8005) close(r1) 09:21:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) getsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa379, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x1f}}}, 0x84) 09:21:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff00000000]}) 09:21:12 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}) 09:21:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x36108, 0x103040) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:12 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 09:21:12 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) ftruncate(r0, 0x80) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x40000, 0x0) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}) [ 249.358869] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 249.366072] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 249.377708] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 249.384862] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 249.392786] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 249.399860] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 249.465865] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 249.473232] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 249.511218] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 249.518432] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 09:21:13 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000440)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x400000) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/93) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}) 09:21:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) 09:21:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) geteuid() ioctl(r0, 0x6b8, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:13 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) 09:21:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0xb) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x10400, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000440)={0x10001, 0x2, 0x8, 0x1, 0x0, 0xd79, 0x7, 0x8000, 0x7, 0x7, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x20) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x668040, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) keyctl$session_to_parent(0x12) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000700)={0x0, 0x1c, "afe4bbc5169f24d66e45936b68028b1a41a9f5c4882d3939865bed5b"}, &(0x7f0000000740)=0x24) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000480)=@in={0x2, 0x4e22, @rand_addr=0x1fc0000000}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000004c0)="c9e46ded9b809bff88b4e884fe4f5f97c1e92e86f1910502c2e41844a8b10c0a91e20f2c0d2b2f6b0d61e65a03d65dd8642879c6912395ee11a2b046858e9aeb4c39c85e01a9310008f8fc2d0c3d3e16a35f8906e3df40797ae513dd7e1d82346983bbd8a063ba2fb04d0c573d0be254bfa6a5e78f42ca", 0x77}, {&(0x7f0000000540)="0826e9f9ba7db59ca2cacaf361a0c6f524d20331bf84a6484bb3ecb95992cc29afe4b5bbc142fa357a28e2270aee4ddb9f270794766f4ae280b2379b8f8198b656b616cbdb2a9d689bfc29b9563552cc31e9e74e7546577ab62ee85aff652720964c37d8cd5512806bfdebf79324b42fb487fffe7bd4990594bbb88a0153c10881117a190b8172a846d0eeb417dbfd9160b6e45f8e", 0x95}, {&(0x7f0000000600)="9686827ccf6a3bb89c04f28debd7efd2ef31e0c6a2d3e6ee54f282342dec5784cd1506bf054b2923d520d046b1822d837873e4a2f305339c45a1c517de413f807513798d7783015f353dc830c05ec5222fd4f0a5982cd32fc9a6eb6f6bd9df14651c6a5c23fd7feed3237207b9151221d7d8b78b5e55ea862e6349418e09e06b9864525930f56976463703794a18a44e6e15", 0x92}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000518000020000000000000008400000002000000070000000000000049000000", @ANYRES32=r5, @ANYBLOB="180000000000000084004000070000e4ffffffff000000001800000000000000840000000600000008000000000000002000000000000000840000000800000000000000000000000000000000000001"], 0x88}, 0x10) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f00000000c0)=""/164, &(0x7f0000000200)=0xa4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x3, r6, 0x10, 0x1, @in={0x2, 0x4e24}}}, 0xa0) 09:21:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffff00000000]}) 09:21:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}) 09:21:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:13 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001780)={&(0x7f0000000300)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/204, 0xcc}, {&(0x7f0000001580)=""/180, 0xb4}, {&(0x7f0000001640)=""/22, 0x16}, {&(0x7f0000001680)=""/76, 0x4c}], 0x7, 0x0, 0x0, 0xffff}, 0x40010023) connect$llc(r1, &(0x7f00000017c0)={0x1a, 0x303, 0x2, 0x9, 0x5, 0x10001, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000001800)='./control\x00', 0x40000) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 09:21:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}) 09:21:13 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') syz_open_procfs(r1, &(0x7f0000000080)='net/llc\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="10000000000084c69649fcc86e0574a8"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000080)=@buf={0x1000, &(0x7f00000002c0)="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"}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:14 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) r1 = accept(r0, &(0x7f0000000440)=@rc, &(0x7f0000000140)=0x80) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000380)=0x3, 0x4) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r2, 0x4) 09:21:14 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000}) 09:21:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000140)) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1) 09:21:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x40012, r1, 0x0) 09:21:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:14 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) 09:21:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0xfc, {{0xa, 0x4e20, 0x8000, @local={0xfe, 0x80, [], 0xaa}, 0x9}}}, 0x88) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140)=0x87d, 0x4) 09:21:14 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:21:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'system.', 'trustedeth0\x00'}, &(0x7f0000000100)='$system*nodev%\x00', 0xf, 0x1) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:14 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="10e7ffffffffffff0000000001000000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:14 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 09:21:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) pipe(&(0x7f0000000080)) 09:21:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x2, 'none\x00', 0x1, 0x1, 0x6e}, 0x2c) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:15 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) mknod(&(0x7f0000000140)='./file0\x00', 0xa, 0x8001) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r4, 0x604, 0x70bd2d, 0x25dfdbfb, {0x1}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff4f6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 09:21:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) 09:21:15 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 09:21:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00}) 09:21:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@local={0xfe, 0x80, [], 0xaa}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x20) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448eb, &(0x7f00000000c0)="aa4993699bfb3fae132c531791675719c51f79566e5453def1ff949ca43151b4d842d1a4fdd9c54cde89fc91598059b76058347a2241abe5ddc4ebded8a487d4ff38b649cc592d3fd286aaaaf4ec16b32f714e90e85fd07f49ca1e8e06abad9d6ef3e5b8ec24fdb51e8c83899615187f78fcb186fd344fc3b1763fad20002ff80b9a66e92ff3924ee2908a9deef6880f10a86b401fee39d704c22bb03773256f7bab5f1c9e9db49d7255ca5db18c8f6243e2230a263480386e") 09:21:15 executing program 6: r0 = socket$inet6(0xa, 0x2, 0xffffffffffffff85) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x7) ioctl(r0, 0x4008912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x2}, 0x7) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 09:21:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 09:21:15 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) 09:21:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 09:21:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x800, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000280)={0x2, 0x1f, 0x7, 0x3}) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r3 = geteuid() mlock(&(0x7f0000ff6000/0x3000)=nil, 0x3000) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)=0x0) keyctl$chown(0x4, r2, r3, r4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x5, {{0xa, 0x4e24, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x6}}, {{0xa, 0x4e23, 0x9, @empty, 0xffff}}}, 0x108) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 09:21:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:16 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000380)) 09:21:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x1000, 0x5, 0x80000000, 0x16d, 0xfffffffffffffff7, 0x80000000}) prctl$intptr(0x2000000031, 0xa07000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000000c0)={0x4, 0x6, 0x9, {}, 0x0, 0x1f}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:16 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) 09:21:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d000000}) 09:21:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:16 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000080)=0x60) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/bnep\x00') setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x8) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 09:21:17 executing program 6: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8915, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x11}, 0x7f, 0x0, 0x1, 0xc, 0x3, 0x3a65ee5a, 0x1000}, 0x20) mlock(&(0x7f0000ff6000/0x2000)=nil, 0x2000) 09:21:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xa0, &(0x7f0000000280)="025cc83d6d345f8f76207063683f2bcb1517f642d7fc5f273e94f7e0ec65f746c2ff580ca231b65f672289c66a795c2a881add9453e980387d5e0d6b3e7673211e16afcf4f7ef6ae86b917cfed629f491319ccf644392b6bf68940f55f654ac8b6589639a501be0abd00bada5ca8cedf67d1ceaa42400ba84ba6ff94af3854bfe37260620dbad071eab2377da1c24446f40995c8dd06a4189c32f817fbb0f0a302f03ab4dd8b5c0f674ed834f108e3d21e4d6ad0a12e1518f516bd0cdcba46f356465c05cf803e2a1d") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0x0, 0x1ff, 0x1, 0x30, 0x5e, 0x0, 0x7ff}, {0xc0000007, 0x8000, 0x4, 0x3f, 0x200, 0x19, 0x4f}, {0x1, 0x3, 0x1, 0x20, 0x40, 0x80000000, 0x3c81}]}) 09:21:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 09:21:17 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = dup(r0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000380)={0x0, 0x1000, 0x4, &(0x7f0000000140)=0xfffffffffffffff9}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0xb7534616209a809d, &(0x7f0000000780), 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) bind(r0, &(0x7f0000000140)=@hci={0x1f, r2, 0x1}, 0x80) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000640)={'team0\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f660070") socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6(0xa, 0x800, 0x9) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300090a0000000000000000000000e0000001000000000000000002000100000000000000000200000000030005000000000002000000e000000100000000000000000000000000000000000000008a83889999dbeb37020014de1ca35b8b6d5bb2d8e759a22e2374adbb24a6bba6233b1e930cec1bbe3e066245edfe38"], 0x50}, 0x1}, 0x0) socket$inet6(0xa, 0x3, 0xa) open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff]}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="76207000000f0000000000") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:17 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:21:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 09:21:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = dup2(r0, r0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/98) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/8) 09:21:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 09:21:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000300)={0x3, 0x6, 0xe58, 0x7, 0xfffffffffffffffd, 0x0, 0x4, 0x1f, 0x8, 0x1ff}) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r1) 09:21:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xc) 09:21:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x800000000000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="cfbb08b8b9127e4a4330fae4ef0a99f848bf2cc821ba4594be26e482c10bb2a7dddb24f60cd3056187cf5a11fa10650843e0c0691b14424ea92195e399ba57f794f528d5ef3822615cc1d1a25f90f5d6e06c6e374edf9c5485d8992bc5694caa10500cb582dab8988fc7d9dc46c4b1274c20cba38979698e3d12372a6b64b33049527a61072a5ef6372ae8af5e6d3b8a15ea022469079b526ee667cd5050b5", 0x9f}, {&(0x7f0000000140)="aece079eb79ec9bea76ab72cf7106bf11e6efd78a6ecc17acbea1428a06f22e8f1a3117c803c51291f0da985d24b9be7afcf26fcc9b5daed1f0884c97a3f8ff73e018b70bba02b139be672c51509a79816079c9e5ea0ef63bfaba7473a1dfc95049b8b5d4e4ed7c8634bfc5f449fc9061e933ca9c1f55169909bca860720b1ee5e7c38a4dc0138ea0582ea52414adcc5d531d66e15c37d12ce2173156e26aa01ecea9f9a8ee7607ae72b94ae5d4be187cf7fc737fc969a8c2a1df41826b77ef827f5d55ad7a607cde2d9f96ce974177270de9e1a0537ecd75386bc4ea626bfe1", 0xe0}], 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:21:18 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2, 0xc) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000000c0)={0xffff, 0x2, 0x8}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) pipe2(&(0x7f0000000300), 0x0) setrlimit(0x8, &(0x7f0000000040)={0x2, 0x18000}) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 09:21:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='#vboxnet1(-\x00', 0xffffffffffffff9c}, 0x10) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r0, 0x8000, 0x74cd77ba, "af83ba40bcdee87712774e02e1bbcd2659ffb15f6b0177de5d7e8ba81aaa57183a6841c2bd0a29685568e369f7d0b91e7d7e9c5fa2ee2eaff3dd03a30ea3cdb4122acd567e20485857ff58fea4d81d2769f9681dcf751a8a8c4bae33414eb23b3b3217847993f13855ecfa67f84d754f89fece545971c268e4d867fd1a9c8f8839dab646d9cb860f0cffb11e003e24f016909f6b652eb2659b041e9152f29766ea712066bfbc326480ccb3ae6a9fa286adc99810a02be6383f"}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0xfffffffffffffffe, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:18 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) getgroups(0xa, &(0x7f0000000640)=[0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00]) r3 = geteuid() syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000380)='./file0\x00', 0x5d, 0x3, &(0x7f0000000880)=[{&(0x7f0000000440)="457bcb0d909fa10d9b0d9903887524cfeedb8b52d1a1b66f2fb36bed681d79716fd8628b191eb0084a607c0cf592fae33c6d657312184aa59d9faa9349e818e5527022b75197d4f5d1015d1a2a9adbbe96ec396f203731307dd454f256360216811c5137c1b5a2a06d8f1792a8951004322d850f5f0a83646013b9e42febcb70425c7ec9815d8b08c32a905c23c7ab4b982685906012358f729bd50d04a1d893cfa434bebfad8a7358d6b09c2f53d421d08ca4656fcdf9dca83d8d10cf0bcfe4781e9bcd4ecd1a8776bb12576b5ad20ade094e6ece9225b77225cb2938d8f534914c4a2d125da4155e8018", 0xeb, 0x9}, {&(0x7f0000000b40)="e4bbfee054095a1877548aba80045256e757f94b0f69d0ccecf7b3c3304cf6b1130419cc44c7d5afc049fde41ee17de20f1b3c2942b993d5f91d8eb6f86be2acc0979e22aff499bfadfa5199b9a1c92ccfceffcfaa3b848115842e7d860db435203ff7c4803805ce2014b277b55046979b481272c9d44c4000d47c9994be128237a0e85746b7aa0aee6cf0eb0ff562eaae8b392c7aea64d2b789e425de0101bd95ab77cc16b31732b3fee463c5bf9aa06c873b5472b552e3296e5582b3f6f2047881012f271f38b66ccbbe40a62fca1488224577b9039dae2e90ee57bdde37733f2396dded1501a38936be95fd7b82ea03ab89acd59c0c5adba138e50ce4a9d6edf52c44e1ff20897f196b43d3cede718211b397a5630969d77dbd9801c8e517c8d7164426cbef239c54e110eeb155257a297f8ca8a18abd80f9ab13f2cb5b48e7e9bcf530825e11a09a424d332184e85df9a77c51ff4a7ef6a65991cbd5d92bd24a7d79a92aa8f889fa02edda71522f012ed097658dd31267239d289c853f2222ed19b3293903ffabee3c9a12052eebe4c3ba07084e020b87fb6282e6f232cf50219e52762088047d4ad3cc3ec35472e04cfc0fa10b841990cd287e3e845586d9dca77385a23326371bc48c85c9780e55af43b6d2c88dc8ceff745351ab62f89998824ffa1e64b16813bfda222e2193f109a5f368f5d82b34e55985414913a870940c9ce2650ea82fe8a5d9bda0b34e0aabb5dacf5458f63a1c48bf18f49f6b16e8818190810b47f6e84cc968e54003b39625e35fae41aa35f4bf3be3f9905e73e8f711b26013af89aa318409275da79314fc199a46e1de2910fb98cd574369a45bdafb86ab18c2d28161d9951e2bc082cc968ce279f694f03dbd3339d12365331afa145e3a3d935b6508bb0a1a674e3d5e165c6cbd0efd1d3aa53505f4b2ef8283e56afba10db005d8941b24b01e019d4ff1488dfba19e89abc85adaf3f975b2d8117d47a6d9a42d4345decf851bf1cfeb4f7147d1e333fab4b5594b974cafaf3e07896e7dd27c35beeb8348b3951083d2c4fc3a5ff11c3b4c389edc23ecb63f69d5bba67f288b2a18491f45dce9802face87e5134483816856b58d0afa42bcf0bdbddfa070bc4c1f85ceeefe308288d5b5f3b842e303ad8e5400aa7a0598027497312f86151cbe1f389bdb665e4940afc95cdaebebaef50c18f3e69b2fd4a9dbf58dd19bacf61f79554ce67acc9c67b57f27f5e9015ef3f901963a17a36f3979911bd58d19c93e9d14dace48ff69e8fb3a7a3b5e9f8be8d0778fa8765634e37f95446dfcbceaf975f87d8578add0fe829003669462004575f6960f0fddbf14c1bc99a7236f42b988b98a3cc2c22faa38270760b1bb841c8cb6be1630ea83edee99f78aa4bd18f22374ec75f7982307269450fd8708859779741d1757a83e53221253b1cc2646e670e1877613096cc033c7876c62b99b858539787a39b63c35cd71f6d20845b7f53db11f02248befadb12c1ada587d0d9c3364cae9a51dba2c00fab5a5ae9e0984d98c06238c9344a89cc3ddb08d18c85b13b78cb06c90e542817987732bc67e9d8f69b4dde1c0007f65299273171b00a7d40546cc30717dfaefdd883016ad70bd88c5a8249e27eea8abd7d716b997cd187a80c30a575ee698686c45903c9988168be8c8122e50cf6633313ee8cc0a9f8bf93f8552f9af3816bc22586e28108f285b838ff7e1cbe5ebde3a7ac1468cae46856bed274ef9256159d96ceb148af13a6d08675fbca5de69df4450b36b948eec9c86d54bc116805b358d340b1e5218e310cb36681947c2135236ab236be60ed1a2f68f36a5ba648a415b9bf1ca0d0c6fb9d31660dbf8c32afab48663f04b8553308345c886ef86d38e29c2f2a77040697afb995622f625e74850ce5ba4b051be486369c86247f73b35f88e45b305cb79efa5abea7f04a3d001095eaac7af47d6e444e6bfd8348d013d12f932f3d357202da2f434fcb2fa43b0e385db131a4b0f118960222a262a534fdcf75d2bd655dc51166c3968a09f9661c537318bdb9e943f8fcf5341f2fa9b5bb112ca95c22a18d13626001f8616fd95d418316f77148839f1cda7ab50f55f7cfa0ff7db1fcb4b5b603a3626a8d2109bc414cb7aa063c1b1fcb0eda5e1895e0f13b25d60568df4e50a0c4df9920502eb38f3d87d1ea78ed9b6ca4645d85c93cffbedce82aeaf979b3d234208d5549ca158bc4dbd5e29891677f9475b5fd6a1b4e24f2b21193da8d82d093d50a9f6bd77df274a0b3d17c9dd9812f10e51595809ac129a81eb96c29fdfe98cd1cf083b02cd64f0ff4e8b50a3581fe590ab3a6141f7eb66e07f948587f3471b4bb7e24e3d47ed41b0016f9a84f88c9952a6defb4e669934791c9f249b17bcecb57ecec7171d8d7475f4316993edc6c8da4de3110ff94862f7fa791dfde45db12342726fc4fe3439e5a679fe2e180256718d8106cb2e043eeee0349d4dd2265bdf89f991274400b99fa83835cc2e7a81950d414a8ce164416502b6ffaa7a1edf3e7557bc9f3e0c8e680fd287347a5d05fd31b8b13533a71be90c47031269aebc022bc43ace4abd245b30f534f38864623b3e36ae761e33d0d8ae9896818dd7b5fd29c9a5e615a5aacfa005ca2fad68da43e1052c3abbea35ac1410288513f03c38c074bb9ea4df7e8090cd49c91f068f47365959869ecf3efdfbbe4523b9c8fbde53d63525c86beba265d2d518ddcbddfac28b6077f04a94c2006aea962e4eaf8f789e275c0cc23de4dacae79804d01f24acba04cfa553408a316e110f3fc845dd7e2df42a6e9400023fd15d52e4a425e5a053af72ce21380d4cd69791125cff196bd131fa5109274939ef5626adf4507209dd397e2ea12c8fe584894c3867e3323493a30fc412f02cf396f67f69cd50d23910a37da20892508228a3bd5a7a7c9c042f4e954d750692fd847104d0015a0cf77b4124de328834167c50a52dce8b1b1d5ed2729ad9be713c604a83326b7da78677c8b9a86306014da4eac43beb626c58f3e0652e84575443a2f9ef5f5a3604956434a77c73622d20286876ec611f649bd2faa242ec7c8d1774d4cd2d01245ba5058b1774f38cf4d01ebb02121b2c87f170034f9f4a55d1d9ca4872a91f4cf0e8c0a7d36ea744298bad6ac77181b1ee3ce7bcc22496528f058201792f2558e117ef6ffc15c5848fa6c56950aa0fefedd7ee80f7600fe1397cd76b902dabafa5e8671fa883857243e85e7a7dd39aa9cf40c0f4570ba31720c14f186712f132211555a3ac48271afa960194dadd1ae0a34498e5a1b1dbee38ca8046cbbfa0fbfa1d0aea6ca97c53e6d79ad2432b3bd0d3f698a2953587d2306c5c487f1fbf53886c57dbc3e6dc3ec1382c0ac4a21199f2ff3306f6b626cb15d3c4d9652131d894150a29240c4a6d639b56b5539e0b5c51d8c0327f5490cea312652be0db5eac4dab4a5918e613b51b15be065294d30e4e155aeba0cd2fc33d0a9a4e586aec5f0d8d1dbabf39d4e679e2025f5c72d5581d75946f5ca2ed27e4f6c56679ce00d8e837967e5b8153844e3d5ab5cb421b03bcc74d0538580177ea628bde371c780aa2793866814204d1e1a4576d89decd3b18441fc32c6ac16a4d0ecfe67f4df2bf5679558099aa4c2d588ed25e582f58ceb05f0970023058395acbf354897f030090f6f40ba3d2e9e92b0f62215918beba67db5ef54b65d0c59dd62dc180377bbddab13016c1466217b7b4e59870e6f2e1882c1f67afe6e6f932682eab7491f2e3d313a2b0b90f58775d4e878223ef9dcdecb363af76a902dd6af80c5b8554e80853dd19f500b1ecd4e51f730a59af5679b99c7dcce3f2a494f17b603148ce127a84c5ee049413d32100d1e56e7a43dd58b7f17d82d93391393a1cebe1aea6a8d9ed71aa3bdbc0051a580d5f4c42eaed6574cb3248b1380dd0abb31217e2dc6676b8b242647a3be50648091d8df04248fffc227c87f5cb97d6abbbecda16a92bce13e8ebe331d3befaf5ea698768010fd0fc3e3627a52ffccb32ea905b7d7d8849d69fcef595c7c4e7d01035440e896ef0d88f87fb7ba3b42356026af24ef4b854a2defaf788c0e814adfc409b951ae14afeabb58712646d82d906dd5cbb72192406ddcfbbafc6f1d19f340d09889f72a6386bf9446294ed8141dd855341d4db97eae7add048f30cf9b505ca5f86b135bc0efc7faf3a98941d413167e21a1902eed6116831b3c03175dd2d8624e35a680569c7dcd4cabaeee8f4d5bb5a9fbc1c617dc21aa19f13a0f4c480c23f7fba030aa2bdb429807c9ea83cbd394017a1872b00cf144b3ed4fd18f659c974acb5dab48c03adf3219a0f1200e24775f8eca1468d19dd2bb1dab201c8ae0b494cebf13933a84838961efb93e1bb40e35568d9f81892ac81a908b44b088da05b9d8881450123a4f75d974faf4a5bee7c607684016a10e6193d7085a5c7ad7ff4c10c2fd098c29217624a3b25237de2cfe997da37b4543c4f315e91b601bb55257c0440c983105dd1fc07f04cad829886788b9013ad2c779d175c7e1890a3feee6bf08f336339ece93619b89acfe2c75a86f27f107d3f0330e59ca05bd236d9e8d91d0a8b1af58918289ac963ddfbc90ab6d63e3b291c7885e413323c278c67df3a2d89f914d161814aa1f11becd0ec579467c256d7ccb2b4eb6d4183c7afb782ef7e1b40b77e8c084de379ee94669b0232bf205f7a6a083206f4bb0fe3f650c1b9c6355947fa9cb66f4303ec2ea49fb9ffe5c5eebaede424089b3943a140f793de32ce4eb35adb6dc9a6e9600e1aa5832803ff39f753881f33329d87b867e9eebea9767033e6a8ebd4d5472151b477869decda43c984a5c3fb2145211f9d054ad0f978d675fa7be17f3e29c4a09216d2a3044e27694215e3a9b0efd05cd2d6971fd77c78a33527e340db7fc42b0b964dd3245532025e3175aa2e3e6687108e6c75684d6dcc22b615a5432f8952af83855ae2410168daa138df1a7c5897daf5519a398c66a71250eb1ad1a47419bcdfa9a405c574e0b2a1ba84479bb621b7206318da23c143477bed4d7f8a82b53f91d19bf25cf1522fb04fc87f59470c1a9b7e6caac49a17474ed2fce5edbfe5af40e08dc627b31b629c2bda1037c87cf0d41f63f2e0689c6f077490a7436600da811f45556dcf0dd7961a42b6cfdfc9c78f423902b88b3da546a9b932449e79ffddd2cb6ff0038a11025ac696e70fdf6cfdb4629f260dfc11cd4be2e6c526ec60705aa3bae19169227c24ea3379325240fda45b24495f4b0e49638ae9602a3c4b5f371da3e8e689994e6553c67137719af0675a0304fdf4a475a3cfe54351d469e078045faff1c1f871f77437092144b7d50f99abbbc421c6bcad30df6719db30617ded3a5d39931ebf783788ea4518189b4b9a334938beddabe7d43ce26b98e901b76587ea910056885189fdcb5cc99f186afea68d67e6eb37d8da81d32732d52542549ae5eda69fdd22e62f22054c4d7e7b1e07cf4c848cf3e6ddcb2c24a9594878773659c8355f23f2e1e22b1b05c86d708d5096254d99dfd3fdbca5544654d9c201696222f535e75dae74423884dac1879900c947fe26c771adca8305a47f16fdaa287dd0ebe045c5e71c3a6667e3f45e9d720994ec448035dbc3a3774cf7d425b85a6e40a2c32d7ca628711892162a0de094142ccd3275233a9af7d2fbe9219e542456de72aa6860c5050652eed9b4b1617d2615fc3dd9f1259dfba9c35b8a7803e7c3250637ba5", 0x1000}, {&(0x7f0000000540)="1d7715569a2f06ecaf20053b75d0540ae567e6fff654b96e05356060293798c1755872fa2f5a6c3c67c3da4a9872e0c4d24735d4fb7e642981416f346ea7b023836bf8bd1018d00078af8049a933bc21bf72280e37cbfff3637783e69714ddbc9cc6142aaf79d1fa13c61626c64e04a97aa0962ea51f8550dd9a85346f3b17ed1d3367cc603797a4418d4338c3437d7d5bb4f5dc0b3d4aa9a529181e5930ff6888e8ae09a911a4ff354d67d2a723b40f8f339a3fb41077c725ec2fc9ba36d4edc3a0d3860e59be5e97ce6b", 0xcb, 0xffffffffffffffd8}], 0x104008, &(0x7f0000000900)={[{@usrquota='usrquota', 0x2c}, {@grpquota='grpquota', 0x2c}, {@gid={'gid', 0x3d, r2}, 0x2c}, {@uid={'uid', 0x3d, r3}, 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@nodiscard='nodiscard', 0x2c}, {@errors_continue='errors=continue', 0x2c}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/audio\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) write$sndseq(r5, &(0x7f00000009c0)=[{0xdae, 0x6, 0x6, 0x4, @time={r6, r7+30000000}, {0x0, 0x4b1}, {0x100000001, 0x4}, @raw8={"a1c2b9dab2e1ba510d51a36e"}}, {0x7ff, 0x0, 0xffff, 0x5, @time, {0x7f, 0x1ff}, {0x101, 0x7fffffff}, @time=@time}, {0x2, 0x1000, 0x0, 0x0, @time={0x77359400}, {0xffffffff7fffffff, 0x20}, {0x1ff, 0x7c35}, @queue={0x9, {0x0, 0x7}}}], 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:18 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') 09:21:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'bridge_slave_0\x00'}}) 09:21:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00000000000000}) 09:21:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x5c0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000001c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000080)=""/8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x312, 0x7, 0xef49, 0x6, 0x4, 0x100, {0x0, @in6={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x17}, 0x800}}, 0x2, 0x4, 0x4, 0x7e53, 0x800}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r3, 0x2263151d}, 0x8) 09:21:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 09:21:19 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x80001}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x80000001, 0x0) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x20) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000500)=0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) statx(r4, &(0x7f0000000480)='./file1\x00', 0x7000, 0x30, &(0x7f0000000580)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000040)='./control\x00', 0x0) accept4(r5, 0x0, &(0x7f0000000240), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) mq_notify(r2, &(0x7f0000000080)={0x0, 0x7, 0x0, @tid=r3}) close(r0) 09:21:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x80403, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x600802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xffffffff80000001}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={r2, 0x100002}, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x4, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x3f}, 0x90) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 09:21:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/208) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:19 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) rt_tgsigqueueinfo(r1, r2, 0x20, &(0x7f0000000140)={0x35, 0x401, 0x8000, 0x5}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40002, 0x80) 09:21:19 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000300)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB='@'], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 09:21:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000005c0)=""/142) kexec_load(0x8000, 0x7, &(0x7f00000004c0)=[{&(0x7f0000000080)="eff35eb0578a42213bb0f98a87577be69c71ee3f48ccb7e20f65ca856f9d05e2eb680b52b2ddbe41fad44f5281835b6991dcfaa022186751ddf9c8048c6a2da32c305318f7e9e35a5f4143f36e6ae803f1e493818dea84f2c5d2e1b91f93d9e135c686feb7b316df53d0f0d68084434c4a05169064e571f859bb", 0x7a, 0x0, 0x73}, {&(0x7f0000000100)="eb24a3be0648614e90c61a654b79d40f338f1ebebebe2313aba82eb71c649b7623766b1b9c862c153b4370d420a3c30834a849850596a749b90adb496e00227090b71b5d901011a1950162f802", 0x4d, 0x3, 0x2}, {&(0x7f0000000180)="6cb09dcccc86d5d1ed42f6ff524e27f8c2be50ef12c33c29862456fd10614d70f53de76610904a09625fa0ec83af316ac532927456ebab25a71340ef90096b4df03b534e998c8bced0069198", 0x4c, 0x1, 0x6}, {&(0x7f0000000200)="4a76a2f44fe0663a7d05e61e5f88222eec378902d97244b88536f1eafa57db9af3bb7d96acf26fe16fd9a7a90f10a95de07038fd5322be1762cae9588a6e8f516ee79ed64528d96e9a387d2baa2f78b750599bbd34d487f49e83ecd7bba651bc1d87ffeb355d46d8cb", 0x69, 0x80000001, 0x6}, {&(0x7f00000002c0)="b297b6eb776cc4c8b2b1c0fb2ccf98db9479ca3fcbe2dc9e7044b7af2c98", 0x1e, 0x3, 0x7f}, {&(0x7f0000000300)="e3a71a7701720c1e9a19064e328cd86849ec3b80b7633b36bfb08f24a176c66b574448c49e1ed6a795eb4fc5e4908ed608a616d21e4af19241cca9fc46de3cbcdbe8a0593cfa74f26be7700344c19c6b53e9932754eb8d95aec6290db865cc7f9dc5bb9a0202619f06a9fc5c16be24f716c804d337e7e1b8bca52ea19efbad84795510a55e020f10bd4563dc6cd9edb58bf27dfd9fd25decfa68c6548e4681ffe8a5ad281b0cb9ed438700d0cb44f37ae1034ba6dfd01a772bef1e93e7bc862918da69c0ed9a2d9d8b8108b18f03ebf969b3", 0xd2, 0x4, 0x5}, {&(0x7f0000000400)="b370759654aafbebab03f19450d67f514efa8e38b077ae43afecab85504ac30e2e27a486d51c949e90280001d63a69b5e96ef05f2cdef4069ca4301367fb6797154cf124e21efb6f10d522faf4e3c43bccd02ee3cff2ba6c3b0a39722dc1008b095464ae79cbae4a7b67cff629e91562062228aabcfe593010575704037c880605a7b99e320905f9a79d227d28fa32d9aa843152546eb3fe900254afc7ff6bbbac05d0e833404e292935f742052d9b", 0xaf, 0x80000001, 0x5}], 0x2a0000) 09:21:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:19 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') 09:21:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/115) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@remote, @local}, &(0x7f0000000100)=0xc) socket$inet6(0xa, 0x3, 0x100000002) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d000000}) 09:21:20 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 09:21:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r4 = getpgrp(0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d40)={0x0}, &(0x7f0000002d80)=0xc) r7 = getuid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000004580)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000004a40)={{0x4, 0x2, 0x1f, 0x4, 'syz0\x00', 0x5}, 0x7fffffff, 0x0, 0x20, r5, 0x6, 0x5, 'syz1\x00', &(0x7f0000004a00)=['&\x00', '$:#\x00', 'lo\x00', '/dev/mixer\x00', '-ppp0z}\x00', '\x00'], 0x1d, [], [0x4, 0x80000000, 0x100000001, 0x6]}) rt_sigqueueinfo(r8, 0xa, &(0x7f0000004b80)={0x31, 0x5, 0x1}) fcntl$getownex(r0, 0x10, &(0x7f00000047c0)={0x0, 0x0}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000004bc0)) ioctl$VT_DISALLOCATE(r1, 0x5608) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004800)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000004900)=0xe8) r11 = getgid() fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000004c00)) sendmsg$netlink(r1, &(0x7f00000049c0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc, &(0x7f0000004740)=[{&(0x7f00000002c0)={0x24dc, 0x41, 0x100, 0x70bd28, 0x25dfdbfd, "", [@typed={0xe8, 0x15, @binary="2db81fd35070ef89969d33521c67a9e99b17c4504b3bdbd88e49126d731ac7380eae29e149c5c0e8266fddf46aba3df0a5b22c4f570a4c83c3f4d9ee7bcc23112c80551167745c7ed3455278b61b5369a17fac1c68fa566524c92adc27d779f4fa23d27439a0f4590b26f6c16ea8709c2c859edfcc9a9c6b796922d0707438b5c1d7687d263fc3027824edfe05f8ba058ff7ea8a1ccf366ae3f23ef555a34ef1093e1cafab4086b83641eea5ed00033a76a80bb6445c882960841f362bb29a244f13dc5f569dae74b93135823d7e57bdae65bd9e8391b832668c3f713ff355d44e75"}, @generic="ce006e38f3", @typed={0x10, 0x5a, @str='wlan1}ppp0\x00'}, @nested={0x14, 0x9, [@typed={0x8, 0x52, @u32=0x2}, @typed={0x8, 0x11, @fd=r1}]}, @nested={0x1194, 0x5f, [@generic="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", @typed={0x14, 0x6b, @ipv6=@loopback={0x0, 0x1}}, @generic="ec273fe93a585092f5b5e9e68d1dd87b0e50da73f9a23b0e83e28bd1e3d3d370216cbad7c0bd01c3bbfb58b1c1c0ad1098143b79cb693fdd4aec8cea60ce31ec922eeb8bfebe905ad67aea964ac6c39459fc55caad7d262fd73ec755d10a9b30f257ae48824ce5ffdc03a653e6fb23b4468cce2480e8cd5a95e04194069e9a54b84a1940689012c8b9f2ee03dc5db243a24ebfa8d973e984801ccb844f3995c2fe993bde3973d34c0cceb2afee8b80cf3054faf7a2933e37acaa8a3441cd6e6a37b15ef19ad6ee918e4d02", @typed={0x8, 0x26, @fd=r1}, @typed={0x8, 0x3b, @uid=r2}, @generic="f16313ab6ad8", @generic="e5fee77df18b0d56fefedf680a5ac07a74682b826cd21bbcd1398d3306e9f37d0b9d10eaee2bcaebb61053e4ed4e9ea670ae5dc50f218b375b6524d7a8e6e23ad159164d58805340fddc6adc01d54c155b5be5351f8e21868cf04539ac96505035b9524eb1c93a73417e1814cd931c5e8bdc24c9bce9a66cd188ddef04b696e407e65e74901ffe332d3bace8664a1f61ecca402a75dc64084348"]}, @generic="736f8bbc4be9d9e23e8eb80d421e4dcd3b328cb27e00113b986a8cd9af5be90db1bb0c0d7b3c2f3de69f1fa89132f52b8f0d1102fc889eb2f6d2dd0a61cd241b438b48c1dd19c2858d9cf5457dd22bd86fe46d013eb67a29b9b809c01466beb39445e70ad0946352c29b345916ba98b0c4f5eab3b664c2da2d5b4e0de46fa2cce0519c021657210c13b9f2750b30345d8d37de5c3345b7e9dfac542e6ccf3b12ef9841616d96ad0ea8d5d9d776c25c0043b2c565fcd8a19cdace0f0c3a32dd484f342cdd772cbe2bc62a6acaae8e1125d3d53a8a8e0ae54366b321005e5793221d6e90582e18324c9e74774fa45c4e1170716ea4c4e8222f8c77aff5eee8bc817a85982c550a1e7462694f68127af244275efa897adc44af5c292403d305b3a6ca90fd3930a52fe97960c05de44a8cdc655f048f5a603b0b418df305a4b4e73cb85d3292eacae233923766e3a9fb22dd655ccbb052efe17c777ca0d2a22f16cd272e8d4675283bfa45853c58faaa28bc4ccf24217ea3e17020744a22e5968ac904beed8d46f49c6e84b7908fda52dada7e3f4236d805e8af591591bf44e6a01d089a0b8a32b6442e7cfc75d883d779ed3b75fcc78d2c28f0149938ed83e09a457bdd98c44c79ca2caa31cc0deba23c3709caa89408f999904782fca457e294fa1950e1d89b78f8110d516931544244e2c1c4de3eb5f42753d7d5d0dd737c0434f4ab42c7bb1241a282cc758c60cbea91cd90e0f3128b29ad96e8f53fae4b2688947794b4dcc98d0dead06aa31be8d346c2291cda5efa611990e532493ad34e42724967eaedcef15b0975ba2eb18d1b315b194afcd2153fbe989a7aafe95bf4964cf018179a2cd1200a3089e2f1effd5100b3e10c478763d465d15fecb4e3b8d97859dd9f5dade1c810401ddc55dbc219d616c1e915e5a6924161c2f15dff6d1d65c601204f9b8a764c4f5b0e926fbe0f02769c4940acdffee685bd893e418a0e322380cc5cf07eea8b48f34ea71b905f3a65914e280f53f788f83fb17d8e6f1c89a5ccbfeb2906ad4a39f807d58c3f2131f8ad141d5362d7bd6280d5008f55337a02264cd46302d029b1ad469fcf7c48e7b9103e9f5caf1b7092d9b0be3d133ac5f96d5820d0b6efd701b2a4cebf71f95ecf0223bec20cf4c10bd0c8faaf0af0b452814af29046008e0735d7a589e5bfb3e0ee2cd30ffe7dd2b96aa9176d0e96b6f4459f06f189a127e8038c29dc9f1bf5477a93f3dedc2e4a2f335ce8a495c8e2fded12b17670dd34252e433640bf1d397ce8380099b822550345c2913d177a7708a8acb4f71938caa8456bed80dcd3793077530f311702f2ec21fd3ea83de63e8fbc11717ba7248423deb73367fed7dd5744fe703e619f5fd56bd8e532e4951e28f3d843c47ed8ae18881a035868ed5bccdca5c4d4d85fc2dbf93cee75a948bc3d82e0ca6281ded4333b03ad7a7c90a976cab379fd531769619e30273a15f8257f7d5db76989594c3d9fc552fa751c046e8e7552b961fd72d3a50a8662b98b4a3fa79e9cb6d31a452a3c250b3f91ccb59391373f1ae41ed65ee4a853aabed96bf6a8aa3f14b1804a4845cb7402ffdc2797e8572b2f9e208a1c28b1d8506434928afb565c81ecc6feb4d24f44bbeb58f2fed74b0c138f01c3676f691784833267a166d607f1f4c2971032f64fad6e7394c1057bc1f3b6b2d344572ec6e11628c492471280e15222337bcf13ed3bfa3d991f9c0399d44f0cf6e30f929beb417630bbf6a2ab510671df7db2c0b3a84bbbacdf1208bde957bf3a700ae5197175cdb45cec2b414f4a25ae1ee98babad84acbe5886c38da961676491bc7a453888afb3294327a4f8e7de605db0464bb799505db7cea66c0b6012528bee1d53c217fec2d12d7a9e5866ab376bdb7a96c684eb83f854c4f1fe8e917dc6003db460720bcedbe0669a41ea0dd083a48478d0f2a5937c354707ee2f221323f80409873cc5d694f00828e11f76213cc1f6704949c30395adb9186975add2cf7dcdfe4faca0ab7349cadb53131d08f83e14f2fc44361356cd39e5056fc77b02b949645e432568d9610b6d4b95de9ad6d1810a66fc0b6f3e263bf05d109c5166d7b7b78204dc3b86314d7a0ab18432252646d25a097af319f3f73c63745b75253f43fecb23c2c3548bc600d72221677fdcf765f544effe2cb0fc5d58523c12d01b2834e993c23b7b6af73f34cee58b4249f0e1430f6606f827b365069747b4cb359678304db778508f116beae30f2adaa5f275bbb073ca9e77f24e77b7298730a7c9ef400e402805d81f2772dd62c4b8c9adb831f11c82988e5963ee58536f6fb3cbbe8dc8182510d9edb190487b5fb3e94bff7ea44133650a42c289de9249c64647582ad59403aa334970eb84bbd80ff4890d8f1b61333dab88e4c071e97beda091bfb0d6af2dbb000d4d9786b90fc1cd2d4b633b6abd50318c3b0b6b1ffac287a9d16f9a8f956a9483bddd240e5024b61c73a3dbf6db13d13e61090b74eba18e3dca568d711c59f0fae830250c6ba71b8ff06c3fb783c9d04cbab689f666bfaea3d97b1d0981453e31ddaf7b85b8e1e308632f272ce2d87f04cb8e41c5c89bd5e4dc22ba4021fd9ad2046c7777c4678ce93ec4ebf9978a594dfbc3a91e8035bfbe63eb8964d0b7c9b842999c664771bc537674eccd99aec865c988da41f481330fe640e1a445c5bf33514bcdb8b11fb5ff8357de26cff3b745f812a39a074ed03c0d167d661261dfa99a293515fe2540dd0ddd15588c576f2448fe7d0281d84ca9e9809bea3c14a346cacecd426c20711962b156692b620307fb7db999dd08c5d7b5882911ffad585a6d5b818c5cbcb8f8f31b329d244324adec338af6decef2b46c1f43876a25ddad917427146c2ab6813a0e8ca1c7ea93d60058f7a10f25f080ed3492a791e4d43d98509423cc3740b909d6878d47a8812f8eee4cccec90999b8b680b62b31426f90e7d1374eaeee1a83fe69dad5a15f4d63679c7ec9c04aa8ab46287af4e225059251ee4119e5d2c25b4a8da879181b3271194d5ae376399f13d0937284904a6079a976d65843d721453f5a7e79c6d782539e9928184e6b52e2fd10f56775f042330dc22cd75ac4045f8bd8a480589542d205252bc46a5ee301d1c1d3e5d65769696256041bb4b8604dbdb9c1e82cb6d073423223cb11fec30a72ac97b7a044fb49844f8194cc653c4555ac95c7709f01be34beecb52a2031122c8b03548578d949871ee6205d357ff44878077c415aec16d035da3020dbb753210beb95cc8f7e16d86120762dd523ce4289f50f8c370104903708fe654e11229a4651df8dc2b3e0cb3fd9cf1a2ac0d3e675fe7758552870319f1ff15792cacfecd57b9074a0fdd075c853394b8939bf7f4190a781e6f0b10ae144ad04c0006a1d2b15ccdd0b291d78c1a8e901a6bfd2064361900c8087196dc5d350159214e370d36c8e537407d91b06157e810cff4f31bcaa6e0d0adffe6dafaa203346ba43181225bffce4297c6bdb99a2d02f965a40aeab7ed26cb3f1e706754c2ee5a6c45bc7fe2e342febf5201dbd35c671f70888551996e314a47c63bde00681c0361dbd3c0dbbe56b28a441861ecf0937f11ee38213c8db77bd5931574703b527d417fe071bd8b685b788f3b45cac473261e278879e91b60d0f35e271ff00f28b408c40d3a9efd511dde6ccb8fcc4b9f4dd52e5b418a611c89187197a9db6ae357182c82eec90c5232e3fb2a2e5e29ccfb67ba8b6e1fa49b201036fffd9458843981d08a9cabef4d5c075ba5d2e182110609dc285ff8044e00417f2359061e29b6f7652cc6e92d26c117efaa504724e2026135d5bb90ddda0e76f6599dfe5b939b84567aca18c9312ad21ecbeb98ff305a204d0b09b4dcb2f6532c9c6bf0fdc7f3366fdb3233bb932e65d78bd6eb923403ae62eca41c4f5c6737a8e58360b912954e4197dbc8f873557b24e90953ada962fb1e661bc5651384d3dd96d5a792dfc39d2d0c777fa1044d12faf3572fbcc256581c1cfef488f96f909bb178f7eab0a4ce48f104f4ee6b14693757416cb663ec09628d6ab1a8ed6c01295a96e16e4fb0709ede918ae2eeb1218a60faaeafc2e39ca0adf9b3dfba14a0e759ce306ce5422d787945cae89b7c8e9648066071abc11daa6fda946e605da50acb35b83664232fad414658d5308d0df47cbf4aa9cb37f55ec4133c6e80aec531e1a966c1518e002e8d8ec3daedb815d37c8c31b7ef2f937970844337393d3b803216bbe50036fbf2fe68d7848f44cde0462bfc0b69c4149aa5f533fbc405c54135c1d845b3833bbc98b589538fdaf8e80a3d6c718907896a0c3ebc99a5733c551e8b0d88194d937d41c11b94a8aa4a90973103aa8c4568a718c364a56c446b836148191d172e9c149bfee23686b8c2927785d45e09212c53998a722539b2dba51657a989bac4c8dd236929085b78b0198b478774ee609fa9bf1b1e415dc34437fed135002c03627c126a851b3b32a4dc2c2492a4930369b6f262602bb88edbb6b638168825b3852be40ed7e58c3eca709a978057843a528befcca7755e48fea49e572a2e01e363774d8e1f8fa164a9f05f3fd332bcb8498c9cac325efbfdee14d010e5b6f070ff1d151c7490934198e0521499ccec0a122452f76d2685d0c3f0394d4926c1602a40618f235abddbf46f927ce5ba4715b810772892636206d051860899000c0e5d03342508eec478910740b78b3de3399a9f87f69dce8bfbd6e7fc882fca9ec2b444da4b7ff8d4d21cf75a4dda4e21c59188b8b84d3f9dbe61a816d73ee7f45862c32f6283e57bb4d6c4ae6a0553ecb5e32ef8e9ce3c8c2e5647ef32d967388b8eac203ebd238f70be388e2d8df857841f7e7a06f27e8bcbce5554240e4348614b5bbae651cb3f21c633f722ef79752f15129696b6c5518d6825077b06d008f4d8311c7aae95267fd25f9e4d06ec119d841171006ddaa3424b03be8facb874e930c2d16794cedb8994361b318291770e1a6ff7a98ad4ee394c64150b4bfdf01bb7546baacc9db392c53fb083f7145db7bfef539dfda308820cd518f83d36484843459e3b03801b77d94ddeb8c088309f87ce88785c422bfff8c41efc9d8c73de2b99075f7b2d1258dc1d12f993988fb25d5a3a0e4743fe991451b832928ed15c81293e420bdd1996a66be58248c8ee7dc26e02ecfc2858b70af550bbf21ea0803324ef147d76e6d7bfed78f2dd65aca132a67085e42a67fbf32081a84ba427f499bb7d5d3c79374d5e45db2982176474b4e5e52d0c8a7e1bc6dc8ba1aba93d3d0c387bbf9f113e01a7f36c8ef0f430a79e974d3bbc0b596bb7d030d44d33ef7419967bf71ba80c471f782750333fbbdea0232532924d5db7404a6e31b9a844fd3aff7dce8e1713b8aae6fc9662cf3743a6a720121f2ae5b2366397dab2f8f8c12f0c7d732c9f08b2736b15eb2afaef92d4e0f2d19aff7e098caa5dc46fb1f92fbc9ceafc08f084c4e04bd8b7c8899685037d91758500fed549156a5c1f55f9baf2bee95d68051ff208a6cd9decdaa38a6cf952d0a56ee4eae72d747e8355d64c80f7930adac0a1eabf4baddcf9d5573b1fba1a8de20972bcbfbc75a7bd7b2861e50df2ef7eb8fc83f24d6d5bf66c6ab87d5273ca9cda3798f5741d1911776fc637e4486912873f55e0754690f4985f206b05214afb2b409448962646f62980be54bed60a5e4b7c17a446febdcca5b70ff3949c6e75a774db9d739c35947ba0073a5b0976fe", @nested={0x21c, 0x3a, [@generic="963394e0a57bddb16202666ac31074c322cea846aab811d5b09ec7c3957cd2a00ceb4dd0e253b531fbc1a49fe42054a54787a07589123fa8dce055e7bf139fb34575d1f72ad028f65623b4b9a54ed96e285d123992c315f99961707c0cb9a9455ce70171882bc8219f0bd43522e7d00b355651c0e6be37c6e53407b3f55e1b086ff04c06bf99aedd474a696cb483d4271a95baf4614edad1b509404c2d85bb201b39337c5111d4aa7f00e9c8c9ece2bb947fa8b570de04daf766e2fff4323539d044926b3f494b313139ae951892455b", @typed={0x8, 0x2f, @uid=r3}, @generic="c5466f3825ee4962f39a51ca70f2d9e7adf4d321789d1f4df8ef55ed208815007cee360075d91907e86ce5938b8f3545d2e14c6f4a", @generic="971261a8c2ffdeda01b1628942aafed1b737af124d9728945a1701ccdd822e015f7e844379d7dad4fd2cc95daeda958899e4fa131c82d48de4b0d4b7258cb9f3ecfc4cf6f9814788f8ecc927acd44b5a693e3bc526b888860923fb97de0dca05c4c7f7c7c2dccf55cfca7268958a55e500e3b1fa050578e1d0cba0e5869410d4fff1b701669c9f96b8caaa64442ed55f3a071f44a47d833f526f5ab8a2486cda8d5235e5348c39ed8ca0580b79597abbb94c7529c944ab043355ff94f80e2a0f06d0374d60e9fca8349ec1bcf869477fd403b0bf56b3c373314939bca680e5b6cdab17a33e3b8eb41e45ea473e92ae96bdbf273a35899b", @typed={0x14, 0x70, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}, @typed={0x8, 0x40, @u32=0x7}]}, 0x24dc}, {&(0x7f00000027c0)={0x4cc, 0x2a, 0x4, 0x70bd2c, 0x25dfdbff, "", [@nested={0xb4, 0x63, [@generic="67b8df4df0d5ad44211601ca0d85c460f4f4caa95017b432608d851927f323b7fc710f18c8298e33b1fe9ed84b9b0ef0e510dcd2120558695dd92c92a0b169e9e41c9d0f4a7d44dfe20a1b4575df3ca5138265407bd66f0ba1f4963baa49c9794dcb2629c3afd9287cdfa3fda69f526bf3b065a08c7ff5c77d377b57ae1da1fd7522401b8bddfad34ad71ff1ad602eb017677e98b991b2c4cc04dcdc437797c489a5", @typed={0xc, 0x25, @u64=0x2}]}, @typed={0x18, 0x4, @str='/dev/vga_arbiter\x00'}, @typed={0x8, 0x3c, @fd=r0}, @nested={0x14, 0x86, [@typed={0x8, 0x1e, @u32=0xffffffffffffff70}, @typed={0x8, 0x54, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}]}, @generic='#o', @generic="97d0626a3eda919b3689a3bac4dc562d1287600f9af754d86862f0529b7a228cdae3146e314587805adf95ea967fd0d8c56c1e8a3618a5330ff6a22b3f953a4048d71d53469ff85e74faa65f706a29b6afc1a110e86e289575ea1f7a71a83fb9f5dbfe7921a0279fe81508bb1fdf591922f49d36c6c543c5a7714c", @generic="a48c7849000890a7b9d71e29128919c215168821b3e169f53ce51deae1adc446b36caa4693601162126d83119b627d64b28a71ec1776887c8a0bfc078c5dbab5e7bdc14761e49acc9e644e5fcf39ae20fbc02ca981f800b49fc25e71aa70e57e09c31eba602efb0019bea6b67f4e5cdc1d150e0891ba340148b01d00fdcc0b2542e355b41911ddf6ea11df28ae346ca882f8fc7d872f16557dcfd6c53ec200ae2395c0c11e1dcec2328a62030030246a266a91a8947c7809303c57e5401b51c0626768fce896df9d3923006d1ff945963ec140bf7ba61971e4a81981caaf9525df92c9c56c4377a14e75854b97639c88a9", @nested={0x264, 0x46, [@generic="6472411518543237d55b8dd1ff7f59c38f7cd71358f0eda0848be924827ce6f2efa7b63a8b9dc685924c2f9a2fc090cf61f8e28983397493c753e85a80a60472faed35bbb691c454a2b4cface0b5d99959e563609acdd84b323ff0cd5497b7e69b526e4a4a7e6d22f5ba4e3c6c7ebbbc9dfb717fe81145637fb2783768431b60b9f959869f5543d960b0a6c2f1084f83b8b4e5ff48c66b9cc6c5a2c66873778a8cbf9e662a06e9a428b58dba0a", @typed={0x10, 0x24, @str='security/\x00'}, @typed={0x8, 0x46, @fd=r1}, @generic="d001a4d52ec09ac99f5e02908fbe9711d692a329ba80ab0c1b31bd3c8e8bec53f21a29d5063bcc7ab6d7769d32debe1484eddae9d1a5f496c5b085e960b9ed852adf5fa04f6dd86be45230fc3f159303d853f4669e90e5fef8858f83f2e610a99e69574b730cee1b08364e15a069cf8857d3e103a4d99b33b068f116a0855d8b1de2d3f17c57071949251b54a5a67d26d12e64692a759122506803566d5accfc2474222cb474aa0813a42fe930", @typed={0x4, 0x46}, @typed={0x4, 0x3f}, @generic="5db7331fabbd36417afc46e4e3930a00142472ff1694724ab9681f5f2bbb88678626382aefe2c90d921d9b636baa2682c9f283cb67b9d758790d7d00405ebe775b368ebb5dc8e31f02841bb5b324aaaca8c80c36fd3841900d5319d34010fe7be3e06f7f3c3daf8213b33847a4c96d56dcb9d8a7c29d0528a62d815762dbd630edabf0a03b211c54ee26c7f680eda7fb6b51712942d553554497cf9b8010758d187a503e1918c5a27264d69ac3155a63a153ceb1b12912d94ed2734070ba446c23b0332b334eead0cc33fb2824b42d63a71b249bad6936fafee4875556cbf91c0c74eb7f3d"]}]}, 0x4cc}, {&(0x7f0000002cc0)={0x54, 0x1b, 0x14, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x30, 0x78, [@typed={0x8, 0x62, @pid=r4}, @typed={0x24, 0x2b, @str="776c616e3175736572776c616e30e57f747275737465645c6574683000"}]}, @typed={0xc, 0x7e, @u64=0x6}, @typed={0x8, 0x11, @ipv4=@loopback=0x7f000001}]}, 0x54}, {&(0x7f0000002dc0)={0x2d4, 0x34, 0xc01, 0x70bd2a, 0x25dfdbfb, "", [@generic="5b59c4b56105080914ec39dfcd2a190bc1dcfd944177ceec5593fcf5b61ab6475a6ee201e8dae62ae7e7c18a1c2c1c90bfd5b7dec9056bb7bc9b3addd68f8f103b18f1018f703e96c629bc45e665500a1ca99993e520d315af2cd34b96fc1f12b5d71764b1406c0f4df24b26e63cc9f2a29bf8dd654e09e8dd0aaa73cce1550e2d85c3745949887e3bedd56a18efc0eb14ab74e43ffce3c19df5d71959c896bea8d15d3e8f766ce84a09", @typed={0x8, 0x14, @pid=r5}, @nested={0x18c, 0x87, [@typed={0x8, 0x71, @pid=r6}, @typed={0x8, 0x78, @uid=r7}, @typed={0x78, 0x2c, @binary="2b50ff94c06e471421d37f694fd3a9db444cbfda41c8dab50895433058ab908c7beab69ddf252c6e395d821792ed793d8ca2754250985b5d2497d1707049af1961c65f0f66a5e03a2a6af47d01ba019a1aa700712f55f41c79877e6bf5e3dea643e66bc913bfb49e9499e4c447801e20bc963eb5"}, @generic="b50274c23c762254383ef88b6427015a390595b1a61d8ecc365bcae26df3da11f52bf07b4db3a46d882644f662fb37759d6b22d751af2e46245c5be49b48d7a8322accb0f4991dfbcd862c3ed9cd6c0ba7c5716acdd25f9b8c826b5d8b9e737646adf6acb4399b23a1196d8d71bad526c3a2bce199cbc2448d5bad5a8bdfc73b991370d6835424be531a96b527be3a36196b5dc7d72b60a4de3a7541e10cc9244444e68c831ced9ff78c8701816cf8ae8635cc14543605545fb654e5b8f8a60df4e10b0e82c4653194fdfac0936ae6a23cdebc9cd3", @typed={0x4, 0x43}, @typed={0x1c, 0x73, @str='[.em1$#ppp1user+system\x00'}, @typed={0x8, 0x5d, @ipv4=@broadcast=0xffffffff}]}, @generic="52f94629e934202f7d9868a7aaf853ec8ab824d2a41761e3ad1787917bfd1736800e53fcc7e6dc02e8010df414ab7566778d35dbbcc8063f7bdcc8e4b3f7ed98e215f1311d4b14d4bf5d18f846d756750ef9837bd8c44f96d4b65eac6704f6289a13352f2e6f4c21f8cf6e35db334e47c20500c407377dd40ecb5a6e7d87e9d83e8685fcc9"]}, 0x2d4}, {&(0x7f00000030c0)={0x314, 0x2c, 0x208, 0x70bd27, 0x25dfdbfc, "", [@nested={0x274, 0x76, [@typed={0x8, 0x3f, @u32=0x100}, @generic="2112d03d3be35fda51e9baedc696500465d53b87fa743b7f94e8", @generic="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", @generic="cc000b92e6729f60cb3e5bc802b1d6db9c8942341415e914beee682564f2a3c6801a08160183c7f8ae196524ab7aa5f00b62d5ab41748f554bdc6d80289d8d08e8890c4a1cd59ef28f633e387da8a0c950159250f1babda194bba9e3a6df7a", @generic="ac25498e5defc042fb2e92c457d0754e999aced024635714ad071db35dd98b0c7742724333007f8a515e5ee38495dd828e2cf007d477add2e762e16b19d6ca4dc3c9fbdd931191a99c7b25809c1160cf9e06bf19e59971fd70800a918b9c4d299d963da33d10dbb863dd4c3a72778ecfe26e865f428255877172a0ac076bdb1b421dedf757e9c44138b80d05d436be11cac45f6f94c2c84ffe404a5c86d2c4d7fd19d0c7dc16b3dcfae8f8cd693352fb5134c90164cc0709d77c30b735d6f1e9d8b01a42455d171beb3a", @generic="c91c80fdf90a56bcdeba589828552b15b034a07df6bd12b2ca39aab6be69e28a539f398e721f58"]}, @typed={0x88, 0x24, @binary="a73a4257f2753da4cb658119ffdee6de13374634489549d66bb16f513bbbaa60fda34281de22143b680d42bc9ce314c05a0cfb116a96141e9ffeddb14dc65a7dd5ebe6fe20c2954bb23605dbd25195aed1c45dcae42e6d116a63aba7adb1e2a282bb8a97247658aec5eb7209aea88e3da29aa054efa733bc7edfb9371fa1193108c5"}, @typed={0x8, 0x52, @str='\x00'}]}, 0x314}, {&(0x7f0000003400)={0xf8, 0x26, 0x100, 0x70bd26, 0x25dfdbfe, "", [@generic="33b2c2d778ffaf25c45780a5d1cc1b632984e3a0b2892dfa72929da7a5f325d6348e5af075c49ad8d6973a74d75982d91a34ea4c1eda6ccac5e78f08ecd79a40aa6803d40feabfd50a1809717ad1683bb3425754aacc74e4bfb827d7c294e584f695e926c6b6bb502c6bb164a6c9305724df7ff8eff515ba0e2cf7aeaefb162c1441471d7f0b3f18d2d72aff81bc91abcfc5856c210b76e19903fafa52561da67d7a9ddbedcec6a6a39fb47d3f2f5915800e7f1b41d41a52bab9a5706840fd27027722007b3c518baffa7b8b06b5e39fd0e339b4068014ddd3546f32851bdcc33ecdfc23a75ef9"]}, 0xf8}, {&(0x7f0000003500)=ANY=[@ANYBLOB="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"], 0x107c}, {&(0x7f00000045c0)={0x180, 0x17, 0x0, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x61, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x8, 0x4a, @pid=r8}, @typed={0x8, 0x6c, @u32=0x3}, @generic="d6c0550d3a4c2989e2a49bb114329da63e30294cc70a4de9b1336cc17abcedc22c430b9cae7e58dc21a33b5cf762eb8524cbca8da660a80034dea0dfa41776e9b0c9441fa99611f5d2908ebcbf687ac72edc007bf3142c1ff372f718032ba30d0963fe9a0ef42b31c24a34e8879e6ceb9ac6243ed5c98aecacc4a59d8bc030d74d10e7b0cedd76eb3797bc5ffc80a265c6cc4d45fe98985c9792ccdfd3752a70e697915f1894e08e4bba48c188b6fc9d82127dc1718c7b3009be89cb37591e8255dd02d09db8aa5fac43eef1ba39248cf4267e57a957a29fb9e66d89fda6cb", @generic="0007ecdd6f8d1e05c4c4f29ae13c5a29ac55ed37c3874102dda12bab887dced5ac18a7fd9c9e805484d6e395bbf8282b4d6bee8aa30ce2b982f31cf15e70fabf792b30cb26baeabe3d3caf7743de4605693d19861cb87fdc40e09aef6201f5f4e402", @typed={0x8, 0x68, @fd=r0}]}, 0x180}], 0x8, &(0x7f0000004940)=[@rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r1, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x58, 0x8004}, 0x4) r12 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r12, 0x80404506, &(0x7f0000000040)=""/8) 09:21:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x33, "faed837163d2cab206100f68aefbc1344592f89a158850da00687d9c8955fce1678e82d9804355c2513907a1269d8f5feddb39"}, &(0x7f00000000c0)=0x3b) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0xab1, 0x80000001, 0x1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000340)={0x1, {{0xa, 0x4e21, 0x8, @loopback={0x0, 0x1}, 0x3f}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x1d}, 0x1}}, {{0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}}, {{0xa, 0x4e24, 0x401, @empty, 0x2695}}, {{0xa, 0x4e20, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x3ff}}]}, 0x290) 09:21:20 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) r4 = semget$private(0x0, 0x3, 0x10) semtimedop(r4, &(0x7f0000000140)=[{0x1, 0x6, 0x800}, {0x4, 0x2, 0x1800}, {0x0, 0x6, 0x1000}, {0x1, 0xda74, 0x1000}, {0x1, 0x3, 0x800}], 0x5, &(0x7f0000000380)={0x0, 0x1c9c380}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:20 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x6e}) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) set_thread_area(&(0x7f0000000080)={0xb995, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x7, 0x6, 0xab, 0x6, 0x5, 0xfff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 09:21:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8, 0x4000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/27, 0x1110000, 0x4000000000001800, 0x100000000}, 0x18) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) fgetxattr(r2, &(0x7f00000001c0)=@random={'system.', '/dev/mixer\x00'}, &(0x7f00000002c0)=""/4096, 0x1000) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x1, 0x20ba8f56, 0x6, "8fef1f97d9c8803a841e0e8cfcd9aa62e62b0752ffa7d14eaa20c22b83057fc113830431ec37c03d11843f9d23e524e2757ef0d72d0a6c8ec083193846d711", 0x11}, 0x60) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:20 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) 09:21:20 executing program 6: r0 = socket$inet6(0xa, 0x7, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00}) 09:21:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='rose0\x00', 0x200}) 09:21:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:21 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}) 09:21:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 09:21:21 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000440)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0xfffffffffffffc48, &(0x7f00000009c0), 0x0, &(0x7f0000000a80)=""/185, 0xb9}, 0x10000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r1, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1) 09:21:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:22 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f000000}) 09:21:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x3000, 0x3000, 0x20000000000, 0x8, 0x3}) setsockopt$inet_dccp_int(r1, 0x21, 0xf, &(0x7f00000000c0)=0x10001, 0x4) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:22 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) 09:21:22 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x0, 0x10001, 0x7}) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000400)='./control\x00', 0x4) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="0000e5008dd539800d2e148937f6327f0f1bc80b8fada91420de08e022875bd593311f2b4f6143e2f576056533c0cbf7f9cf089c6b1ba6d2b433c45d81903acfd537a48faa20fbdc3c36e48065c32a414c976a6deedd35873fd6e1ff91fc617545c36a883feee97f4bcb31780da63791a567fc54eda30e26f4c72e6d63b483944dc118befafad347323f3cd51e63d1e1e801f4dc1586183c0c6ba642629f549542d6464fad4ec155350850466cecca8a5579ed71e44499f2da848b9b49e1f7b861425cfe6fb5ebbc3a3d05e1843eeeac638c501e4ff1948b9107dc81e1fd033336a521d6ce54a758bb"], 0xed) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000380)=0x40) r1 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x40, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000440)=r4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r2, 0x4) 09:21:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$void(r0, 0xc004587f) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:22 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:22 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 09:21:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@local={0xfe, 0x80, [], 0xaa}, @empty, @loopback={0x0, 0x1}, 0x5, 0x7, 0x76e, 0x100, 0x6, 0x100000, r3}) msync(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x2) dup(r2) accept4$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x0) 09:21:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) ioctl$VT_RELDISP(r1, 0x5605) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:21:22 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}) 09:21:22 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:22 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x58, 0x4, 0x2}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:22 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='io\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x3, 0x2, 0xb10}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:23 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:23 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) 09:21:23 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) fstatfs(r1, &(0x7f0000000140)=""/135) 09:21:23 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x10000183, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000140)=r1, 0xffffff86) 09:21:23 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000080)='./control/file0\x00', 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:23 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x10400, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000440)={0xfd, 0x0, [0x8, 0x4bb, 0x6, 0x3]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000380)={'veth1_to_team\x00', 0x5}) 09:21:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffffa, 0x1, 0xff, 0x1, 0x8, 0x6, 0x8}, 0x20) 09:21:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000000c0)={0x6, 0x7, 0x1, 0x0, 0x2, [{0x100000001, 0x3ff, 0x8, 0x0, 0x0, 0x88}, {0xfffffffffffffff7, 0x1, 0x9, 0x0, 0x0, 0x7}]}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) finit_module(r1, &(0x7f0000000080)='/dev/mixer\x00', 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:23 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000080)='./control/file0\x00', 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:24 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x40}) 09:21:24 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 09:21:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x1) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000240)=""/19) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000140)=0x7fffffff, &(0x7f0000000180)=0x4) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000400)=""/8) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000200)={0x57, 0xffff, 0x2, {0x3, 0xe36c}, {0x6, 0xffff}, @rumble={0xfffffffffffffffc, 0x100}}) r2 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x6, &(0x7f00000002c0)=""/246) 09:21:24 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:24 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:24 executing program 6: r0 = socket$inet6(0xa, 0x80007, 0x7fffffe) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000001c0)=""/8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000004c0)=""/222, &(0x7f0000000040)=0xfffffffffffffeeb) 09:21:24 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000440)=""/250, 0xfa}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000880)=""/90, 0x5a}], 0x5, &(0x7f0000000a80)=""/185, 0xb9}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0xf6) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:24 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 09:21:24 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="5cba837afa6ec65d287d1eff05da42d2b01da73e8f1d1202dca065bf4a07934930009e37e33ae5c554f693c3bc715d9e093f0481e82d5333e66fc996594aa40fc468d082ea9aa9d6759deb7a9b3afdbbf8cadf98b7b2ea6c4d52451d09e652d8badbe84d43cb4a8199bcf7c3aff4d4f2482aaef81fe459eff3adfb36e7076f6a613d1a93579d", 0x86}, {&(0x7f0000000140)="df4b91c40d3f405b847510f4b27688bea2874abb4581c15175850126f85b9e7be05860c1d6a639d6cbe1b89691847895d5b949a5fe545d984adb00aa3e48d0895b6e2b8069c2ee2be9cabd7786308ca491742af74b03505a9fc47f12cd4f56c30dfb8e8aa43f2163721fa4ab198fdd2e0ef9888a364d1228d51e7940e3f5e423cddd3694e7dadb01ec098dc8e4f50f7becb7767782877f9e9c03c978f314ab4d369d65cc686c91e3aedb4deb7e4a29f343fcb5685aa0598bc16e735058009863385a219184f493d4d2812a827f867d6780dbb438f1ff74674a4c694cd32499982fe0ca5c6ffaecf8165b40b67d27", 0xee}, {&(0x7f00000002c0)="50593f21613ef0574a58a2d6ea424d2c35f2553293c91fc5c7e1776a245147607a2b9d86336e38a0868f2982b80fd292d0cd3fd3cf22405a694e07df683e6cecd5dcc82a936dd81a83ece8487da48912b5760ea2f2e447b0ad6e20d81a4bbe6172a884521e9efb20221188605aabc3f1c1ab425a73f70032a55268e0c94d0fddeaed599bbd9769351041acb085686da30592193b945f45f6fa311177048a82fe3a3316f23f545c252d05a9c913519198ebe54753", 0xb4}, {&(0x7f0000000380)="e02d7c7b69919066549644b1839e9749c521cb1fad59868dfe9c634bb914dda134a6eaebc6ff79f1eb16781ef9ad26097aef8e56fb25f045e4a6e59fdaba1234d12585f18bf86ae6277639959f146302431cf8b59223f062ec03abe31dfb92beddf9974ed98a033d75349bff89af7c38d9e32d97636104ce27bdfe65a538c13029316b6528e034a27c20e515eb48ba22fbfb36529c4babb3c005a9", 0x9b}], 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:24 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x81, 0x800) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000340)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000200)={0x6, 0x1}) socket$inet6(0xa, 0x3, 0xa) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000240)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000280)=0x7) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) rt_sigtimedwait(&(0x7f0000000040)={0xffff}, &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, 0x8) 09:21:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:25 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x40000) write$P9_RREADLINK(r1, &(0x7f0000000300)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:25 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:25 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 09:21:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80000, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) socket$inet6(0xa, 0x3, 0x400000000000000a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:25 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:25 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:25 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00}) 09:21:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x9, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)={0xa, 0x8, 0x9, 0xffffffff, 0x2}, 0x2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000000040)={@remote, @remote, @broadcast}, &(0x7f00000000c0)=0xc) sendmsg$nl_crypto(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@del={0xf0, 0x11, 0x22c, 0x70bd25, 0x25dfdbfd, {{'aegis128l\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x401}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) 09:21:25 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$void(r0, 0xc0045c78) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x800) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x1fd, 0x0, &(0x7f0000ff3000/0xd000)=nil}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) 09:21:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:26 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000e0001000000357dee01820000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x14d, 0x4, 0x0, 0x0, 0xffffffffffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb05, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) ioctl(r0, 0x3, &(0x7f0000000200)="4bfe27f71dd51d56d26543ac12a4449db434bceb665dbee26e0e2f854003db7731cb2301573210cc1494a5a5510dc334f9f66577f5afe2e17e2f12fbfcc6418c912845f5474d6bbad229c6a2dbc772332150e24cc117cd33f0c432b460f419b8c3734446bf8d46789ea6d305cc512d9b9d4f8b7f45ef1f9170d8f840a0cadf9c61523ee22576f8a130edceea47bf336563ed0b52ba9723b1aa883f3650d0afe1e234a4d9e64c301f04faaefedd8566c8ea0f8d3b546766c597f023f87695699aab0e48f61479483955dd1049c02269fc453ede795f7bf9487f6a00874b70735767e1ccd3a2e9c28173") pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xa) 09:21:26 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 09:21:26 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:26 executing program 6: r0 = socket$inet6(0xa, 0x1000020000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000100)=0xc) 09:21:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:26 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:26 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:26 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}) 09:21:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x2100, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/uinput\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000200)={0x9, 0x3f, 0x1000, 0x4, 0x2, 0xfffffffffffffffc}) socket$inet6(0xa, 0x7, 0x10000000000000a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x40, 0x0) 09:21:26 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0xfffffffffffffc01, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:27 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x9, 0xffff, 0x6000, 0xe160, 0x3ff, 0x7, 0x6, 0x4c96, 0xfffffffffffffffe, 0x6c7e529d, 0xffffffff, 0x8}) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000}) 09:21:27 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0x0, 0x4, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:27 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7dce) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000200)=""/115, &(0x7f0000000280)=0x73) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x1, 0x3}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000040)=""/8) 09:21:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:27 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000300)=0x0) ptrace$peek(0x2, r0, &(0x7f0000000340)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000240)=""/23) ioctl(r1, 0x8, &(0x7f0000000080)="0240c83c6d345f8f762070a61a115676081a7d5a68105ee8e500b60fbfaa78e708cf4a7b03c96f15e340bfc927168a653226c9bd02b4c94a8aa000cbff800ebfb4be4aaa1c8fb2c5bf88e19fa7549eccfe75419d1a11f220ff1255e2be10b3b96cf229fdd7a2a5fef3d3f69b7f368587f0b8d21eb04ea256784bd88a57979cd25adc5783f1c4134fec6ef920507d0a282e5608c29fb0276a4fa7e6c43bd5db3033775c4feb09a1f236e427376da2e63231ac98acb4a5af2bf922c04fe891e0f9e561ac780f00000000") getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x7, {0x100000001, 0x0, 0x3ff, 0x100000001, 0x7fff, 0x800}, 0x3, 0x9}, 0xe) readahead(r1, 0x3, 0x1) sync_file_range(r1, 0x10001, 0x5, 0x6) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000040)=""/8) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) 09:21:27 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000380)=r4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 09:21:27 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0x0, 0x0, 0x80000000000000, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) 09:21:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8000, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0x401, 0x5c7, 0x4, 0x40, 0x6, 0x317c}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000000c0)=""/8) 09:21:27 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0x0, 0x0, 0x0, 0x81, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 09:21:28 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="1000000000000001000000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, {0xa, 0x4e20, 0x8, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8}, 0x2, [0x101, 0x1, 0xfffffffeffffffff, 0x10001, 0x21, 0x80, 0x5, 0x7]}, 0x5c) 09:21:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00}) 09:21:28 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:28 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f, {}, 0x28e}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:28 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000440)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f00000004c0)=""/185, 0xb9}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x9, 0x100000001]}, &(0x7f00000002c0)=0x8) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x800, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000100)="56c2a36a816815859310cb2b5bbf13ebadf8d440b9ca01209d0597a60e145edf52d10300c68f00ec36ab920dc11b3cccddb96d71a7086e59808f6ec2ae9e63e09bf432e3c35d278b750c28cf4bb2a522142ab9457e61a2baf843432c9adf931d19fdcdbdf87fffa8162c75e70b75d5881bae6a71a1d6e059f29a9f547344a49552", 0x81) 09:21:28 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) r1 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x2, 0x101, 0x9, 0x200, 0x0, 0x100, 0x1, 0x2, 0x8001, 0x100000001, 0x9, 0x7f, 0x7fff, 0x1ff, 0x4, 0x1, 0x401, 0x7, 0x5, 0x1, 0xd3a1, 0xff, 0x0, 0x1, 0x4, 0x199e, 0xfffffffffffffffc, 0x563, 0x0, 0xfffffffffffffffe, 0x6bf, 0x9, 0x80, 0xffff, 0x30000000000, 0x6, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0xd92}, 0x820, 0x7, 0x1ff, 0x7, 0x1, 0x6, 0x561b7493}, r1, 0x3, 0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 09:21:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:28 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440), 0x2}, 0xa0) 09:21:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:21:29 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x400000080004) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./control/file0\x00', 0xa) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socket$netlink(0x10, 0x3, 0x7) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000400)='./file0\x00', 0x0, 0x6) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="10002f2d000000000100000001860000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:29 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000340)=[{0x30, 0x0, [0x8, 0x7, 0x2, 0x7, 0x9, 0xc, 0x2, 0x7, 0x1ff, 0x2, 0x55, 0xbd8e, 0x4, 0x6, 0x3a4, 0x3]}, {0x1, 0x0, [0x200, 0x101, 0xfffffffffffffc00, 0x7, 0x4, 0xffffffffffffff80, 0xffffffff, 0x1, 0x7, 0x7, 0x1, 0x9, 0x0, 0x0, 0x1, 0x2dd9]}, {0x1, 0x0, [0x4, 0x0, 0x7, 0x100000000, 0x1, 0x4f80000000000000, 0x2, 0x0, 0x800, 0x7, 0x5, 0xaa9, 0x1, 0x2, 0x5, 0x8]}, {0x1, 0x0, [0x6, 0x100, 0x0, 0x7, 0x5, 0x1f, 0xe47, 0x0, 0x20, 0x4, 0x2c, 0x4, 0x0, 0x0, 0x1f, 0x2]}, {0x10, 0x0, [0x3, 0x8, 0xfffffffffffffc01, 0x3, 0x24, 0x1, 0x9, 0x4, 0x7, 0x872, 0x8000, 0x800, 0x7, 0x4, 0xfffffffffffffff7, 0xff]}, {0x5, 0x0, [0x6, 0x5, 0x97ba, 0x72, 0xffff, 0x4000000000000000, 0x1, 0x2, 0x401, 0x9, 0x4, 0x3ff0000000000, 0x5, 0x8, 0x8001, 0x6]}, {0x10, 0x0, [0x101, 0x8, 0x7, 0x1, 0x44, 0x5, 0x10000, 0xd, 0x7f, 0x3f, 0xc5, 0xa1, 0x0, 0x1ff, 0x401, 0x1]}], r2, 0x1, 0x1, 0x1f8}}, 0x20) 09:21:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:29 executing program 6: r0 = socket$inet6(0xa, 0xfffffffffffb, 0x72b300000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:21:29 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rc={0x1f}, {&(0x7f0000000400)=""/55, 0x37}, &(0x7f0000000440)}, 0xa0) 09:21:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:29 executing program 0: r0 = socket$kcm(0x2, 0x1000000005, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(r1, &(0x7f0000000480)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x26, &(0x7f0000000740)=[{&(0x7f0000000980)=""/224, 0xe0}], 0x1, 0x0, 0xfffffffffffffeb5}, 0x2020) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) r4 = getpgid(0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) ioprio_get$pid(0x2, r4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}) 09:21:29 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4003) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x3, 0x4, 0x5, 0x3, 0x0, 0x6c, 0x2410, 0xa, 0x6820, 0x81, 0x5, 0xe94, 0x200, 0x40, 0x1, 0x3ff, 0x0, 0x4000000000, 0x8, 0x3ce, 0x81, 0x80, 0x0, 0x27f1, 0xfffffffffffffff9, 0x126a, 0x0, 0x5, 0x1ff, 0x1, 0x1, 0x80000001, 0x928e, 0x3, 0x3, 0x81, 0x0, 0x40000000000000, 0x5, @perf_config_ext={0x2, 0x862c}, 0x200, 0x80, 0x0, 0x0, 0x2, 0x71be, 0x200}, r0, 0x9, r2, 0x1) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:29 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:29 executing program 6: r0 = socket$inet6(0xa, 0x80805, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_proto_private(r0, 0x89e7, &(0x7f00000001c0)="dba596382056d03cb7a3c039522edd42917df5c16da4d0") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0x4, 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) splice(r2, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x80000001, 0x8) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x3, 0x100000000}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x44010, r3, 0x0) 09:21:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x16, &(0x7f00000000c0)="f35b79", 0x3) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/248) socket$key(0xf, 0x3, 0x2) chdir(&(0x7f0000000180)='./file0\x00') openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000240)=0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) quotactl(0x2, &(0x7f0000000200)='./file0\x00', r2, &(0x7f00000003c0)="32b6ca3f0b67da6ab4c3dde11868bd3e57d0a9713960f3d00ae6e82b5d5324581418621946bfe0e451dc18cb6f4a84a67a4b4336f520213a8aade0927fab2763a81318a50024b6d7c96e9147be954f5a5d6ae3ce4a8cda18a9ea281937619794ed087c36dfed169871998abd2b77f8ae869d0e535fb8957278609301c5f8158b5f560440751b88fb5d4be33f211f4d6a65c0cdd45a78f6b8f8405dad761730473a4ee77e1cbe879aeb23ffa28342985652003337cd7badd8f0") 09:21:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:29 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000440)="9b60205ebb1cd5855fa8c0c6c5fee9accd8e9a1f02907f7970632ead999823032c941dfc9205efa628ce7194314c09e5ea9ab808cab9eb3f00c0b6b98d0c3545a3417243f5ab029cf38281c7844ec7f3ad021bc3ae231d7abe9821ecfa35205eda65d3a33817238a7568fb5f35d9", 0x1}], 0x0, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/87, 0x57}, {&(0x7f0000000380)=""/41, 0x29}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}], 0x4, &(0x7f0000000580)=""/45, 0x2d, 0xfffffffffffffffe}, 0x40002123) 09:21:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 09:21:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:29 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) getpeername$llc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0xfffffffffffffcfb) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x800000000000004) fchmodat(r2, &(0x7f0000000040)='./file0\x00', 0x20) 09:21:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x0, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x341000, 0x0) connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xc) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xffffff4a) getsockname(r1, &(0x7f00000002c0)=@xdp, &(0x7f0000000200)=0x80) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r2 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r2) io_setup(0x8, &(0x7f00000000c0)=0x0) io_destroy(r3) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000180)=0x9, 0x4) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000040)=""/8) socket$nl_xfrm(0x10, 0x3, 0x6) 09:21:30 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00000000000000}) 09:21:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @rand_addr=0x9}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) 09:21:30 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) timer_create(0x7, &(0x7f0000000080)={0x0, 0x3, 0x1, @thr={&(0x7f0000000300)="8011122ece461d4ef4421465ae1896e299f023c5b8a13190c77786558c2b0c35ea573ac7ae458c588c517cc5471cf1afac01891080d8c429c28be5f896c0c285c5822446492ecc02351a171e3a3c", &(0x7f0000000400)="ce43b054ad1f1e9517cf9d63c1738a162f5792448e4cdd95196a0bd32d84baaa5406928e012f9c74eee64f6a1ad30dbc2a6827473340d9e9765055f2a72133f6864a975e0c8cba7c6f652e9840da9e0244933c8960cd921e7b781a2939a59d8dbaf81cef81191ba39d7c9151983bd96d70bfe87dc081eb343cf5033842f6a341fd41c6466d565317b098188410e83bf72655c19a227ed31c11d0a7187a60ec1fd0bc708c7d11a9b32c665bef9ebe15609b9838c40d"}}, &(0x7f00000004c0)=0x0) timer_getoverrun(r1) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000540)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000005c0)={0x7, 0x8, 0xfa00, {r3, 0x200}}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000a148470ee384ac03442fde31634ce10000100001bb12b601000004"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) fcntl$notify(r1, 0x402, 0x1) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f00000000c0)='net/ipx\x00') socket$can_raw(0x1d, 0x3, 0x1) 09:21:30 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 09:21:30 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) r4 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xffff, 0x400080) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0xfffffffffffffffc, 0x2, 0x2400000000000000, 0x9, 0xc2, 0x9, 0x1f, 0x80000001, 0x4, 0x80000000, 0x800, 0xaaa7, 0x3fff800, 0x2, 0x8, 0x8000], 0x1000, 0xc000}) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:30 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 09:21:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) dup2(r0, r1) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) 09:21:30 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00000000000000}) 09:21:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:31 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x4000000000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x2, 0x5000, 0x4, 0x7ff}) 09:21:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 09:21:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) fcntl$notify(r1, 0x402, 0x1) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:31 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'irlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000980)=ANY=[@ANYRESHEX=r1, @ANYBLOB="2517c1f259cfe9e686c01036efc9b101ec2647bff7257cd43c8e00637aa2593ff32b4c2b21c1722f7de869111822fefc07e3ae6ace5c6c012e6c6dddec6283476fb7c32aebfe91df9ef638b674b97f6ef9f6c80218dbee6fdb7aab823cd4dc55c1c75c755b68e542bff13e5ccd7c01c2cfca11b724319da8", @ANYRESDEC=r1, @ANYPTR64, @ANYPTR64, @ANYRES16=r1, @ANYPTR64, @ANYRES32=r0, @ANYRES64=r0], @ANYRES16=r0], @ANYRES32, @ANYBLOB="136bccd7c1f33f83ed14e131979bcf216396466d770370b7ab63d30d04"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x34d, 0x0, 0x4, 0x0, [], r2, 0xa}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x0, 0x0, 0xffffffffffffff34, 0xfffffffffffffffd}, 0xfffffffffffffffe) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8700000055bfcad573d9058d8cfe013b9f41dcb541140d9afc46303a67d780cb4a2260108e6be3e8bc0a3852f9f62bcc465b9e8c45d14587a2ba029cd20a200eb30c54cc7654a3193dbe42d42bc2fc19837983c287262bfab3e8b7ba3b5c4d47cb95e851b23dd36d5057b1fc45e1280ac2111418d7efb15402b0d4f503ec5ec1f3084c95c5d695f03c0eef766e3771f05dc8caefd03dbed789048adf"], &(0x7f00000004c0)=0x8f) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r5, 0x100000001}, 0x8) openat$md(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000080)=0x1000, 0x4) 09:21:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:21:31 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200080, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000300)=""/66) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {0x101}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0), 0x0, 0x2) close(r0) 09:21:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in=@local}}, {{@in6=@ipv4}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000001c0)=""/8) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) 09:21:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 09:21:31 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x10000, 0xffffffff, 0x2, 0x20, 0x3f0, 0x37ab, 0xc82a, 0x0, 0x8212, 0x78}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) fcntl$notify(r1, 0x402, 0x1) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:32 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000380)=0xc) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:32 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 09:21:32 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:32 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:32 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 09:21:32 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000540)='./control/file0\x00', 0x2, 0x6, &(0x7f00000008c0)=[{&(0x7f0000000580)="47dd94c4d45e0598658191ac9185b0bb331fa561406928f38dac2b792ab58800cf8f2d42ab3df906adaaea52870ba2ded6979737ecedc1c47a3ba47f3c87150ca2f52ae44d03f4f5b299c098fb90cb9435db3a789f5edb3a57085a00f7d451d4ba7e0302ac097caca8d2e0b405aaf2c72f66dc50a3582d3d72a7541478aa75c6f6c1b6d5aab6b1c9c01d8011247519b5582111459fc6e287ef75c30f42734e4f2fafefcc3a51cadebb5557e40ab53335", 0xb0, 0x74ec}, {&(0x7f0000000640)="4f7d1208600abeda9a70d422b15240a87556a58c19038d1e9e8228e2fb0aa37e4e571322f95436bf08b7e2ea1983ac5fcde419aef5c180f0877a943284495f1751c67941c83ccd17c812742f4595a3e0baf549ed1d5e999d81a504c13b9c97ec5a2a660a6f78b7663f880e5e008ed7be1aacee861c75be59831954d2c7266fd52ee3f06f", 0x84, 0x7}, {&(0x7f0000000700)="3a13d3db4d03c88d2362eaf90aa607032463442f3d305e43129cadcbff5a2beed34f3c32b8b0137a7127067d4089a02bcc5b24e308ad7c553e7976b631e2971ebd603fd9e0c346663a9efe00d60701fd9e37400355173f286569550148af8d79998f858bd663b11bf1b1ff351357", 0x6e, 0x4}, {&(0x7f0000000780)="5ea2c8e35b58c96fd8212bdf43b290ca6d1de156", 0x14, 0x8}, {&(0x7f00000007c0)="abe2b0defa5112d0e2b53366e002d2dc1a23676e0b2a615c6daaf5cb3a24331abf625c6be4d4b7129665067d7d035bf071a2bc72e47c1ccc80a6f91da5b3387fd68a282f3629fc014a5c46ce41e3a361b2ac03c4c02b6264", 0x58, 0x6}, {&(0x7f0000000840)="a661b1f54e556cbbb97390babf2a5a0ab8090f833a52508c1a86423d341aa8dfa9296047f4ea3b430757651aa0891231d69f6adc622afcaab0ceddefc9c358e0eba4bb6b57fb43cadee32a3d30fa28d50c6ecc4b68c662d28df3000461e1574d4ec919830b7e25ba15854383ee50", 0x6e, 0x1000}], 0x1, &(0x7f0000000980)={[{@session={'session', 0x3d, 0x4f}, 0x2c}, {@dmode={'dmode', 0x3d, 0x9}, 0x2c}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./control\x00', 0x0) socketpair(0xa, 0x1, 0x3ff, &(0x7f0000000300)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in=@multicast2}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000f300ff0300d25b0000f76d6c685433a463ebfbb2bec116ba000056b9ef5c9eb7172bdee400"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f0000000080)='selinux,%\x00', 0x3) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)={0xff, 0x10000}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) r4 = gettid() kcmp(r3, r4, 0x5, r2, r0) sendfile(r1, r0, &(0x7f0000000100), 0x7) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:32 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000}) 09:21:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) fcntl$notify(r1, 0x402, 0x1) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:33 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x400, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000580)=r3) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={0x6, 0xd68c}) bind$unix(r1, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x40, {0x2, 0x4e24, @broadcast=0xffffffff}, 'ip6tnl0\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff9, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x404080, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x4000, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x4e23, @broadcast=0xffffffff}}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/8) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) 09:21:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d000000}) 09:21:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) [ 270.465491] ISOFS: Invalid session number or type of track [ 270.471197] ISOFS: Invalid session number [ 270.476403] isofs_fill_super: bread failed, dev=loop5, iso_blknum=29, block=58 [ 270.495144] ISOFS: Invalid session number or type of track [ 270.503667] ISOFS: Invalid session number 09:21:33 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="07000000000000292fadf8ffffff0002"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x18000, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x5b6, 0x1ff}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 09:21:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) [ 270.509489] isofs_fill_super: bread failed, dev=loop5, iso_blknum=29, block=58 09:21:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f000000}) 09:21:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) fcntl$notify(r1, 0x402, 0x1) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) [ 271.224371] Unknown ioctl 1074025690 09:21:34 executing program 0: r0 = socket$kcm(0x2, 0xfffffffffffffffd, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000004c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a80)=""/185, 0xb9, 0xfffffffffffffffe}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) r4 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x4500) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000300)={0xffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) socket$inet6(0xa, 0x1, 0x9) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000380)=0x30) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:34 executing program 6: r0 = socket$inet6(0xa, 0x8000a, 0x200000) ioctl(r0, 0x7, &(0x7f0000000840)="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") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x468, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xc0, 0x1e8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x5}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:ptchown_exec_t:s0\x00'}}}, {{@ip={@broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffffff, 0xffffffff, 'bridge_slave_1\x00', 'syzkaller1\x00', {}, {0xff}, 0x8f, 0x1, 0x20}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x444, 0x40}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast=0xffffffff, @broadcast=0xffffffff, 0xffffffff, 0xff, 'vcan0\x00', 'gre0\x00', {0xff}, {}, 0x29, 0x0, 0x1a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={0x38, 'statistic\x00', 0x0, {0x1, 0x1, 0x5, 0x4, 0x7e1d, 0xa26d}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000f303038100f0210504000300aaaaaaaaaa1caaaaaaaaaa1481002400080603039000060c000500000084275c77487864caa79a61a6201ddcd977b671ffbf963f15748b21200a2c5baebc1ae97262"], 0x1c5) 09:21:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:34 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 09:21:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) fcntl$notify(r1, 0x402, 0x1) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 271.359873] Unknown ioctl 1074025690 09:21:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) fcntl$notify(r1, 0x402, 0x1) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:34 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00}) 09:21:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:34 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0xfffffffffffffffe) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mknodat(r1, &(0x7f00000005c0)='\x00', 0x1, 0x2) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000000080), 0xfffffffffffffe6a}], 0x1}], 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000400)={{0xffffffffffffffff, 0x3, 0x80000001, 0x1, 0x7}, 0x9, 0x0, 'id1\x00', 'timer0\x00', 0x0, 0x200, 0x7, 0x4, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000580)={0x10, 0x30, 0xfa00, {&(0x7f0000000340), 0x2, {0xa, 0x4e20, 0x8, @loopback={0x0, 0x1}, 0x7fffffff}, r3}}, 0x38) close(r0) getpeername$netlink(r2, &(0x7f0000000080), &(0x7f0000000300)=0xc) 09:21:34 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) fcntl$dupfd(r0, 0x406, r0) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) getpeername$llc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:34 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:21:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x40) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)={0x91f, 0x7c00000000000000, 0x2, 0x7, 0xffff}) setsockopt$inet6_buf(r0, 0x29, 0xf3, &(0x7f00000002c0)="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", 0x1000) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000012c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4}}, &(0x7f00000014c0)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001500)={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x47, r3}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) renameat2(r2, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@mcast1, @in=@remote}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0x9f) 09:21:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:35 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$sndseq(r1, &(0x7f00000004c0)=[{0x7e, 0x0, 0xffffffffffffff00, 0x2, @time={r2, r3+30000000}, {0x265336e8, 0x37a}, {}, @note={0x8, 0x2, 0x8001, 0x2, 0x21c}}, {0x1000, 0x3, 0x4, 0x8, @tick=0x8, {0x6, 0x8001}, {0x3, 0x6c1}, @quote={{0xb22, 0x8}, 0x4}}, {0x1000, 0x8000, 0x5, 0x8001, @time={0x77359400}, {0xbcb, 0x2}, {0xffffffff80000000, 0x9}, @raw32={[0x8000, 0x7, 0x6]}}, {0x20, 0x3b, 0x10000000000000, 0x835, @tick=0x5, {0x4, 0x8}, {0x7f, 0x6}, @control={0x9, 0x3f, 0xfffffffffffffffe}}, {0x6, 0x3, 0xd7, 0x6, @time={r4, r5+30000000}, {0xe17}, {0xa3}, @addr={0x20, 0x1ff}}, {0xfffffffffffffffb, 0x3, 0xfc53, 0x10000, @tick=0x2, {}, {0x1000, 0x10000}, @addr={0xffffffff7fffffff, 0x8001}}, {0x1ff, 0x8, 0x3b3ca4c9, 0x81, @time={0x0, 0x989680}, {0x7, 0x100000001}, {0x3, 0x3f}, @addr={0x3f, 0xc7}}, {0x7ff, 0x0, 0x0, 0x2859, @time={0x77359400}, {0x200, 0x664}, {0x7ff, 0x3}, @raw32={[0x77, 0x4b1, 0x8]}}, {0x1, 0x3, 0xfffffffffffffffa, 0x4, @tick=0x8, {0x101, 0xfffffffffffffffb}, {0x8, 0x10000}, @ext={0x56, &(0x7f0000000440)="ab97524a86be08c8ee3e697021ee0759e8bf006897232122f1fd6d45bfdb756af133590e584bd792da0ea897cc2662af19828741be3ed057e8857b300985a46ab8eb14b755fdc05537c464c234c2340ceb500fb51a29"}}], 0x1b0) r6 = getuid() r7 = add_key$keyring(&(0x7f0000001980)='keyring\x00', &(0x7f00000019c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_persistent(0x16, r6, r7) sendmsg$nl_route_sched(r1, &(0x7f00000018c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000001880)={&(0x7f0000000680)=@newtaction={0x11e0, 0x30, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x101, 0x400}, [{0x110, 0x1, @m_skbedit={0x10c, 0x3, {{0xc, 0x1, 'skbedit\x00'}, {0x74, 0x2, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x2b, 0x10000008, 0xfffffffffffffeff, 0x1}}, @TCA_SKBEDIT_PTYPE={0x8, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x81, 0x10000002, 0x2, 0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x1ff, 0x7, 0x4, 0x8000}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x101}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xb}}]}, {0x84, 0x6, "8958e2699310371c6119f928af9a9968a34712945bf1e98fcbee225d0b93a62305172a5df792f38467c5f130e52922322ee535c254fbed71a7a9d6f685aedbf365aa2e20ac41007a7fd862f5084334ed14d3f66942b73157e898de52befe141fb82f0bd007b617c62d126d9f28f48ff155830bfbd8411b131365c8bfa6"}}}}, {0x6c, 0x1, @m_nat={0x68, 0x16, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x5, 0xffffffffffffffff, 0x1, 0x9}, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffffff}}}, {0x2c, 0x6, "85289e32bfdcc3dba02c540b0ac41c04faeb633c458e8227f6526cb366bd1ad5fc29c616499c9e"}}}}, {0x1050, 0x1, @m_ife={0x104c, 0x1c, {{0x8, 0x1, 'ife\x00'}, {0x38, 0x2, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x80, 0x3, 0xffffffffffffffff, 0x1f, 0x12}}}, @TCA_IFE_SMAC={0xc, 0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}}, @TCA_IFE_DMAC={0xc, 0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}]}, {0x1004, 0x6, "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"}}}}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1000000000001bc900000100000001d849b647fe05100000000900827c"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) r8 = syz_open_dev$audion(&(0x7f0000001900)='/dev/audio#\x00', 0x40, 0x440000) ioctl$TIOCMGET(r8, 0x5415, &(0x7f0000001940)) 09:21:35 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 09:21:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:35 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 09:21:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:35 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) pipe2(&(0x7f0000000300), 0x800) fcntl$dupfd(r0, 0x0, r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0xc3ca46586ecf49a3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x80000000, 0x20000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000500)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x5494, 0x0, 0x401, 0x100000000, 0x9, 0x7fffffff, 0x815, 0x100000000, 0x101, 0x100, 0xffffffff}, 0xb) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:35 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 09:21:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:36 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000005c0)={r2, 0x9}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000004c0)={r3, @in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xf}, 0x67e67d18}}}, 0xfffffffffffffe16) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r5) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) bind$xdp(r1, &(0x7f0000000140)={0x2c, 0x7, r5, 0x23, r1}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x181000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000440)={@any=0xffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000580)={0x100000001, 0x5, 0x10001}, 0xc) 09:21:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:36 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:21:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)={0x1, 0x80, 0x4, 0x2, 0x7c9c}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x5, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) accept4$packet(r1, &(0x7f0000000140), &(0x7f0000000180)=0x14, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0)=0x7, 0x4) 09:21:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc), 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:36 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 09:21:36 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3, 0x20000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="24000096db0300000000006401000000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:36 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) 09:21:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:36 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 09:21:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:37 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x84000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000380)) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r2, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x400082, 0x0) 09:21:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:37 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xaef, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xc}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1c}}, @in6={0xa, 0x4e21, 0x10000, @mcast2={0xff, 0x2, [], 0x1}, 0x100000000}, @in6={0xa, 0x4e21, 0x20, @loopback={0x0, 0x1}, 0xfffffffffffffffb}, @in={0x2, 0x4e20}], 0x90) 09:21:37 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 09:21:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x7, 0x8100) 09:21:37 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}) 09:21:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:37 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file1\x00', 0x40200000040) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:37 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 09:21:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setfpexc(0xc, 0x100080) ioctl(r0, 0x800, &(0x7f0000000580)="56d740a9ae44282a0ceb0c5ed9d7c2f481a76cee73251e6372a10c5b286b92409186144281436c6828fb63a1dd9c91b9747274929e406c7185ee6638784cfa40e330e2f7b994af2f8c287fd3658d5a8a0725acd9ff9e7fa9229132a175896449d9b113aa77bc37cabdcc2f6e1fbc161cb59f7781256e9436fb1b797e9b121a9d4684b31fbbdc46d3d8d5f698692a67696e6ff9f6f903a33d13c8c4dfc7bc0b293ac3df") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0xd450000, @empty, 0x80000000}}, [0x1, 0xfffffffffffffff9, 0x81, 0x8, 0x1, 0x100000001, 0x4, 0x9, 0x511e, 0xffffffffffff3f0a, 0xd8, 0x7, 0x41, 0xc5, 0x15]}, &(0x7f0000000500)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000540)={r2, 0x2979}, 0x8) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000001c0)={@empty, 0x76, r3}) accept$alg(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r4, 0x4f, "71da4f", "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"}}, 0x110) 09:21:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x7, 0x5, 0x8}, 0x10) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/8) 09:21:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00000000000000}) 09:21:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:38 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000004c0)=0x800000000000000, 0x4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000380)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', r3}) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'bridge0\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x100000000, 0x2}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r2, 0xff, 0x4, [0x0, 0x2, 0x7, 0x8]}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x10000, 0x400) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000040)=""/8) 09:21:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 09:21:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) 09:21:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000001c0)=""/8) 09:21:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 09:21:38 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') unlink(&(0x7f0000000080)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="100000004c0d460001000000010000dd"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) 09:21:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x0, 0x0, 0xb4) 09:21:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:39 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001880)=0x4) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000001480)={"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"}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001440)='/dev/mixer\x00', 0x0, 0x0) r3 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$TCSBRKP(r2, 0x5425, 0x1) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="201adb24442b16b816e8b1cef02364a4050213c5238f651b53b91a96106c58b08fcdb814ee30ab426e46f712a092155453f006893849b8e9e265dec4a6ae63c6aacdc382447139ef5daf33fa54a1a64a637cd7e3ca17940140896cad83e8f01eef2564e289e4a9f0e582b75b157d583fc0b2af8b619e8c442ca25cf64d572d62cfe27d9ed46fe021705fd4079f261903841d2ac84bcbddc34ffc5f3079e1b4827a5852828369c5d1259bd9473672f7445c6a2eec5e43d9afce54db4de2edaadd3e8f73625375a2cda92e667bcae41aee6551547b", 0xd4, 0xffffffffffffffff) r5 = add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)="642555d36ef26cb5cba0a8a3935a625aca9daa9e7894773a714798623315356bfbf860f92968ac72e4c4b901e8629c1f91ad54111bb7c54e5faa97d61997a05332941553828c3166905150889386874cc41ebdd3c141ac856c2b9a3a012defa409e26b4a1c83da6828ef8814d9544580b90e2f061ecccff011715645c1e4a146770012af7bbf247ec7212f74d20fe141295cbc7ee77dece1c37eecc739b6abb32f9fb154090c69", 0xa7, 0xfffffffffffffffa) openat$tun(0xffffffffffffff9c, &(0x7f0000001900)='/dev/net/tun\x00', 0x40, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r5}, &(0x7f0000000440)=""/4096, 0x1000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000018c0)) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x0, 0x0, 0xb4) 09:21:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:39 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}) 09:21:39 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@gettaction={0xb0, 0x32, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x2, 0xd}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd1}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x72289a15}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x7, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x11, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3}}, {0x10, 0x1e, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7f}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3ff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x880) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x0, 0x0, 0xb4) 09:21:39 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00}) 09:21:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl(r0, 0xffffffff7fffffff, &(0x7f0000000200)="826f61d73b7441f3898eba1b16686c7157f3f38074b35779d643b3fdb845a9a5465731ffa48e87630bf1a7be5169deab797a6220e4689f5d12e24ffe7e0a2205b408cffbc9717f5c1805ca4392dfb829522afb4871245e3810e30117ee01387d8731cc1397cb4687c15ad7226494ce07cdb8f6b5fb5d") fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x559044, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/8) 09:21:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680), 0x0, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:39 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x101d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x0, 0x2}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 09:21:40 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='fusectl\x00', 0x1000, &(0x7f0000000400)="6bc4377a8200853f3e9139f8ca022692d55ddefaaaa7153efe0c584c3b2d7bda5a70995ca37622e9e4860d657e237f281e0fd5ac28111be29cf692ff3c88efe07a4e2aade9bed41cd4ef4ce86f51962ddaf62645c78fdd94fa1b3ae69d8c8fad9870ecc5f8f730802a62a8652a08cc01de39e58b251847566f2052424f85618441672a5e77a1116364be38ffcca2a5aa8939b86c5f6f3c1bfbd7967853d8c58b78c51141395454736e254ed1a266e91d13") umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="4b4d2a06b5a923000038469a4e6aa923b2d4eb964248c18026bc23e2fe96f8e2d16399e8b2dd8994ecb43b935caa184e6330ec7e7d97c970049ce4ac7bfd710000319a5d1d12e813e2aa876c99bedef899ecc70c7e812f9bb307e3114a75ec71eeb6804dd264fdba76dc80c28c38887a9f463cd3ef81e48735a3d45fca4e55c03ff36bcbff03950632127e53853461c1cff81ac2583027aaa644f11b79cb8b7c2ea01b225aec3a3e5222656b244caf0da72bab64d8d097a97b1aa0b79f753501997a5a9fcb6b2c60d2ed1df47d26a6f138c7b620f5850000ee2fe47787ca2a4cea14c0e4cf"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:40 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 09:21:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=""/150, 0x96}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="15", 0x1}], 0x1) 09:21:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680), 0x0, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:40 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) rt_sigsuspend(&(0x7f00000000c0), 0x8) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x81}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180), &(0x7f00000002c0)=0x4) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 09:21:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:40 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:21:40 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) socket$pptp(0x18, 0x1, 0x2) 09:21:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680), 0x0, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:40 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) 09:21:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:40 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00}) 09:21:40 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) [ 277.602061] print_req_error: I/O error, dev loop0, sector 2432 [ 277.608132] Buffer I/O error on dev loop0, logical block 304, lost async page write 09:21:41 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/19) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}) 09:21:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) [ 277.828517] FAT-fs (loop1): bogus number of reserved sectors [ 277.834407] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:41 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 09:21:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}) 09:21:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 277.871475] FAT-fs (loop1): bogus number of reserved sectors [ 277.877414] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:41 executing program 0: r0 = socket$kcm(0x2, 0xfffffffffffffffd, 0x300) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000440)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f0000000380)}], 0x4, 0x0, 0x0, 0x7fffffff}, 0x2) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000001b40)=""/185, 0xb9}, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000880)=""/220) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1000000003, &(0x7f0000000a00), &(0x7f00000007c0)=0xfffffffffffffe68) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@call={0x85}, @map={0x18, 0x3, 0x1, 0x0, r4}, @jmp={0x5, 0x5f0, 0xf, 0x6, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x26}, @map={0x18, 0x3, 0x1, 0x0, r5}], {0x95}}, &(0x7f0000000a40)='GPL\x00', 0x7f, 0x13, &(0x7f0000000a80)=""/19, 0x0, 0x1, [], r3, 0x3}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x0, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00000000000000}) 09:21:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') sendfile(r0, r0, &(0x7f0000000040), 0x101) 09:21:41 executing program 6: clone(0x40008000, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000440)) 09:21:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) [ 278.149609] FAT-fs (loop1): bogus number of reserved sectors [ 278.155544] FAT-fs (loop1): Can't find a valid FAT filesystem [ 278.207425] IPVS: ftp: loaded support on port[0] = 21 [ 278.246990] IPVS: ftp: loaded support on port[0] = 21 09:21:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 09:21:42 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) ioctl(r2, 0x4, &(0x7f0000000440)="502d2ef48de2b99509c4f56639370c2070140a57facb70d63a2ce2ec9635d4084b4929e6f37627c31dd99496b344ff2007d0502b8050d1357b8e3c8f5fe795f02b393f30153efd8313605d185799ade5cd372d97b27672850673f41f584d85a4069b3670360775e1d14e8e8a48b0fff8cf0246463f4adb5d25420056cb3b8bb8dfd78005f27aa8a2dbcba4d84b818bc1b034236fcb9731168415619a77cd") setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:42 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) readahead(r0, 0x101, 0x1ff) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="150000000000ffadc9c378bc44"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:42 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x368) sendto$inet6(r1, &(0x7f0000000000), 0x37e, 0x200408c4, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) 09:21:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) [ 278.969575] FAT-fs (loop1): bogus number of reserved sectors [ 278.975524] FAT-fs (loop1): Can't find a valid FAT filesystem [ 278.979984] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:21:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x0, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:42 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x368) sendto$inet6(r1, &(0x7f0000000000), 0x37e, 0x200408c4, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) 09:21:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00000000000000}) 09:21:42 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x800, 0x260000) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000300)={0x3f, 0x1, 0x3, 0x7f, 0x1, 0x5, 0x5, 0x1, 0x7c000000000, 0x53}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000023000/0x3000)=nil, 0x3000}, 0x80020000000001}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24}}, 0x7ff, 0x8, 0x80, 0x9, 0x7}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000500)={r3, 0x758a, 0x42a}, 0x8) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:42 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x368) sendto$inet6(r1, &(0x7f0000000000), 0x37e, 0x200408c4, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 279.103241] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 279.115506] FAT-fs (loop1): bogus number of reserved sectors [ 279.121658] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00}) 09:21:42 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:42 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000013000/0x6000)=nil, 0x6000}, 0x804000005}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) fchownat(r1, &(0x7f0000000080)='./control\x00', r2, r3, 0x400) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) [ 279.154959] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 279.228743] FAT-fs (loop1): bogus number of reserved sectors [ 279.234824] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:43 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x320, 0x8, 0x0, 0x400, 0xffff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x368) sendto$inet6(r1, &(0x7f0000000000), 0x37e, 0x200408c4, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) 09:21:43 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 09:21:43 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x301000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x709567c07c406c4a, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000004c0)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:43 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x0, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:43 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 09:21:43 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 280.035712] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 280.054630] FAT-fs (loop1): bogus number of reserved sectors [ 280.060608] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x368) 09:21:43 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 280.132492] FAT-fs (loop1): bogus number of reserved sectors [ 280.138422] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:43 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}) 09:21:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) socket$inet6_tcp(0xa, 0x1, 0x0) [ 280.195179] FAT-fs (loop1): bogus number of reserved sectors [ 280.201118] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:44 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) bind$packet(r1, &(0x7f0000000140)={0x11, 0x6, r3, 0x1, 0x21, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}, 0x14) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) 09:21:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) 09:21:44 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:44 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:44 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f000000}) 09:21:44 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000300)='./control/file0\x00', 0xc162, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) 09:21:44 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 281.134640] FAT-fs (loop1): bogus number of reserved sectors [ 281.140575] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:44 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:44 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 09:21:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) 09:21:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 281.258539] FAT-fs (loop1): bogus number of reserved sectors [ 281.264675] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:45 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000004c0)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:45 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:21:45 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) 09:21:45 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:45 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:45 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mkdir(&(0x7f0000000080)='./control/file0\x00', 0xe) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x2fd6) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) close(r0) 09:21:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:45 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) 09:21:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:45 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) 09:21:45 executing program 6: listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) [ 282.186627] FAT-fs (loop1): bogus number of reserved sectors [ 282.192706] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:45 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:45 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) uselib(&(0x7f0000000080)='./control\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = accept4(r2, &(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x80, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x6) sendto$inet6(r4, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup2(r2, r3) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000ffe100af0dea8befebd8f17254a89a3814cbf57c2e7f2417554931d8c1c8206ab426a71f91ff62b13d02b3d0d02924aaa3ff1a9d44dcdadedc9c2389b51f1e2336eab476fe53ab8f30d65bd418fb2dcf4d0a7d0aaf288b5e87c5f3b7d3c3612058a20000000000000000000000007efe6ae69b571ab7b5a41cad3b6f99b3214156369371aef65fa01bdbfb21fe425954e92ea029df4525ec4bb81f2f32969ebfd659b91735a96eb4485c43e0f294853ee0063fc48d741e2d33b6a612d1b1344c4467321874"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 282.347279] FAT-fs (loop1): bogus number of reserved sectors [ 282.353488] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:46 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000380)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000440)=r4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:21:46 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) 09:21:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:46 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:46 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:46 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) 09:21:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 09:21:46 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) 09:21:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) [ 283.246237] FAT-fs (loop1): bogus number of reserved sectors [ 283.252246] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) [ 283.362046] FAT-fs (loop1): bogus number of reserved sectors [ 283.368006] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:46 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) io_setup(0x1, &(0x7f0000001a80)=0x0) r4 = accept4(r1, 0x0, &(0x7f00000008c0), 0x80000) io_submit(r3, 0x8, &(0x7f00000019c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x6, r2, &(0x7f0000000400)="da857fd8acde41b0004e2a65592ffb2943d45b869f9dbc2a7123b1768c3e972d99b4be93cd08e8260aac667ab751508e06ec08c57c507ddcf2d070b458b8c27bbbe065b91eb96229985762ce3c1764fb75dd80099cbbdb808a32a6a843dd2e706580907741304c286b91593ca568602e6350d6aaf96bb332037fb31fd9d70c7722ab3600fc55f3b814e754fd01f6a7147e7be3d678f21fcb4364f9631135fa84c8ba9b0564246a9d41351cd72c042ed8e8ffbb4068b58f47574074acd6c869cb58b3adc21fdebb37b5d71f7073a840d420c8043c76ac24dcedf9714f133eef30b72b2cdcd29636e3cdc7bdc3ff10", 0xee, 0x2, 0x0, 0x0, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f0000000500)="e7bfa976ebf87eca4f1c91d31aee846efd19f5db41c12db0ad3fd7a702d072b2e36f8fe445f5e1bf085acb956a40c5eae6fb11b11eb376c7b72edc7d9270dcb40335321ec471992409909b5059fa326c54a72c97ef57ff5e825d5dedc6589e070a6c", 0x62, 0x357, 0x0, 0x0, r1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f0000000580)="ad81ae6bc18b1de72926d2b0d939bdb4245e07d125799d5b139d9e1e3c0793a8dfbe8b65d80dbd101f3ed73fad59843ae8d8be3b68dae09c94e1ac07035f03f0e42d8b8d73329af77fccd2339bbc219f1b14cd1bc22617f2c478543a37e6648bf32154bb74170b7744132804b75a9d6b27c4dffe14ec6c773f75b4229f2c8f4a4f3071", 0x83, 0x7fff, 0x0, 0x1, r1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffb, r2, &(0x7f0000000680)="0aacdd2034a0cf354cdee0f67ebad481a7ff27d6c1fcb95cf298f5a60774b6233e3be2db5969e10646b650769ee8f5c24bd4b99004a65b845906f76b20d031a610ad05a77ac155b02e59aba032494cf83bc335de5c30ff85954d5b02d31ad1400bb410d531a3b13e27bab293648c72feffe99d7eee57dd7f8b7354f59e1ade7cc0334e", 0x83, 0x9, 0x0, 0x0, r1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xb, 0x7, r2, &(0x7f0000000780)="ef88904571f5d186146831c353c68f26f641a63619aa9fa5a93f", 0x1a, 0x3, 0x0, 0x1, r1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x2a, r2, &(0x7f0000000800)="ff3c2258062d290468b12ea29416a1b85177158f0690992751b4c352e2852645d3ec0dc8e4cf5b9fe75873f183ff934a2d53b842d9f0832f2e89ca19a6efe2743c0e9822aa97a717dde2f49d7fbfb96ca7e723d836ddcfa62108914b90ad", 0x5e, 0x0, 0x0, 0x1, r2}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x8, 0x6, r4, &(0x7f0000000900)="5d6e3153a302bcffdbab5219235112be8def18f06c13e0bb2607c5c1f3e41a79f655972f26d5682701341cbc4360f002881c0ea54f984c4ad1675fe5024bbd405c13e12543c9c6f065b47ad821e80d7eaf1d8d7afb77ce2b04ba0cce7cf9ca3baaa1e1b570d575fbe8825f8d5f3f7c507fe3fdc8032addec369cabd64e9ce6e1b65274f4449efa2f725498507aad48e7d1b783760a30c56891de494dc383401ea5175468f9bc911e0c5aebab431eb5b8c201f48c29ddb2ea1ec6fe4b3869d739ca3192deac632eacf8473a000f2ccff49aceda7abfe78a95bb044a5a331333e2589836327208a79e3c1334756a9a0c173724b8043cbb8ca07a6725e1be9c9e11a66bef6e7e93925e4d814bd781b7713be43e64af0e778463fe03811415ddad045783951f6523371ef608e21f2ad4ea602f47cc36181b97b4fbbac520629fe54a0980872e76803f5df8d60fdaa757fceb9a07b4136e8fc202b39a92d709216da2cb0a206094ccb7d9e0158f3d712e37f2f65d344541e3d374e485004ee53dbe07c3d4d99be2e1a79e2084af9f9531769c64edcfe51c2df94170cbec8807432ffd56ef7588416a4bb4f02224bb4294095586d6daa72f88e38760b3900556e3c45ff8d5e0c16345eed5f89901fe92fae3221a1696724d75fc758739a1a970b7512df4d7f13281ec108efe6c33ecee4ab5eb33d0adc63803a1cef0f1d68658efc151eb233281e80c172b88d2db1665be30e83ff92431476f17c18dd64c647d719ae577f3d6875aa51e9c41e1f81f93d5961aac3fa66d5542f3dd40fe9a2dafd8ea5a04fd764b008d7441c07aea421d87c6b9bfa14a0d3dca21e3889ab7f715975d5959cb5b57152b8f9dae06b3b6291be0fb91e4fb8d747488dee0a5d682228ba72e488d8d5a1aa90ad4a9004243afd6404724d17a28342f2c78057f6ab1eb5271d2b0451312afe31e5ff6eba30e7014c2de1be36971ff0f95506ffdf0a1b40dcfb4f6678b4a7ca484cb0abf40f044d2334343f59de3eb40322572a470509a78db99748f0bda1047a56ec9208a1b57b99f22e5774efc634655a16d47b9f66f2f685a028739a782c921ae29dc9c1aa40da78353e0b05c5f9bf736f2871e13803cf7fb19d1d7d094751b1009c7d65b914d6535b3526e966ee43bdaa08b3b2b33c6b7efb3e3711976fde130f0747404c8bcf0217fbc01b3078c2eeea8e55ba9debb996c24ae10c9a0d0296e64d37239af86d34297be7b6ace9a8e8da12f1ac993d720377e270361b1ab937ee7c2c501560decd77514c3a576b25e068e6f21a5e394204ac7ab00f0a9738d244e15591209e73d0cda645882a271e6d1f988c2ad2fdeb78ee93b43fe3eb7e97665fe3b62cfecffc6112badcd2e501968510a0e262e03daf6171c9180c592df52a92144058111154087437527080a89163ab6a8915f86b6f6125a009066aefb46c49103fc8a7984ee31dc2f683066518161b9e1f2fd696da05934a113a14e70f0cff485b00e645e1212b043254691eaa249aa714713e37a590ca584ef827e733a46d4772a76e8b1eac060a9aa1c18ccd221c7fbcdf3890edc45b23deac01fb8b6c183fcc0670fa4d96549e05739b892b744b038f0aa496c4b366e46d50fed36d06f994fad9e2af1cc77259559a4a489d47d81f074da4168f0d5eb5fc333eaf31e8078b13e2da94de0ec12b83ebbca5615bf060c6fa9674197d836bb6ead310f94d7ad3eecc80fd94872e5c9b873c695c91b3c805dee771a47539e86c8773824c269934ebdfc6e4bfec89145c6b0f10be4d214d32f58f3e3c5869b56250b26697f01ddc419a62165d2d97ccbffa0fcff6a44b432b7095a2e7b56bd27ab0cb4315b41a2a925c531acb096f7188d54d373e29440452029eafed3a21d8b546ceb00b4c3d3c6c800b3055fd15ba1e736d820e08200cae759de43b371f9082c743ec6f5aebee2a0da9b0d61bcf60e9d85b755ab3ddf967dfd5e0abeaa3d1974cd54c89b7f1a0cc93d107e1f9da404b4ba4ac7d75babc58273551aa4afe93e0b5786d57a48f186b831ca63e7add79f675061d89b04dc2190f9c715728ffcdc590ee538bbe83140bcf67caad85653a08a083cbfb0c4f176d2c3e847586f76477a6307447d8ce13dd76ada4e905b1744fd7ad53fb2328a3831511cb812aac882ee393d155afa2c26dd1796ffbd29df1df996f2f86308c48af4f75daf4f0e1d7b0ab7897264687f1602a309213fa7048a55fb251d82664fc8d729a027c4cc2778dd2033261d04d946c7313e2a86171845935ef6013a6a6b65254fb7a918bad1eb0796321fe47185fd5561decd7490a1613892c5bf28af8fb1e009483c67965e09b0ebf6a8259fc390a4e15c711d6eee625f05b8f71145f06220acb86a8bc5219487332e850eabd3d53b6b2440da0559935b232358f64243be79423fa6a89aebc15f8608189a1f019c88a09ea07abb6f531511a09c7d6b2122ea0562c7e0479c29af783e0d2f49149f15fdb5b5be7d04cfec1eeddbc1fe7d561719d2cb247bbbdb77e76ef4bf2be3c866da9ffca42562063db99053d460069bcf44582dd7f4e54dcb2ba686d01147b05303d0a62135d7d5efd04d538ea0e9dd0579be5174de2dcc018e20e88616b40cc446749ff05612ed28cf2b18f931d8089ebb1404b1216e3d51bac87603182f840c46b589839586d18b03959c6399a43c06b08f592331b84c6dedc32100ca58b57711b6f8d25eaeeb5e845ed93d65e5e3b98fdf30143af942cf4b066cbae50cb963d3b2183ce66608ca5f530e070f75ba2f19aed8b2d30e850799ea1807b524e499154fa1639fa8884716dbb45679b67e9ae7ab5c4ab8d5e32169d93c1c9878ea60fb848264854b51e4fa3f1668da0e97126b175a64a7bc102672f36723b3843587e27cba78fb1a222bd8c009f89b4d74c22def118ba101bb1422f14b3c06a1c3914bee31842b94705608ea574bc18719743c4b2815977d5139f615cae06fdec147dfc84eac8b222a47d7cdd31a114ee55ee1ff8749b8d8002766e485122557b52034bbd22d903f67d343b22b7fc7a2237c69f60597a01090881476fa05e2b0a6e010d1cf0028bc0e48930a4687509330df17397ac5fad78c0b92aa7bdd16acac14f8b965472c7f8da1c64d40d7264b31091a7ccbd30ed16d9ffc7f38808c0ccb1c0de6236953354717cd5912c8976605ede151b737c1a958733dbf005319095b5ff659c8cb381a34e9da61eb810dfa989719661047851ad284127f4dc13cb04a0237abf160bd3b17344acbeaaa6772fe77c689255563bd7aa934f15a29f938d51460cd6accfaf417ccb5bf6eb75d298bc8f313cf78215543e895151aa15f619d1729f109a51a67696f27d1d6c85dc5f6da1aabecca68669912b6cb8dfefed9b4c0fddda4adabbe16bab8bab9e619c027fa786293c613de0a927aca823cc678f6264c0f173a6e76ff60d568049befbfb5209e6146ad2ef5be9c697b915c3c5c577654b629d1d7e8005b36aba3adb61f4b6829fc6a86b569d047693c505806ab5778bea4ff605adf5d713499e2d124c8137bab670a5421a0a234dbef59dd204cde17a3d92416e6ac07dcd117fc6639fcc3ea3f266d02c57bea80ef461bd08ec65d6b4a31a3f6ad8ee432d720865c36f7df63b0105dc56e4343b11f63d2a0ce4b0b14c767edc4fdeb049084e847d4df77d2bdbfbd1823a2de1681a6f1db07304889874d757755c472393e27ab7ef4aff673082e8456b1622b8edc638ff58a4d924cd957d524e8e58b9272d3bfc3294b729ce2b00f6945ae67d338ac04f6c087dc5273e8aae6be5a8334137dd11544c4e0ec32727525afb8c0b0f575a048737ab00795e9ed0ed2cf583d956a3c95a2ab22bb3975db00e2a9d810663fbcbdc9046b3f7f23fb2afac61d3d14fa95bb18fb2927c06ec33ca070ea6871e72f9fc581cba9234d7a6732112fe9363f2176aa70512cf5501e9e1eed72b899874df41312e611bba3a56e9982521cb0cd301e411cc0d078e81505b1c81b2ee1b110a112690113ed4ad379b1fab55a100a312b6906d439ed667e9fae6d565f4250853c61dd3ad7c9168888513ed6c8f0e29173e801c8dfa2ee5dbcfd6f97f64bbe756cbaa5faf9abb420e414ed795fd9a84e395cfc4c0a13637c2a87a55f34c6632de9bd612187fdaf1bdb6439c63388f81bbb53e913a54586b82308139e6cca28987275a562f716237c1b4017222fd7c64c68a539708b2240d6b77639696af360f83a947c60e2b9161989aba0c092c820f9a3d7892c65b8e2b6c23dd9d0b0b7de7cd28290f15073d086feab17704b3ed9ecca8e8436ec488493289527cfcc52b1d17eb307c8c780ac7aef7607edcdee442bfaaa325e4e3ab70e2c2402539a86ed1d8824ec73388e1ce8755f91258c627a94e1c6db7c7dbe5454289a519dea36ff640f4bb6e5ebdcc78a94855b753330594dec755da02417f0848b4ecc2857b737fe6201af5e342ad491546a8c54cace6c44d2a3b1845daabb12e55257302a7e3c7bee08a80860d17b50412873aaf0b9aeab02c83534df47bac73e7d425047da7ad322ec9b729bf3bbfe0de77a4ddd9476a68c226c196b259a792e7d6ba6fe9366bbd6b638864ae2f764be9d01cbdb3db324218606194292c8805e381274f93ecc17b92bb4dca04e62c9751dc10de32e89f4c197627d23c2e8f635b66bc765c1de215f443e8cccd5359266f7ee6464368e477429d5c2023d5cac5c994e17540dab02f4ff1671dd7136e209f2413f67941ca936844e1434a7525888e64afa9774921a596391849fca39bb8739ca3ad32a58760e809de3da3cfb66a982f7130fba7d4e60ff5b6f5cc8bc5e1d0da1e9d924e855407ec180d61c40d9431c85ba357bde0d573ba5c471a77e35c3e008b24135b067e5f5dce1f5c7501affaf7ed2ed403eeb0cdf030cfdf6cf43187c540a40296bedbc23b47b158a5178fb7d7f70989b0ae360321c65c41f457e8e1bf6ca7fa7e2a018d3024299ad5f22ec63fc35923f6b9ce182a88e16f2ada4e498fe46fdf159886aa23f5922260785d189bc2dd80cc6fc6966fa5993473e04364dd89b9f2c0e47c799b5caae0caced099f615957c42fc9dbf18ab87b1857e558fd59e0e075064fda7d2b7c2ac028f81fe2c2f1f74611ef2bc6759e87042d50039f56953971605ca8de9a7ecc245e6151af09968c85fcd62a1549646387b7eadcb16fc40254e578f9935da9a913d7e88220613b70c742707a2cf1fa0ef305b639d542121cb00fc0d333b82283c5fca6d0157df3e84099c0b39cdac8bebc52e59f5a24b203468d2a606a802723ed7a5a92e5a5acc27827ceef6c82e9a6e91ca5e287d1493e05dfdc8612b67a0f80322bd1e54c2149bb22d1a8c1db631414fea04a5f0eecee41ea6d6416b687d5d1b9eb2227e9452177c57b740615db4ddd25156d4bd699c24fb2521fd580657f2ec16c81a1f3d72f06e8e5feff1fffaca6716a8a0a6b3c960be95050e20acc4a4399b61d6b72521fac8cc07a8e5accca8c899d16e1f0a61f803ad2878e43996170fa63076e67bc571792c0a1e76a665402b7c45940146dcd1bcd7000ffd84ba2c03414832ac9c4d1ad56da770f043a1bdff5e0dac360c8d08c7178f4c84126a1614c8d9c83cfd987afca692365b758edbd8184e09a4f511e40b7a740507fb504b922fc67976d336c8195ee29bcd9dcf0df4b986833ce7ed1aacd674cb1ec5906e6c35fc2684107c51d1237182cd628228db5f60bda978d56f92307c685a3d02a642ffd4fc9", 0x1000, 0x7f, 0x0, 0x1, r2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x3, 0x2, r2, &(0x7f0000001940)="cc3213853b3a4485c4ac4f88786c737e11a601b80041b9ad0bc95dce8640fd7c02a7cad2f87021bff8e87d4f1cb26f437935f763", 0x34, 0xa873, 0x0, 0x1, r2}]) close(r0) 09:21:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:47 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000840)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:47 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0xcb) 09:21:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00}) 09:21:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:47 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') sendfile(r0, r0, &(0x7f0000000040)=0x40000000, 0xf35a) 09:21:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00}) [ 284.163185] FAT-fs (loop1): bogus number of reserved sectors [ 284.169110] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:47 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000180)='.\x00', r0}, 0x10) 09:21:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) [ 284.258930] FAT-fs (loop1): bogus number of reserved sectors [ 284.264911] FAT-fs (loop1): Can't find a valid FAT filesystem [ 284.343347] FAT-fs (loop1): bogus number of reserved sectors [ 284.349274] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:47 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) writev(r0, &(0x7f000042a000)=[{&(0x7f00001e3f5a)='-', 0x1}], 0x1) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") shutdown(r0, 0x1) 09:21:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}) 09:21:48 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xfffffffffffffd05}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r2) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:48 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB="1000"], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 09:21:48 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') semget(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x14}], 0x1, 0x0) 09:21:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:48 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 09:21:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 285.166559] FAT-fs (loop1): bogus number of reserved sectors [ 285.172503] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:48 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000004140)="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", 0x1001, 0x0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ed000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 09:21:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}) [ 285.243653] FAT-fs (loop1): bogus number of reserved sectors [ 285.249619] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 285.343147] FAT-fs (loop1): bogus number of reserved sectors [ 285.349046] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) 09:21:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:49 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:49 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r3) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000380)=0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000480)=r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) 09:21:49 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000a00)={{0x80, 0x5, 0xffffffffffffffc1, 0x6, 0x4, 0x7f}, 0x7}) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000800)='/dev/input/mice\x00', 0x0, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000840)={0x14, 0x11, 0x1, {0x0, 0x0, 0x80000000}}, 0x14) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000880)='/dev/sequencer2\x00', 0x42, 0x0) connect$pppoe(r3, &(0x7f00000008c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'sit0\x00'}}, 0x1e) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) write$sndseq(r4, &(0x7f0000000940)=[{0x5, 0x2, 0x1, 0x101, @tick=0x80000001, {0xc04, 0x7ff}, {0x1, 0x2a51}, @quote={{0x9, 0x3}, 0x9, &(0x7f0000000900)={0x6, 0x0, 0x93d7, 0x80000001, @time={0x0, 0x1c9c380}, {0x0, 0x1e9}, {0x4bba, 0x8}, @result={0x3, 0x1}}}}, {0x200, 0x100000001, 0x7, 0x100000001, @time={0x0, 0x1c9c380}, {0x100, 0xfffffffffffffff7}, {0x6, 0x8}, @note={0x800, 0x6, 0x1ff, 0x0, 0x1}}], 0x60) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) write$sndseq(r4, &(0x7f0000000540)=[{0x8, 0x0, 0x7, 0x80000001, @tick=0xdb, {0xa5f7, 0x800}, {0x0, 0x10001}, @ext={0x48, &(0x7f0000000300)="943eabfb4c0b9cfc35047b5eb8d5dde66ad14f5aee1f34850b89ce80cef0b9d7a3a14d618d7d49ce57747b3542ba578c61cd8f47a1f8ffa7b80d23f4a2965b54ee21122914814338"}}, {0x4, 0x7, 0x8, 0x1ff, @time={r5, r6+30000000}, {0x6, 0x6}, {0x946, 0x1}, @queue={0x2f2c, {0x101, 0x4}}}, {0x4, 0x0, 0x3, 0xfff, @tick=0x82bf, {0x8, 0x8001}, {0xfffffffffffffffc, 0x3f}, @connect={{0x1, 0x800000000000000}, {0xa9b, 0x1ff}}}, {0x1f, 0x2, 0x7, 0x3e8, @time, {0x6, 0x5}, {0x89, 0x401}, @result={0x5, 0x8}}, {0x200, 0x100000001, 0xfffffffffffffbff, 0x57f, @time={0x0, 0x989680}, {0x11d, 0x1}, {0x83f, 0x4}, @addr={0x9, 0x8}}, {0x3ff, 0x67, 0x6, 0xe0000000000000, @tick=0xffffffff, {0x5, 0x6}, {0x5, 0x5}, @raw8={"d465648fbafda8fbddefd8a0"}}, {0x9, 0x9, 0x100, 0x9, @time={r7, r8+10000000}, {0x3, 0x1ff}, {0x80, 0x8001}, @quote={{0x2, 0xffffffff}, 0x6d, &(0x7f0000000480)={0x6, 0x18000000000, 0x0, 0x6, @time={r9, r10+30000000}, {0x800, 0xffffffffffffff00}, {0x10000, 0x400}, @queue={0x11, {0x6, 0x8}}}}}, {0xff, 0x1, 0x5, 0x3, @tick=0x1, {0x8, 0x2}, {0x1, 0x73e}, @time=@tick=0x40}, {0x0, 0x2, 0x100, 0x7, @tick=0xffffffffffffffff, {0x100, 0x2}, {0x7fc000000000, 0x1}, @note={0x7fff, 0x3487, 0x101, 0x56c7, 0x3}}, {0x0, 0x100000001, 0x7, 0xfffffffffffffff7, @time, {0x83f9, 0x2}, {0x8000, 0x3f}, @quote={{0x200, 0x8}, 0x1, &(0x7f0000000500)={0x9, 0x3f, 0xfffffffffffffffd, 0x0, @time={r11, r12+10000000}, {0x3fc0000000000, 0xffffffffffffffc0}, {0x3, 0x1f}, @connect={{0x1f, 0x400}, {0x200, 0x7}}}}}], 0x1e0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f0000000740)='127.0.0.1\x00', &(0x7f0000000780)='./control\x00', &(0x7f00000007c0)='9p\x00', 0x210040, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7472616e733d72646d612c303030303030303030346532322c7301003078666666666666010000000100000066372c72713d3078303030303030303032366465373237662c74696d6530313030303030303030cde82e763782a33030303064382c00d89dd7c5ce92a962a9870c336270f674deae3e94cb5c0400000000002f3defb7cecc6487cf81d44fb9a0242efa4a562cf82266647428a5156d6c6ad4b59c1ef2b25fe3418c9cb041f9da0ec1cd22f9c1ed5eb0cc5781d214086f4b6ff7eba31ac5a11638df86afc2a17b98c582e2ede7"]) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000a80)='./control\x00', 0xc) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r1) 09:21:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 09:21:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 286.259818] FAT-fs (loop1): bogus number of reserved sectors [ 286.265745] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d000000}) 09:21:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 09:21:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 286.389453] FAT-fs (loop1): bogus number of reserved sectors [ 286.395416] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 09:21:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 286.472544] FAT-fs (loop1): bogus number of reserved sectors [ 286.478535] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:50 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:50 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000009c0), 0x81, &(0x7f0000000a80)=""/185, 0x61}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000540)='/dev/adsp#\x00', 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x6443, 0x40000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000480)={'vcan0\x00', 0x400}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000380)=0x73f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x2ec}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)=r5) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000140)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=r1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x1b, 0x5, 0x650, 0x140, 0x0, 0x308, 0x140, 0x140, 0x580, 0x580, 0x580, 0x580, 0x580, 0x5, &(0x7f00000004c0), {[{{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @empty, [0x0, 0xff000000, 0xff, 0xffffff00], [0x0, 0x0, 0xff000000, 0xffffffff], 'rose0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x77, 0x4, 0x1, 0x4}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d4, 0x3, 0x200, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x13, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4=@broadcast=0xffffffff, @icmp_id=0x65, @port=0x4e24}}}, {{@uncond, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x3, 0x40400000000000}}, @common=@srh1={0x90, 'srh\x00', 0x1, {0x21, 0x7fff, 0x40, 0x3ff, 0x5, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0xff0000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 0x100, 0x3040}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@dev={0xfe, 0x80, [], 0x1b}, @icmp_id=0x65, @port=0x4e20}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x0, 0x7ff, 0x8, 0x6aa6, 0x423da305, 0x208c}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x19, 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @ipv4=@multicast2=0xe0000002, @port=0x4e22, @gre_key=0x6}}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @icmp_id=0x66, @icmp_id=0x67}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x6b0) 09:21:50 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) sendmsg$unix(r1, &(0x7f00000007c0)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000400)="9f856e7a55b3184e83225dafc382e091690cf1ddeef656189a37edcc9750ae3d9654609377c27c68aed666b743631f3d608c2b4a61e34f54e4ab5cdf0720d84ebcf6d430445ee04335eff86396546058de4bb98f11c46b147a618d8e59916077fa0563a1fbc44faf5272123ec56da48fe466ff1d9814f0fa7380b0f120278f912867c36a6d482c18e1fc6ad713eca05f9be6a961b0f8babb7fc7cd110bbfefaaced9cb923c14057fe05133cab651cab264fb2eabe2789d94b1131521f79643f27ca296cbd743fa58", 0xc8}, {&(0x7f0000000500)="3d50274d08241342468e2be24a11ae7f58571310b31a5f283fa15c3bbff91921c9fcc1859ba8b123875b65adf14b11f95c50c19c1454818cee987ece7735eb2fc766899b5815e850706816cf8bb62649f0f059252c689e9c6e62d463d405562f034ad011f1540ca5376467580c890c2e68488ad8ea12401f7a3b095ad8bf72d2df8b458e1734c917c76a01a80ab8219634396b726ea3a2615ea6b823ccdcb10e16750ebc8d057f6d26d6ee0de036cd205b40b4fcef48e191a3f319df907b52a2bea0a8eff4f319f7e897ba27", 0xcc}, {&(0x7f0000000600)="47db46c1030b0e07c30f0f4e761e6425903464ec03bd1ed3eb5a757cd336ee1341ae732d8ba4b07b7fbb7c01c0ebe7e903a8ffb83bbd38592b5c29458d78be931db1af2b37f68bd143a8a9a2d47f6208", 0x50}, {&(0x7f0000000080)="2bb1707d0c755cfe9a5a01429a3956e9dbc81b7393855c6d17ec628327a4c1650a48672a", 0x24}, {&(0x7f0000000680)="df55c71eb6b1f5176afe3e53bd76fa11a28f08873b47a7594563b629fd610d4a94d55822d57241d29126402a12620536ea9cf9464668de9ea78808f4c6dea574133a459eac3ded6dc161f6963a1c56b6ba37921c1d1af78eda7e46f7bc4c03d8af933f4d9d0f3b67149fdaaec5bcf92359df009e996a768e0d33d79ea4d43950d40cdc05d669347527af", 0x8a}], 0x5, 0x0, 0x0, 0x4000040}, 0x80) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000}) 09:21:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 287.417299] FAT-fs (loop1): bogus number of reserved sectors [ 287.423264] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00000000000000}) [ 287.500112] FAT-fs (loop1): bogus number of reserved sectors [ 287.506098] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 287.589409] FAT-fs (loop1): bogus number of reserved sectors [ 287.595399] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:51 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:51 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:51 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) r1 = socket(0xb, 0x0, 0x7ef) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000300)=""/105, &(0x7f0000000400)=0x69) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000080)=0x482) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 09:21:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 09:21:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 288.559826] FAT-fs (loop1): bogus number of reserved sectors [ 288.565754] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x5f5) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:52 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 288.671084] FAT-fs (loop1): bogus number of reserved sectors [ 288.677104] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:52 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:52 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:52 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x10001) r0 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0xf35, 0x460000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="d9000000010000001f000000c991da33260101d3c46d2472d89c89c77f3193323f072a9fa9eca9d11dd7cb6e9f1de8b4a2751ef613b07114929717eaabbfb61005c8904468f6a5f482bc757c62768fe77a6f4e47e55faf28a647073ac854d7b506c8b1582ad501538cb47579aa4f8407064db1235744dfbfe3ed9d93d0790b69b486fe26e97f225ab361e194a1358a7815268571f2f4a52c39fe2854420fd4be6858a98681be766a226a7286f77cd6df1936c73c8078feb4cb1634af39f38e331435c4a5640e5c1a0329feb73f36cb61a5b3fd8bd8e54ce91b81b78fc1bf1704481756bbad"]) dup(r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$addseals(r2, 0x409, 0xc) linkat(r2, &(0x7f0000000340)='./control\x00', r2, &(0x7f0000000400)='./control\x00', 0x1400) unlink(&(0x7f0000000080)='./control/file0\x00') openat(r2, &(0x7f00000000c0)='./control/file0\x00', 0x80000, 0x40) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f00000005c0)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r1) 09:21:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:52 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}) 09:21:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc), 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 289.655487] FAT-fs (loop1): bogus number of reserved sectors [ 289.661406] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 09:21:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) 09:21:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:53 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) r1 = socket(0xb, 0x0, 0x7ef) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000300)=""/105, &(0x7f0000000400)=0x69) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000080)=0x482) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 289.765507] FAT-fs (loop1): bogus number of reserved sectors [ 289.771410] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@showexec='showexec', 0x2c}, {@fat=@check_normal='check=normal', 0x2c}]}) [ 289.918954] FAT-fs (loop1): bogus number of reserved sectors [ 289.924906] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:53 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000140)={0x7, 0x8, 0x8, 0x0, 0xc4fa, 0x8}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r0, 0x8911, &(0x7f00000000c0)="025c1eaaa8de0572342750") r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x25, 0x424b, 0x10001, 0x8000, 0x7f, 0x80000001, 0x0, 0x1, 0xd4, 0x7f}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 09:21:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@check_normal='check=normal', 0x2c}]}) [ 290.284775] FAT-fs (loop1): bogus number of reserved sectors [ 290.290703] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc), 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x200000, 0x8, 0x9}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)) 09:21:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 290.486177] FAT-fs (loop1): bogus number of reserved sectors [ 290.492100] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:54 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200080, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000300)=""/66) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {0x101}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0), 0x0, 0x2) close(r0) 09:21:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)) 09:21:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={{0x2, 0xffffffffffffffec, 0x4a33, 0x3, 0x8fce, 0x7}, 0x7848}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) [ 290.826658] FAT-fs (loop1): bogus number of reserved sectors [ 290.832593] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:54 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) 09:21:54 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460000000000002207000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x80) inotify_init1(0x80000) r2 = syz_open_pts(r0, 0x200001) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)) 09:21:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 291.245573] FAT-fs (loop1): bogus number of reserved sectors [ 291.251498] FAT-fs (loop1): Can't find a valid FAT filesystem 09:21:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000008ab1"], 0x3e) ioctl(r0, 0x8913, &(0x7f0000000280)="0254c8ce9520cb70e4594d") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r3 = syz_open_pts(r0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1, 0x50}, 0x90) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) 09:21:54 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc), 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:54 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4003) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x3, 0x4, 0x5, 0x3, 0x0, 0x6c, 0x2410, 0xa, 0x6820, 0x81, 0x5, 0xe94, 0x200, 0x40, 0x1, 0x3ff, 0x0, 0x4000000000, 0x8, 0x3ce, 0x81, 0x80, 0x0, 0x27f1, 0xfffffffffffffff9, 0x126a, 0x0, 0x5, 0x1ff, 0x1, 0x1, 0x80000001, 0x928e, 0x3, 0x3, 0x81, 0x0, 0x40000000000000, 0x5, @perf_config_ext={0x2, 0x862c}, 0x200, 0x80, 0x0, 0x0, 0x2, 0x71be, 0x200}, r0, 0x9, r2, 0x1) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:55 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4003) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x3, 0x4, 0x5, 0x3, 0x0, 0x6c, 0x2410, 0xa, 0x6820, 0x81, 0x5, 0xe94, 0x200, 0x40, 0x1, 0x3ff, 0x0, 0x4000000000, 0x8, 0x3ce, 0x81, 0x80, 0x0, 0x27f1, 0xfffffffffffffff9, 0x126a, 0x0, 0x5, 0x1ff, 0x1, 0x1, 0x80000001, 0x928e, 0x3, 0x3, 0x81, 0x0, 0x40000000000000, 0x5, @perf_config_ext={0x2, 0x862c}, 0x200, 0x80, 0x0, 0x0, 0x2, 0x71be, 0x200}, r0, 0x9, r2, 0x1) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:55 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x3) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:55 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:55 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) 09:21:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:55 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:55 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4003) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x3, 0x4, 0x5, 0x3, 0x0, 0x6c, 0x2410, 0xa, 0x6820, 0x81, 0x5, 0xe94, 0x200, 0x40, 0x1, 0x3ff, 0x0, 0x4000000000, 0x8, 0x3ce, 0x81, 0x80, 0x0, 0x27f1, 0xfffffffffffffff9, 0x126a, 0x0, 0x5, 0x1ff, 0x1, 0x1, 0x80000001, 0x928e, 0x3, 0x3, 0x81, 0x0, 0x40000000000000, 0x5, @perf_config_ext={0x2, 0x862c}, 0x200, 0x80, 0x0, 0x0, 0x2, 0x71be, 0x200}, r0, 0x9, r2, 0x1) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x80007, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000140)={0x6, 0x55b398cc, 0x5, 0x700}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) clock_gettime(0x1, &(0x7f0000000080)) socket$inet6(0xa, 0x4acc86eedc127577, 0xe50) 09:21:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:55 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:55 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:55 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f00000000c0), 0x4003) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:55 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:21:55 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:55 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/206) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:55 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f00000000c0), 0x4003) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:55 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:21:55 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:55 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) 09:21:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:56 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f00000000c0), 0x4003) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sendfile(r0, r0, &(0x7f0000000080), 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) r3 = dup(r1) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x21, 0x24, 0x12, 0xf, 0xb, 0x0, 0x5, 0xf, 0xffffffffffffffff}}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:56 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:21:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:56 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:56 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:21:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:56 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:21:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)={0x17, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 09:21:56 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:56 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:56 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) 09:21:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x10000000000, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x6, 0x0, 0xad7, 0x45}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:56 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:21:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:57 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:57 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:21:57 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x240, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r3}, 0x10) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:57 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:21:57 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:57 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:21:57 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000004200000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009f2eb0d2a940eb3b93f2de8cf54ead2e213ffd1a1dac0561769e0de6c8a"], 0x3e) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xffffffffffffffff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, [], 0xc}, 0x38}}, 0x3ee, 0x9, 0x7, 0x96, 0x8}, &(0x7f0000000240)=0x98) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00'}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f00000000c0)={0x48b5, 0x3, 0x7ff, 0x1}) r5 = syz_open_pts(r0, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000380)=0xffffffffffffff01) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)={0x17}) 09:21:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x420000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) 09:21:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:58 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:58 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x4) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='rose0\x00', 0x200}) 09:21:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:58 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0xfffffffffffffffc) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x8000) write$P9_RXATTRCREATE(r3, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000002c0)=""/4096) 09:21:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='rose0\x00', 0x200}) 09:21:58 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x100, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000080)=0x60) creat(&(0x7f0000000040)='./control\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003940), 0x0, &(0x7f0000003a00)=[@rights={0x10, 0x1, 0x1}], 0x10}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1}], 0x2, 0x0) close(r0) 09:21:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:21:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[], 0xffffff21) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:21:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:21:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='rose0\x00', 0x200}) 09:21:59 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sysfs$3(0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:21:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:21:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:59 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)) sysfs$3(0x3) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(0xffffffffffffffff, &(0x7f0000000200)=""/66, 0x42) 09:21:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) 09:21:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:21:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:21:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:21:59 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:21:59 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x200, 0x101) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x80001, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) 09:22:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 09:22:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) 09:22:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:00 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r0, &(0x7f0000000200)=""/66, 0x42) 09:22:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:22:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x800, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000280)={0x2, 0x1f, 0x7, 0x3}) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r3 = geteuid() mlock(&(0x7f0000ff6000/0x3000)=nil, 0x3000) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)=0x0) keyctl$chown(0x4, r2, r3, r4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x5, {{0xa, 0x4e24, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x6}}, {{0xa, 0x4e23, 0x9, @empty, 0xffff}}}, 0x108) pipe2(&(0x7f0000000300), 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) 09:22:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000008000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:22:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:00 executing program 5 (fault-call:1 fault-nth:0): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:22:00 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r0, &(0x7f0000000200)=""/66, 0x42) 09:22:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) 09:22:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:22:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x10000, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d}, 0x2c}]}}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x101881) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:22:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 297.101336] FAULT_INJECTION: forcing a failure. [ 297.101336] name failslab, interval 1, probability 0, space 0, times 0 [ 297.113519] CPU: 0 PID: 20098 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 297.121941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.131305] Call Trace: [ 297.133913] dump_stack+0x1c9/0x2b4 [ 297.137560] ? dump_stack_print_info.cold.2+0x52/0x52 [ 297.142932] ? lock_acquire+0x1e4/0x540 [ 297.147047] ? get_pid_task+0xd8/0x1a0 09:22:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:22:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x10000000000}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) [ 297.150978] should_fail.cold.4+0xa/0x11 [ 297.155056] ? lock_release+0xa30/0xa30 [ 297.159050] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 297.164168] ? find_vpid+0xf0/0xf0 [ 297.167822] ? __f_unlock_pos+0x19/0x20 [ 297.171845] ? lock_downgrade+0x8f0/0x8f0 [ 297.176012] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 297.181573] ? proc_fail_nth_write+0x9e/0x210 [ 297.186089] ? proc_cwd_link+0x1d0/0x1d0 [ 297.190172] ? lock_acquire+0x1e4/0x540 [ 297.194166] ? lock_acquire+0x1e4/0x540 [ 297.198153] ? fs_reclaim_acquire+0x20/0x20 [ 297.202489] ? lock_downgrade+0x8f0/0x8f0 [ 297.206656] ? check_same_owner+0x340/0x340 [ 297.210988] ? fsnotify_first_mark+0x350/0x350 [ 297.215576] ? __fsnotify_parent+0xcc/0x420 [ 297.219926] ? rcu_note_context_switch+0x730/0x730 [ 297.225254] ? fsnotify+0x14e0/0x14e0 [ 297.229077] __should_failslab+0x124/0x180 [ 297.233330] should_failslab+0x9/0x14 [ 297.237154] __kmalloc_track_caller+0x2c4/0x760 [ 297.241852] ? strncpy_from_user+0x510/0x510 [ 297.246288] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 297.251851] ? strndup_user+0x77/0xd0 [ 297.255674] memdup_user+0x2c/0xa0 [ 297.259232] strndup_user+0x77/0xd0 [ 297.262881] ksys_mount+0x3c/0x140 [ 297.266438] __x64_sys_mount+0xbe/0x150 [ 297.270418] do_syscall_64+0x1b9/0x820 [ 297.274296] ? finish_task_switch+0x1d3/0x870 [ 297.278783] ? syscall_return_slowpath+0x5e0/0x5e0 [ 297.283719] ? syscall_return_slowpath+0x31d/0x5e0 [ 297.288647] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 297.293665] ? prepare_exit_to_usermode+0x291/0x3b0 [ 297.298699] ? perf_trace_sys_enter+0xb10/0xb10 [ 297.303357] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 297.308188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.313380] RIP: 0033:0x455e29 [ 297.316555] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.335760] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 297.343461] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 [ 297.350733] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 297.357993] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 [ 297.365355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 297.372627] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000000 09:22:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)}, 0x0) 09:22:01 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) pipe(&(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:22:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:22:01 executing program 5 (fault-call:1 fault-nth:1): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:22:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x3, 0xa) 09:22:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:01 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r0, &(0x7f0000000200)=""/66, 0x42) 09:22:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 297.983960] FAULT_INJECTION: forcing a failure. [ 297.983960] name failslab, interval 1, probability 0, space 0, times 0 [ 297.995262] CPU: 1 PID: 20136 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 298.003676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.013049] Call Trace: [ 298.015643] dump_stack+0x1c9/0x2b4 [ 298.019276] ? dump_stack_print_info.cold.2+0x52/0x52 [ 298.024482] ? __kernel_text_address+0xd/0x40 [ 298.028978] ? unwind_get_return_address+0x61/0xa0 [ 298.034166] should_fail.cold.4+0xa/0x11 [ 298.038223] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 298.043339] ? save_stack+0xa9/0xd0 [ 298.047737] ? save_stack+0x43/0xd0 [ 298.051377] ? kasan_kmalloc+0xc4/0xe0 [ 298.055251] ? __kmalloc_track_caller+0x14a/0x760 [ 298.060083] ? memdup_user+0x2c/0xa0 [ 298.063784] ? strndup_user+0x77/0xd0 [ 298.067589] ? ksys_mount+0x3c/0x140 [ 298.071308] ? do_syscall_64+0x1b9/0x820 [ 298.075366] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.080726] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 298.086265] ? proc_fail_nth_write+0x9e/0x210 [ 298.090750] ? proc_cwd_link+0x1d0/0x1d0 [ 298.094801] ? lock_acquire+0x1e4/0x540 [ 298.098770] ? lock_acquire+0x1e4/0x540 [ 298.102732] ? fs_reclaim_acquire+0x20/0x20 [ 298.107045] ? lock_downgrade+0x8f0/0x8f0 [ 298.111185] ? check_same_owner+0x340/0x340 [ 298.115510] ? lock_release+0xa30/0xa30 [ 298.119483] ? rcu_note_context_switch+0x730/0x730 [ 298.124400] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 298.129415] __should_failslab+0x124/0x180 [ 298.133644] should_failslab+0x9/0x14 [ 298.137432] __kmalloc_track_caller+0x2c4/0x760 [ 298.142111] ? strncpy_from_user+0x510/0x510 [ 298.146511] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 298.152041] ? strndup_user+0x77/0xd0 [ 298.155837] memdup_user+0x2c/0xa0 [ 298.159636] strndup_user+0x77/0xd0 [ 298.163252] ksys_mount+0x73/0x140 [ 298.166782] __x64_sys_mount+0xbe/0x150 [ 298.170750] do_syscall_64+0x1b9/0x820 [ 298.174636] ? finish_task_switch+0x1d3/0x870 [ 298.179120] ? syscall_return_slowpath+0x5e0/0x5e0 [ 298.184040] ? syscall_return_slowpath+0x31d/0x5e0 [ 298.189053] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 298.194058] ? prepare_exit_to_usermode+0x291/0x3b0 [ 298.199066] ? perf_trace_sys_enter+0xb10/0xb10 [ 298.203726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.208566] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.213744] RIP: 0033:0x455e29 09:22:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 298.216917] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.236199] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.243911] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 [ 298.251166] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 298.258433] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 [ 298.265696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 298.272952] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000001 09:22:01 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x2000000000000001) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46757c0b6c00000000000022070000000000000002000000000000000038000000000000000000000000430fd58c748e0e890000001d0000000000"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r0, 0x541d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x20000, 0x91) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x200001, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x800, 0x101000) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f00000002c0)) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000140), 0x28b) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:22:01 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:22:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) 09:22:01 executing program 5 (fault-call:1 fault-nth:2): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:22:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:22:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 298.385936] FAULT_INJECTION: forcing a failure. [ 298.385936] name failslab, interval 1, probability 0, space 0, times 0 [ 298.397298] CPU: 1 PID: 20164 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 298.405722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.415108] Call Trace: [ 298.417707] dump_stack+0x1c9/0x2b4 [ 298.421345] ? dump_stack_print_info.cold.2+0x52/0x52 [ 298.426550] ? __kernel_text_address+0xd/0x40 [ 298.431873] ? perf_trace_lock+0xde/0x920 09:22:01 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) [ 298.436044] should_fail.cold.4+0xa/0x11 [ 298.440126] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 298.445243] ? zap_class+0x740/0x740 [ 298.448972] ? save_stack+0xa9/0xd0 [ 298.452612] ? kasan_kmalloc+0xc4/0xe0 [ 298.456507] ? __kmalloc_track_caller+0x14a/0x760 [ 298.461366] ? memdup_user+0x2c/0xa0 [ 298.465088] ? strndup_user+0x77/0xd0 [ 298.468899] ? ksys_mount+0x73/0x140 [ 298.472622] ? __x64_sys_mount+0xbe/0x150 [ 298.476785] ? do_syscall_64+0x1b9/0x820 [ 298.480865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 298.486424] ? proc_fail_nth_write+0x9e/0x210 [ 298.490942] ? lock_acquire+0x1e4/0x540 [ 298.494943] ? lock_acquire+0x1e4/0x540 [ 298.498932] ? fs_reclaim_acquire+0x20/0x20 [ 298.503272] ? lock_downgrade+0x8f0/0x8f0 [ 298.507440] ? check_same_owner+0x340/0x340 [ 298.511774] ? lock_release+0xa30/0xa30 [ 298.515764] ? check_same_owner+0x340/0x340 [ 298.520101] ? rcu_note_context_switch+0x730/0x730 [ 298.525055] ? __check_object_size+0x9d/0x5f2 [ 298.529571] __should_failslab+0x124/0x180 [ 298.533829] should_failslab+0x9/0x14 [ 298.537654] kmem_cache_alloc_trace+0x2cb/0x780 [ 298.542339] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 298.547890] ? _copy_from_user+0xdf/0x150 [ 298.552050] copy_mount_options+0x5f/0x380 [ 298.556306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 298.561852] ksys_mount+0xd0/0x140 [ 298.565389] __x64_sys_mount+0xbe/0x150 [ 298.569366] do_syscall_64+0x1b9/0x820 [ 298.573249] ? syscall_return_slowpath+0x5e0/0x5e0 [ 298.578171] ? syscall_return_slowpath+0x31d/0x5e0 [ 298.583098] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 298.588118] ? prepare_exit_to_usermode+0x291/0x3b0 [ 298.593162] ? perf_trace_sys_enter+0xb10/0xb10 [ 298.597840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.602692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.607870] RIP: 0033:0x455e29 [ 298.611047] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.630222] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.637939] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 [ 298.645218] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 298.652484] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 [ 298.659747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 298.667026] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000002 09:22:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)}, 0x0) 09:22:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:22:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:02 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7fa44c4600000000000022070000000000000000000000000000d3000038000000000000000000000000430fd58c748e0e8957ab00000000800000000000"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:22:02 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:22:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x4) 09:22:02 executing program 5 (fault-call:1 fault-nth:3): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) [ 299.119488] FAULT_INJECTION: forcing a failure. [ 299.119488] name failslab, interval 1, probability 0, space 0, times 0 [ 299.130904] CPU: 0 PID: 20191 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 299.139339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.148693] Call Trace: [ 299.151288] dump_stack+0x1c9/0x2b4 [ 299.154938] ? dump_stack_print_info.cold.2+0x52/0x52 [ 299.160145] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 299.165176] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 299.170029] should_fail.cold.4+0xa/0x11 [ 299.174104] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 299.179218] ? lock_release+0xa30/0xa30 [ 299.183206] ? kasan_check_read+0x11/0x20 [ 299.187364] ? rcu_is_watching+0x8c/0x150 [ 299.191523] ? is_bpf_text_address+0xd7/0x170 [ 299.196033] ? kernel_text_address+0x79/0xf0 [ 299.200558] ? __kernel_text_address+0xd/0x40 [ 299.205054] ? lock_acquire+0x1e4/0x540 [ 299.209030] ? fs_reclaim_acquire+0x20/0x20 [ 299.213411] ? lock_downgrade+0x8f0/0x8f0 [ 299.217589] ? check_same_owner+0x340/0x340 [ 299.221902] ? save_stack+0xa9/0xd0 [ 299.225544] ? rcu_note_context_switch+0x730/0x730 [ 299.230464] ? kmem_cache_alloc_trace+0x152/0x780 [ 299.235305] ? copy_mount_options+0x5f/0x380 [ 299.239708] __should_failslab+0x124/0x180 [ 299.243939] should_failslab+0x9/0x14 [ 299.247729] kmem_cache_alloc+0x2af/0x760 [ 299.251869] ? lock_acquire+0x1e4/0x540 [ 299.255845] getname_flags+0xd0/0x5a0 [ 299.259637] user_path_at_empty+0x2d/0x50 [ 299.263788] do_mount+0x180/0x1fb0 [ 299.267490] ? check_same_owner+0x340/0x340 [ 299.271804] ? lock_release+0xa30/0xa30 [ 299.275770] ? check_same_owner+0x340/0x340 [ 299.280088] ? copy_mount_string+0x40/0x40 [ 299.284315] ? kasan_kmalloc+0xc4/0xe0 [ 299.288195] ? kmem_cache_alloc_trace+0x318/0x780 [ 299.293033] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 299.298560] ? _copy_from_user+0xdf/0x150 [ 299.302701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.308228] ? copy_mount_options+0x285/0x380 [ 299.312715] ksys_mount+0x12d/0x140 [ 299.316335] __x64_sys_mount+0xbe/0x150 [ 299.320313] do_syscall_64+0x1b9/0x820 [ 299.324192] ? syscall_return_slowpath+0x5e0/0x5e0 [ 299.329111] ? syscall_return_slowpath+0x31d/0x5e0 [ 299.334035] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 299.339045] ? prepare_exit_to_usermode+0x291/0x3b0 [ 299.344056] ? perf_trace_sys_enter+0xb10/0xb10 [ 299.348729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.353576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.358763] RIP: 0033:0x455e29 [ 299.361937] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.381222] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 299.388935] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 [ 299.396194] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 299.403448] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 [ 299.410708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 09:22:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:22:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 299.417966] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000003 09:22:02 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e24, 0xc0, @loopback={0x0, 0x1}, 0x1}}, 0x9, 0x0, 0x4, 0x10001, 0x88}, &(0x7f0000000240)=0x98) 09:22:02 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:22:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x2, 0x4) 09:22:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:22:02 executing program 5 (fault-call:1 fault-nth:4): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) [ 299.586283] FAULT_INJECTION: forcing a failure. [ 299.586283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.598139] CPU: 1 PID: 20237 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 299.606543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.615900] Call Trace: [ 299.618495] dump_stack+0x1c9/0x2b4 [ 299.622136] ? dump_stack_print_info.cold.2+0x52/0x52 [ 299.627343] ? trace_hardirqs_on+0x10/0x10 [ 299.631597] should_fail.cold.4+0xa/0x11 [ 299.635669] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 299.640789] ? trace_hardirqs_on+0x10/0x10 [ 299.645041] ? trace_hardirqs_on+0x10/0x10 [ 299.649271] ? mnt_get_count+0x150/0x150 [ 299.653322] ? dput.part.26+0x276/0x7a0 [ 299.657435] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 299.662437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.667961] ? should_fail+0x246/0xd86 [ 299.671830] ? is_bpf_text_address+0xae/0x170 [ 299.676307] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 299.681413] __alloc_pages_nodemask+0x36e/0xdb0 [ 299.686068] ? kasan_check_read+0x11/0x20 [ 299.690213] ? rcu_is_watching+0x8c/0x150 [ 299.694360] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 299.699461] ? is_bpf_text_address+0xd7/0x170 [ 299.703953] ? kernel_text_address+0x79/0xf0 [ 299.708347] ? __kernel_text_address+0xd/0x40 [ 299.712844] ? lock_acquire+0x1e4/0x540 [ 299.716814] ? fs_reclaim_acquire+0x20/0x20 [ 299.721134] ? lock_downgrade+0x8f0/0x8f0 [ 299.725300] ? lock_release+0xa30/0xa30 [ 299.729265] ? check_same_owner+0x340/0x340 [ 299.733582] ? save_stack+0xa9/0xd0 [ 299.737209] cache_grow_begin+0x91/0x710 [ 299.741270] kmem_cache_alloc+0x689/0x760 [ 299.745411] ? lock_acquire+0x1e4/0x540 [ 299.749372] getname_flags+0xd0/0x5a0 [ 299.753170] ? lock_acquire+0x1e4/0x540 [ 299.757144] user_path_at_empty+0x2d/0x50 [ 299.761295] do_mount+0x180/0x1fb0 [ 299.764830] ? kasan_check_read+0x11/0x20 [ 299.768961] ? do_raw_spin_unlock+0xa7/0x2f0 [ 299.773354] ? copy_mount_string+0x40/0x40 [ 299.777581] ? kasan_kmalloc+0xc4/0xe0 [ 299.781461] ? kmem_cache_alloc_trace+0x318/0x780 [ 299.786293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.791817] ? copy_mount_options+0x285/0x380 [ 299.796308] ksys_mount+0x12d/0x140 [ 299.799924] __x64_sys_mount+0xbe/0x150 [ 299.803883] do_syscall_64+0x1b9/0x820 [ 299.807754] ? finish_task_switch+0x1d3/0x870 [ 299.812241] ? syscall_return_slowpath+0x5e0/0x5e0 [ 299.817158] ? syscall_return_slowpath+0x31d/0x5e0 [ 299.822070] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 299.827069] ? prepare_exit_to_usermode+0x291/0x3b0 [ 299.832085] ? perf_trace_sys_enter+0xb10/0xb10 [ 299.836752] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.841595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.846769] RIP: 0033:0x455e29 [ 299.849945] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.869133] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 299.876828] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 09:22:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)}, 0x0) 09:22:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) 09:22:03 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:22:03 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r1, 0x7, 0xffff, &(0x7f0000000000), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_pts(r0, 0x4) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) 09:22:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:22:03 executing program 5 (fault-call:1 fault-nth:5): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) [ 299.884098] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 299.891350] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 [ 299.898600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 299.905851] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000004 [ 299.980690] FAULT_INJECTION: forcing a failure. [ 299.980690] name failslab, interval 1, probability 0, space 0, times 0 [ 299.992044] CPU: 1 PID: 20255 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 300.000447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.009802] Call Trace: [ 300.012400] dump_stack+0x1c9/0x2b4 [ 300.016038] ? dump_stack_print_info.cold.2+0x52/0x52 [ 300.021243] ? putname+0xf2/0x130 [ 300.024708] ? filename_lookup+0x397/0x510 09:22:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) [ 300.028952] ? user_path_at_empty+0x40/0x50 [ 300.033285] ? do_mount+0x180/0x1fb0 [ 300.037008] ? __x64_sys_mount+0xbe/0x150 [ 300.041167] should_fail.cold.4+0xa/0x11 [ 300.045240] ? do_raw_spin_unlock+0xa7/0x2f0 [ 300.049655] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 300.054768] ? kasan_check_write+0x14/0x20 [ 300.059011] ? do_raw_spin_lock+0xc1/0x200 [ 300.063283] ? trace_hardirqs_off+0xd/0x10 [ 300.067524] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 300.072634] ? debug_check_no_obj_freed+0x30b/0x595 [ 300.077661] ? path_lookupat.isra.45+0x27d/0xbf0 [ 300.082431] ? trace_hardirqs_off+0xd/0x10 [ 300.086673] ? quarantine_put+0x10d/0x1b0 [ 300.090851] ? lock_acquire+0x1e4/0x540 [ 300.094837] ? fs_reclaim_acquire+0x20/0x20 [ 300.099169] ? lock_downgrade+0x8f0/0x8f0 [ 300.103331] ? check_same_owner+0x340/0x340 [ 300.107655] ? lock_downgrade+0x8f0/0x8f0 [ 300.111790] ? rcu_note_context_switch+0x730/0x730 [ 300.116708] __should_failslab+0x124/0x180 [ 300.120928] should_failslab+0x9/0x14 [ 300.124718] kmem_cache_alloc_trace+0x2cb/0x780 [ 300.129370] ? kasan_check_write+0x14/0x20 [ 300.133586] ? do_raw_read_unlock+0x3f/0x60 [ 300.137911] vfs_new_fs_context+0x5a/0x700 [ 300.142157] do_mount+0x5cf/0x1fb0 [ 300.145688] ? check_same_owner+0x340/0x340 [ 300.149995] ? lock_release+0xa30/0xa30 [ 300.153957] ? copy_mount_string+0x40/0x40 [ 300.158178] ? retint_kernel+0x10/0x10 [ 300.162059] ? copy_mount_options+0x1d9/0x380 [ 300.166541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 300.172076] ? copy_mount_options+0x285/0x380 [ 300.176571] ksys_mount+0x12d/0x140 [ 300.180193] __x64_sys_mount+0xbe/0x150 [ 300.184160] do_syscall_64+0x1b9/0x820 [ 300.188070] ? finish_task_switch+0x1d3/0x870 [ 300.192562] ? syscall_return_slowpath+0x5e0/0x5e0 [ 300.197482] ? syscall_return_slowpath+0x31d/0x5e0 [ 300.202409] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 300.207422] ? prepare_exit_to_usermode+0x291/0x3b0 [ 300.212436] ? perf_trace_sys_enter+0xb10/0xb10 [ 300.217097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.221926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.227117] RIP: 0033:0x455e29 [ 300.230300] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.249542] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 300.257245] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 [ 300.264518] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 300.271797] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 [ 300.279071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 300.286342] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000005 09:22:03 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009b130b6a25a22877f67375481578d10420d6954a77353eea8c0d28eb70211fc29ba1b0d2875764392261ba658e9e6f7f46fe435c84a1345165fac088ef26427480db3"], 0x3e) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/32, 0x20}, {&(0x7f0000001340)=""/178, 0xb2}], 0x6, &(0x7f0000001480)=""/47, 0x2f, 0x1}, 0x20) bind$nfc_llcp(r2, &(0x7f0000001500)={0x27, 0x1, 0x2, 0x4, 0x2, 0x5, "552039d3e240ebd2bb5c926e701fc3f5b8be857d8dd1cc50f188bea9d4ea9e213f5867ae420d72acdfdc32307b819f605cbf84fde26f262849cabfce136b51", 0x5}, 0x60) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) 09:22:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:22:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:03 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(0xffffffffffffffff, &(0x7f0000000200)=""/66, 0x42) 09:22:03 executing program 5 (fault-call:1 fault-nth:6): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:22:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) [ 300.391442] FAULT_INJECTION: forcing a failure. [ 300.391442] name failslab, interval 1, probability 0, space 0, times 0 [ 300.403244] CPU: 0 PID: 20280 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 300.411651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.421014] Call Trace: [ 300.423603] dump_stack+0x1c9/0x2b4 [ 300.427248] ? dump_stack_print_info.cold.2+0x52/0x52 [ 300.432463] ? is_bpf_text_address+0xd7/0x170 [ 300.436992] should_fail.cold.4+0xa/0x11 [ 300.441070] ? __save_stack_trace+0x8d/0xf0 [ 300.445633] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 300.451014] ? save_stack+0xa9/0xd0 [ 300.454774] ? kasan_kmalloc+0xc4/0xe0 [ 300.458658] ? kmem_cache_alloc_trace+0x152/0x780 [ 300.463500] ? vfs_new_fs_context+0x5a/0x700 [ 300.467901] ? do_mount+0x5cf/0x1fb0 [ 300.471605] ? ksys_mount+0x12d/0x140 [ 300.475394] ? __x64_sys_mount+0xbe/0x150 [ 300.479529] ? do_syscall_64+0x1b9/0x820 [ 300.483580] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.488946] ? trace_hardirqs_off+0xd/0x10 [ 300.493171] ? quarantine_put+0x10d/0x1b0 [ 300.497334] ? lock_acquire+0x1e4/0x540 [ 300.501393] ? fs_reclaim_acquire+0x20/0x20 [ 300.505738] ? lock_downgrade+0x8f0/0x8f0 [ 300.509875] ? lock_acquire+0x1e4/0x540 [ 300.513852] ? check_same_owner+0x340/0x340 [ 300.518174] ? lock_downgrade+0x8f0/0x8f0 [ 300.522316] ? rcu_note_context_switch+0x730/0x730 [ 300.527240] __should_failslab+0x124/0x180 [ 300.531469] should_failslab+0x9/0x14 [ 300.535272] kmem_cache_alloc_trace+0x2cb/0x780 [ 300.540024] ? ns_capable_common+0x13f/0x170 [ 300.544429] sysfs_init_fs_context+0xb8/0x200 [ 300.548918] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 300.554453] ? sysfs_get_tree+0x120/0x120 [ 300.558589] vfs_new_fs_context+0x2ba/0x700 [ 300.562903] do_mount+0x5cf/0x1fb0 [ 300.566430] ? check_same_owner+0x340/0x340 [ 300.570736] ? lock_release+0xa30/0xa30 [ 300.574705] ? copy_mount_string+0x40/0x40 [ 300.578927] ? kasan_kmalloc+0xc4/0xe0 [ 300.582806] ? kmem_cache_alloc_trace+0x318/0x780 [ 300.587641] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 300.593175] ? _copy_from_user+0xdf/0x150 [ 300.597310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 300.602834] ? copy_mount_options+0x285/0x380 [ 300.607322] ksys_mount+0x12d/0x140 [ 300.610941] __x64_sys_mount+0xbe/0x150 [ 300.614923] do_syscall_64+0x1b9/0x820 [ 300.618796] ? finish_task_switch+0x1d3/0x870 [ 300.623279] ? syscall_return_slowpath+0x5e0/0x5e0 [ 300.628207] ? syscall_return_slowpath+0x31d/0x5e0 [ 300.633136] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 300.638141] ? prepare_exit_to_usermode+0x291/0x3b0 [ 300.643146] ? perf_trace_sys_enter+0xb10/0xb10 [ 300.647816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.652659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.657838] RIP: 0033:0x455e29 [ 300.661016] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.680294] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 300.687994] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 [ 300.695253] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 300.702518] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 [ 300.709800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 300.717061] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000006 09:22:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)}], 0x1}, 0x0) 09:22:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) 09:22:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) mkdir(&(0x7f0000000080)='./file0\x00', 0x1) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022000800000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000020000000000009"], 0x3e) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 09:22:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 09:22:04 executing program 5 (fault-call:1 fault-nth:7): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:22:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) [ 300.828389] FAULT_INJECTION: forcing a failure. [ 300.828389] name failslab, interval 1, probability 0, space 0, times 0 [ 300.839717] CPU: 0 PID: 20309 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 300.848123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.857479] Call Trace: [ 300.860078] dump_stack+0x1c9/0x2b4 [ 300.863724] ? dump_stack_print_info.cold.2+0x52/0x52 [ 300.868925] ? is_bpf_text_address+0xd7/0x170 [ 300.873439] should_fail.cold.4+0xa/0x11 [ 300.878663] ? __save_stack_trace+0x8d/0xf0 [ 300.882989] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 300.888108] ? save_stack+0xa9/0xd0 [ 300.891751] ? kasan_kmalloc+0xc4/0xe0 [ 300.895649] ? kmem_cache_alloc_trace+0x152/0x780 [ 300.900506] ? vfs_new_fs_context+0x5a/0x700 [ 300.904920] ? do_mount+0x5cf/0x1fb0 [ 300.908636] ? ksys_mount+0x12d/0x140 [ 300.912442] ? __x64_sys_mount+0xbe/0x150 [ 300.916596] ? do_syscall_64+0x1b9/0x820 [ 300.920665] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 09:22:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) 09:22:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) 09:22:04 executing program 6 (fault-call:6 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) [ 300.926045] ? trace_hardirqs_off+0xd/0x10 [ 300.930289] ? quarantine_put+0x10d/0x1b0 [ 300.934450] ? lock_acquire+0x1e4/0x540 [ 300.938432] ? fs_reclaim_acquire+0x20/0x20 [ 300.942761] ? lock_downgrade+0x8f0/0x8f0 [ 300.946918] ? lock_acquire+0x1e4/0x540 [ 300.950903] ? check_same_owner+0x340/0x340 [ 300.955239] ? lock_downgrade+0x8f0/0x8f0 [ 300.959411] ? rcu_note_context_switch+0x730/0x730 [ 300.964351] __should_failslab+0x124/0x180 [ 300.968597] should_failslab+0x9/0x14 [ 300.972407] kmem_cache_alloc_trace+0x2cb/0x780 [ 300.977086] ? ns_capable_common+0x13f/0x170 [ 300.981506] sysfs_init_fs_context+0xb8/0x200 [ 300.986016] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 300.991566] ? sysfs_get_tree+0x120/0x120 [ 300.995731] vfs_new_fs_context+0x2ba/0x700 [ 301.000064] do_mount+0x5cf/0x1fb0 [ 301.003612] ? kasan_check_write+0x14/0x20 [ 301.007859] ? copy_mount_string+0x40/0x40 [ 301.012100] ? kasan_kmalloc+0xc4/0xe0 [ 301.015994] ? kmem_cache_alloc_trace+0x318/0x780 [ 301.020842] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 301.026394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 301.031939] ? copy_mount_options+0x285/0x380 [ 301.036443] ksys_mount+0x12d/0x140 [ 301.040079] __x64_sys_mount+0xbe/0x150 [ 301.044066] do_syscall_64+0x1b9/0x820 [ 301.047963] ? finish_task_switch+0x1d3/0x870 [ 301.052451] ? syscall_return_slowpath+0x5e0/0x5e0 [ 301.057382] ? syscall_return_slowpath+0x31d/0x5e0 [ 301.062302] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 301.067302] ? prepare_exit_to_usermode+0x291/0x3b0 [ 301.072306] ? perf_trace_sys_enter+0xb10/0xb10 [ 301.076960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.081802] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.086997] RIP: 0033:0x455e29 [ 301.090184] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.109321] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 301.117024] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 [ 301.124288] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 301.131550] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 [ 301.138804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 301.146066] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000007 09:22:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) 09:22:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x80007, 0x1) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 'sit0\x00'}) 09:22:04 executing program 1 (fault-call:4 fault-nth:0): fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:22:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 09:22:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000004400)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000055c0)=""/177, 0xb1}}], 0x1, 0x0, &(0x7f00000057c0)) r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000000040)=[{&(0x7f0000f6ff9b)}], 0x1}, 0x0) 09:22:04 executing program 5 (fault-call:1 fault-nth:8): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) 09:22:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) 09:22:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 09:22:04 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) read(r1, &(0x7f0000000200)=""/66, 0x42) 09:22:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffff, 0x482001) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_pts(r0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x2000000000000) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) [ 301.683917] FAULT_INJECTION: forcing a failure. [ 301.683917] name failslab, interval 1, probability 0, space 0, times 0 [ 301.695332] CPU: 1 PID: 20365 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 301.703741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.713102] Call Trace: [ 301.715710] dump_stack+0x1c9/0x2b4 [ 301.719352] ? dump_stack_print_info.cold.2+0x52/0x52 [ 301.724576] ? lock_release+0xa30/0xa30 [ 301.728565] ? perf_trace_lock+0xde/0x920 [ 301.732729] should_fail.cold.4+0xa/0x11 [ 301.736804] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 301.741904] ? is_bpf_text_address+0xd7/0x170 [ 301.746389] ? kernel_text_address+0x79/0xf0 [ 301.750786] ? __kernel_text_address+0xd/0x40 [ 301.755270] ? unwind_get_return_address+0x61/0xa0 [ 301.760188] ? __save_stack_trace+0x8d/0xf0 [ 301.764510] ? lock_acquire+0x1e4/0x540 [ 301.768472] ? fs_reclaim_acquire+0x20/0x20 [ 301.772787] ? lock_downgrade+0x8f0/0x8f0 [ 301.776925] ? do_syscall_64+0x1b9/0x820 [ 301.780980] ? check_same_owner+0x340/0x340 [ 301.785292] ? rcu_note_context_switch+0x730/0x730 [ 301.790214] __should_failslab+0x124/0x180 [ 301.794458] should_failslab+0x9/0x14 [ 301.798249] kmem_cache_alloc_trace+0x2cb/0x780 [ 301.802909] ? lock_release+0xa30/0xa30 [ 301.806918] ? check_same_owner+0x340/0x340 [ 301.811235] kernfs_get_tree+0xde/0xba0 [ 301.815209] ? kasan_unpoison_shadow+0x35/0x50 [ 301.819783] ? kasan_kmalloc+0xc4/0xe0 [ 301.823672] ? kernfs_super_ns+0x70/0x70 [ 301.827724] ? __kmalloc_track_caller+0x311/0x760 [ 301.832561] ? generic_parse_monolithic+0xfd/0x180 [ 301.837481] sysfs_get_tree+0x40/0x120 [ 301.841361] vfs_get_tree+0x1cb/0x5c0 [ 301.845160] do_mount+0x6c1/0x1fb0 [ 301.848691] ? check_same_owner+0x340/0x340 [ 301.852999] ? lock_release+0xa30/0xa30 [ 301.856971] ? copy_mount_string+0x40/0x40 [ 301.861198] ? retint_kernel+0x10/0x10 [ 301.865094] ? copy_mount_options+0x1f0/0x380 [ 301.869581] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 301.874416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 301.879952] ? copy_mount_options+0x285/0x380 [ 301.884436] ksys_mount+0x12d/0x140 [ 301.888053] __x64_sys_mount+0xbe/0x150 [ 301.892023] do_syscall_64+0x1b9/0x820 [ 301.895898] ? finish_task_switch+0x1d3/0x870 [ 301.900393] ? syscall_return_slowpath+0x5e0/0x5e0 [ 301.905320] ? syscall_return_slowpath+0x31d/0x5e0 [ 301.910236] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 301.915240] ? prepare_exit_to_usermode+0x291/0x3b0 [ 301.920245] ? perf_trace_sys_enter+0xb10/0xb10 [ 301.924915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.929750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.934926] RIP: 0033:0x455e29 [ 301.938098] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.957376] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 301.965071] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 [ 301.972404] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 301.979669] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 [ 301.986924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 301.994179] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000008 [ 302.001648] Filesystem sysfs get_tree() didn't set fc->root [ 302.007486] ------------[ cut here ]------------ [ 302.012236] kernel BUG at fs/super.c:1753! [ 302.016515] invalid opcode: 0000 [#1] SMP KASAN [ 302.021189] CPU: 1 PID: 20365 Comm: syz-executor5 Not tainted 4.18.0-rc4-next-20180710+ #3 [ 302.029591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.038961] RIP: 0010:vfs_get_tree.cold.21+0x4f/0x60 [ 302.044054] Code: 37 00 48 c1 e0 2a 48 89 da 48 c1 ea 03 80 3c 02 00 74 08 48 89 df e8 40 ef f4 ff 48 8b 33 48 c7 c7 20 5c f3 87 e8 55 23 9d ff <0f> 0b 4c 89 ef e8 27 ef f4 ff eb c0 90 90 90 90 90 55 48 89 e5 53 [ 302.063333] RSP: 0018:ffff880197fd7be0 EFLAGS: 00010286 [ 302.068706] RAX: 000000000000002f RBX: ffffffff8906e7c0 RCX: ffffc90005849000 [ 302.075975] RDX: 0000000000000000 RSI: ffffffff81634451 RDI: ffff880197fd78f0 [ 302.083248] RBP: ffff880197fd7c10 R08: ffff880192f8a100 R09: fffffbfff11f1260 [ 302.090517] R10: fffffbfff11f1260 R11: ffffffff88f89303 R12: 0000000000000000 [ 302.097792] R13: ffff8801ae5a9d88 R14: 0000000000000020 R15: ffff8801ae5a9d98 [ 302.105065] FS: 00007fc27bf80700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 302.113289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.119169] CR2: 00000000004e8664 CR3: 00000001c9bf3000 CR4: 00000000001406e0 [ 302.126442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 09:22:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x2, 0x4) 09:22:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0xfffffffffefffffc, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) getdents64(r1, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd) 09:22:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x40, 0x80000) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x6, 0x101}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001ac0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001bc0)=0xe8) sendmsg$xdp(r3, &(0x7f0000002d80)={&(0x7f0000001c00)={0x2c, 0x2, r4, 0x3e}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="6fcc1f887b9c4780de7707648da93f200243051d6b9bdbe799c952c3e8e312877ab9c025ff2f1e434c37f32cc0faa17df86fc3826706baa02c03a03bd0b59deec9a49840c939a6c201bfaf717da8756404d3072d1d894fd133cf5df60bfa9dd9f911f08b89a6404e765fa34dc9bfbd70bc0fa1e43a1a025feaa9f750abaf06edeaca54421dc10ccca7e3fbb70a186483d5f7a11aa56c3a2bc2e7bb95e126834eac5ada0674916d7dc3371fbf2d019afc5871a5984bc17edc44272c0c6e882e7aab271f22f9b9820f5267c52ed4d55cb17c5099878c0d231199aed9fdff3f9aa3c1c1af7440b5142c36953baf", 0xec}], 0x2, 0x0, 0x0, 0x44}, 0x20008004) 09:22:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 09:22:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 302.133723] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.140998] Call Trace: [ 302.144027] do_mount+0x6c1/0x1fb0 [ 302.147574] ? check_same_owner+0x340/0x340 [ 302.151908] ? lock_release+0xa30/0xa30 [ 302.155894] ? copy_mount_string+0x40/0x40 [ 302.160137] ? retint_kernel+0x10/0x10 [ 302.164051] ? copy_mount_options+0x1f0/0x380 [ 302.164071] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 302.173382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 302.178934] ? copy_mount_options+0x285/0x380 [ 302.178951] ksys_mount+0x12d/0x140 [ 302.178967] __x64_sys_mount+0xbe/0x150 [ 302.178985] do_syscall_64+0x1b9/0x820 [ 302.178998] ? finish_task_switch+0x1d3/0x870 [ 302.179012] ? syscall_return_slowpath+0x5e0/0x5e0 [ 302.179028] ? syscall_return_slowpath+0x31d/0x5e0 [ 302.179043] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 302.179058] ? prepare_exit_to_usermode+0x291/0x3b0 [ 302.179072] ? perf_trace_sys_enter+0xb10/0xb10 [ 302.179087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.179106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.179117] RIP: 0033:0x455e29 [ 302.179120] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.256414] RSP: 002b:00007fc27bf7fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.264215] RAX: ffffffffffffffda RBX: 00007fc27bf806d4 RCX: 0000000000455e29 [ 302.271488] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000240 [ 302.278784] RBP: 000000000072bea0 R08: 00000000200002c0 R09: 0000000000000000 09:22:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000022070000000000000000000000000000000038000000000000000000000000430fd58c748e0e890000001d000000000000000009"], 0x3e) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") readahead(r0, 0x5, 0x9) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 09:22:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 302.286056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 302.293327] R13: 00000000004c248a R14: 00000000004d0058 R15: 0000000000000008 [ 302.300600] Modules linked in: [ 302.303796] Dumping ftrace buffer: [ 302.307329] (ftrace buffer empty) [ 302.311122] ---[ end trace 2dc613f3f320adb1 ]--- [ 302.315935] RIP: 0010:vfs_get_tree.cold.21+0x4f/0x60 [ 302.321058] Code: 37 00 48 c1 e0 2a 48 89 da 48 c1 ea 03 80 3c 02 00 74 08 48 89 df e8 40 ef f4 ff 48 8b 33 48 c7 c7 20 5c f3 87 e8 55 23 9d ff <0f> 0b 4c 89 ef e8 27 ef f4 ff eb c0 90 90 90 90 90 55 48 89 e5 53 [ 302.340351] RSP: 0018:ffff880197fd7be0 EFLAGS: 00010286 [ 302.345750] RAX: 000000000000002f RBX: ffffffff8906e7c0 RCX: ffffc90005849000 [ 302.353041] RDX: 0000000000000000 RSI: ffffffff81634451 RDI: ffff880197fd78f0 [ 302.360347] RBP: ffff880197fd7c10 R08: ffff880192f8a100 R09: fffffbfff11f1260 [ 302.367643] R10: fffffbfff11f1260 R11: ffffffff88f89303 R12: 0000000000000000 [ 302.374937] R13: ffff8801ae5a9d88 R14: 0000000000000020 R15: ffff8801ae5a9d98 [ 302.382230] FS: 00007fc27bf80700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 302.390462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.396351] CR2: 00000000004e8664 CR3: 00000001c9bf3000 CR4: 00000000001406e0 [ 302.403630] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.410910] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.418199] Kernel panic - not syncing: Fatal exception [ 302.423593] Dumping ftrace buffer: [ 302.427111] (ftrace buffer empty) [ 302.430803] Kernel Offset: disabled [ 302.434417] Rebooting in 86400 seconds..