0x0, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000040)) 03:34:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40486311}], 0x0, 0x0, &(0x7f0000000240)}) 03:34:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000ce9d1f8b0006ba55e9ad090000000000000006"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 03:34:35 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, &(0x7f0000000440)) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="2400000010db00000000000000a2830020200a0009000300fd1c85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/89, 0x59}], 0x2, &(0x7f0000001400)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f0000001900)={0x77359400}) 03:34:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) 03:34:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000ce9d1f8b0006ba55e9ad090000000000000006"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 03:34:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x2) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000300)="c4e12dfbf60f3066bad00466edb8010000000f01d9b97b0a0000b80e640000ba000000000f3066baf80cb8f4fbbe86ef66bafc0c66ed66b87a008ec80f01c3410f30660ffa8e08000000", 0x4a}], 0x1, 0x0, &(0x7f0000000400), 0x1029) [ 751.154486] binder: 24329:24335 transaction failed 29189/-22, size 0-0 line 2852 [ 751.188157] binder: 24329:24340 transaction failed 29189/-22, size 0-0 line 2852 03:34:35 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000006c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="34d4f1011100c11de4165307"]]], &(0x7f0000000040)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000000), 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 751.233365] binder: undelivered TRANSACTION_ERROR: 29189 [ 751.239244] binder: undelivered TRANSACTION_ERROR: 29189 03:34:35 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x7ffff000}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:34:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) 03:34:36 executing program 5: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x388, 0xffffffff80000001) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7}) 03:34:36 executing program 3: io_setup(0xfc6d, &(0x7f0000001440)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000040)) 03:34:36 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000ce9d1f8b0006ba55e9ad090000000000000006"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 03:34:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x103d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8c}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 03:34:36 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x20000000000002, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 03:34:36 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$inet_mreqn(r1, 0x0, 0x22, &(0x7f00000002c0)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) 03:34:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) 03:34:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0x10, 0x11a, 0x1}], 0x10}}], 0x1, 0x0) 03:34:36 executing program 2: move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000), &(0x7f00000000c0), 0x7) 03:34:36 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2}, @in={0x2, 0x4e24, @loopback=0x7f000001}], 0x20) 03:34:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x2b7, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0x25, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0xffce}, 0x1}, 0x0) 03:34:36 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) 03:34:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 03:34:36 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2), 0xfff6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff) dup2(r0, r1) [ 752.149606] netlink: 663 bytes leftover after parsing attributes in process `syz-executor1'. 03:34:36 executing program 7: r0 = socket$inet6(0xa, 0x80003, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x2, 0x80200000000001, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) 03:34:36 executing program 3: io_setup(0xfc6d, &(0x7f0000001440)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000040)) 03:34:36 executing program 5: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x388, 0xffffffff80000001) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7}) 03:34:36 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:34:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x2b7, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0x25, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0xffce}, 0x1}, 0x0) 03:34:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x2) 03:34:36 executing program 7: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x2a5}, 0x10) socketpair(0xa, 0x0, 0xeb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) madvise(&(0x7f0000b40000/0x1000)=nil, 0x1000, 0x10200000008) 03:34:36 executing program 3: io_setup(0xfc6d, &(0x7f0000001440)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000040)) 03:34:37 executing program 6: syz_emit_ethernet(0xe, &(0x7f0000000200)={@empty, @empty, [], {@generic={0x88f5}}}, 0x0) 03:34:37 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r3 = open(&(0x7f0000000140)='./control\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./control\x00', &(0x7f0000000200)='bpf\x00', 0x0, &(0x7f00000003c0)=ANY=[]) getdents64(r3, &(0x7f0000000300)=""/188, 0xbc) close(r1) [ 752.834338] netlink: 663 bytes leftover after parsing attributes in process `syz-executor1'. 03:34:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x2b7, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0x25, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0xffce}, 0x1}, 0x0) 03:34:37 executing program 7: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x2a5}, 0x10) socketpair(0xa, 0x0, 0xeb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) madvise(&(0x7f0000b40000/0x1000)=nil, 0x1000, 0x10200000008) 03:34:37 executing program 6: r0 = socket$inet(0x2, 0x3, 0x7f) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000580)}}, {{&(0x7f0000000100)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000000000000010000000000d2a6"], 0x14}}], 0x2, 0x0) 03:34:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x8000000400) [ 753.013463] netlink: 663 bytes leftover after parsing attributes in process `syz-executor1'. 03:34:37 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) unshare(0x400) rmdir(&(0x7f0000000000)='./file0\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c000000805f8f762070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 03:34:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x2b7, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0x25, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0xffce}, 0x1}, 0x0) 03:34:37 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2), 0xfff6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff) dup2(r0, r1) 03:34:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x17}}) [ 753.255267] netlink: 663 bytes leftover after parsing attributes in process `syz-executor1'. 03:34:37 executing program 5: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x388, 0xffffffff80000001) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7}) 03:34:37 executing program 7: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x2a5}, 0x10) socketpair(0xa, 0x0, 0xeb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) madvise(&(0x7f0000b40000/0x1000)=nil, 0x1000, 0x10200000008) 03:34:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x15, &(0x7f0000000180)={@rand_addr, @dev={0xac, 0x14, 0x14}}, 0x10) 03:34:37 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x27, 0xaff, 0x0, 0x0, {0x5}, [@nested={0xc, 0x1, [@typed={0x8, 0x1, @binary}]}]}, 0x233}, 0x1}, 0x0) 03:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000440)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x1, [{{0x2, 0x0, @broadcast=0xffffffff}}]}, 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @broadcast=0xffffffff}}}, 0x108) 03:34:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000002a40)) 03:34:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendto(r1, &(0x7f0000000480), 0x0, 0xfffffdffffffffff, &(0x7f0000000000)=@hci={0x1f}, 0x80) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=""/6, 0x6}, 0x0) sendto(r1, &(0x7f0000001640)="13", 0x1, 0x0, &(0x7f0000002a80)=@nl=@unspec, 0x80) 03:34:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'system.', 'group_id'}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000003000), 0x1000) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) clone(0x0, &(0x7f0000000540), &(0x7f00000003c0), &(0x7f0000000480), &(0x7f00000004c0)) write$FUSE_OPEN(r0, &(0x7f0000000140)={0x20, 0x0, 0x2}, 0x20) 03:34:38 executing program 3: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) fcntl$lock(r0, 0x7, &(0x7f000000dfe0)={0x0, 0x1, 0x0, 0x100}) 03:34:38 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 03:34:38 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 03:34:38 executing program 7: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x2a5}, 0x10) socketpair(0xa, 0x0, 0xeb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) madvise(&(0x7f0000b40000/0x1000)=nil, 0x1000, 0x10200000008) 03:34:38 executing program 6: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000140), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0xffffffd2) r3 = getpid() fcntl$setown(r1, 0x8, r3) kcmp(r3, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 03:34:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x4) 03:34:38 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2), 0xfff6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff) dup2(r0, r1) 03:34:38 executing program 2: bpf$MAP_CREATE(0x13, &(0x7f00000000c0), 0x2c) 03:34:38 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$binfmt_elf32(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="7f45"], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") writev(r0, &(0x7f0000001500)=[{&(0x7f0000000000)="a75f9e", 0x3}], 0x1) 03:34:38 executing program 7: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000540)) mq_timedreceive(r0, &(0x7f00000000c0)=""/50, 0x32, 0x0, &(0x7f0000000180)) 03:34:38 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0x58, 0x100000000000114, 0x8, "4d037f67d8b7b40800000000000000f7b4559556d9101709322be4c68537e918d56fc5fa0d02739b2ab80ec25d434d3e8a83e36011c57e8769315dd29005dba330"}], 0x58}, 0x0) 03:34:38 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'vlan0\x00'}}, 0x1e) 03:34:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r1, &(0x7f0000000000)=[{{}, 0x1, 0x46, 0x2}, {{0x77359400}}], 0x30) 03:34:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)="03", 0x1, 0x8004, 0x0, 0x0) write(r2, &(0x7f0000000100)="14", 0x1) 03:34:38 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x77359400}}) 03:34:39 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x2}) 03:34:39 executing program 3: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000044000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 03:34:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r1, &(0x7f0000000000)=[{{}, 0x1, 0x46, 0x2}, {{0x77359400}}], 0x30) 03:34:39 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x3, @rand_addr}]}}}]}, 0x38}, 0x1}, 0x0) 03:34:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff}) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) [ 755.043333] netlink: 'syz-executor7': attribute type 3 has an invalid length. [ 755.052554] netlink: 'syz-executor7': attribute type 3 has an invalid length. 03:34:39 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) clone(0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)) waitid(0x0, 0x0, &(0x7f0000000080), 0x1000008, 0x0) 03:34:39 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2), 0xfff6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff) dup2(r0, r1) 03:34:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)="6576656e7473000000c7aaff0fb0c79b9391e4ae6459d80000000000", 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086610, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 03:34:39 executing program 6: r0 = semget$private(0x0, 0xa, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f000001a000)=[{}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 03:34:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r1, &(0x7f0000000000)=[{{}, 0x1, 0x46, 0x2}, {{0x77359400}}], 0x30) 03:34:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0) 03:34:39 executing program 0: prctl$intptr(0x21, 0x4) 03:34:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2}}) 03:34:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r1, &(0x7f0000000000)=[{{}, 0x1, 0x46, 0x2}, {{0x77359400}}], 0x30) [ 755.311366] EXT4-fs warning (device sda1): ext4_resize_fs:1916: can't read last block, resize aborted 03:34:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2}}) 03:34:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000cc0000)) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x4}}, 0xa) 03:34:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000000e80001040000040d001800ea1100000005000000", 0x29}], 0x1) 03:34:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x20000000000003, 0x0) write(r1, &(0x7f00000000c0)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c26485a3d5728", 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000840)=""/198, 0xc6}, 0x0) 03:34:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0x80000fffff02c}, {0x16}]}, 0x10) 03:34:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2}}) 03:34:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000000e80001040000040d001800ea1100000005000000", 0x29}], 0x1) 03:34:39 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 755.888521] FAT-fs (loop7): Unrecognized mount option "uid" or missing value 03:34:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000000e80001040000040d001800ea1100000005000000", 0x29}], 0x1) 03:34:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f00000000c0)="7dbf2a78892d764fd34a556b884fc44e1d3903c25662e82a6cdc43eba6e41224d1a37a7a85f41eccfcf6b65f5fcaef1b9d0e50771b4e5b81921550c50e061708af0a75d844397a9e52086a68cea96adaf842848d122eeb959a0ab24dc7d1874ec54f7322fc0cfafe", 0x0) preadv(0xffffffffffffffff, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x2b2}], 0x10000000000002d9, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, &(0x7f0000000000), 0x7ffffffe) 03:34:40 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setaffinity(r0, 0x15, &(0x7f0000000040)=0x1000000fffffffe) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, &(0x7f00000001c0)=""/105, 0x69) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9208, 0x0) read(r2, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r1, 0x15) 03:34:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa}}}, 0x48) 03:34:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x20000000000003, 0x0) write(r1, &(0x7f00000000c0)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c26485a3d5728", 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000840)=""/198, 0xc6}, 0x0) 03:34:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000000e80001040000040d001800ea1100000005000000", 0x29}], 0x1) 03:34:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000090607041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:34:40 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000440)) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) close(r1) 03:34:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2}}) 03:34:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2}}) [ 756.313100] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 756.329641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 03:34:40 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="757466383dbd"]) 03:34:40 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) clone(0x0, &(0x7f00000004c0), &(0x7f0000000040), &(0x7f0000000500), &(0x7f0000000440)) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000000)=""/42) 03:34:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x20000000000003, 0x0) write(r1, &(0x7f00000000c0)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c26485a3d5728", 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000840)=""/198, 0xc6}, 0x0) 03:34:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa}}}, 0x48) [ 756.490262] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 756.510078] ntfs: (device loop3): parse_options(): The utf8 option requires a boolean argument. 03:34:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2}}) 03:34:40 executing program 1: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="da2d63707573657400", 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x146, 0x0) 03:34:40 executing program 3: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000001200), 0x1, 0x0) [ 756.578712] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 756.599398] ntfs: (device loop3): parse_options(): The utf8 option requires a boolean argument. 03:34:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa}}}, 0x48) 03:34:41 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setaffinity(r0, 0x15, &(0x7f0000000040)=0x1000000fffffffe) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, &(0x7f00000001c0)=""/105, 0x69) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9208, 0x0) read(r2, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r1, 0x15) 03:34:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x20000000000003, 0x0) write(r1, &(0x7f00000000c0)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c26485a3d5728", 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000840)=""/198, 0xc6}, 0x0) 03:34:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2}}) 03:34:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnetconf={0x14, 0x52, 0x211}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006740)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000004200), 0x0, &(0x7f0000004280)=""/4096, 0x1000}}, {{&(0x7f0000005280)=@nfc, 0x80, &(0x7f0000006600), 0x0, &(0x7f0000006680)=""/152, 0x98}}], 0x2, 0x0, 0x0) 03:34:41 executing program 3: madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) 03:34:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa}}}, 0x48) 03:34:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000000c0)={0xb, 0x10, 0x8f, {&(0x7f0000000240)}}, 0x18) 03:34:41 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000017d400300000000006506000001ed00001c040000000000006f640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0xe, 0x1000, &(0x7f0000000140)="2a385aef86f0cede9e81b7149109", &(0x7f0000000200)=""/4096}, 0x28) 03:34:41 executing program 7: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="4c0000001200ff09fffefd956fa283b724a6007400000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6d78c2b2ca654a6613b6aabf35d0f1cbc882b07", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2, 0x80, &(0x7f00000003c0)}, 0x0) 03:34:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xd}}, 0x14}, 0x1}, 0x0) 03:34:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2d, 0x119, 0x0, 0x0, {0x4001}, [@generic='/']}, 0x18}, 0x1}, 0x0) 03:34:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 03:34:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0), 0x0, 0x4008000, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="09bdd2c3ae66696c65320a"], 0xb) 03:34:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}], 0x10) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, 0x84) 03:34:41 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='GPL\x00', 0x8, 0xef, &(0x7f0000000900)=""/187, 0x0, 0x0, [], 0x0, 0xb}, 0x47) 03:34:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}], 0x2, 0x0, &(0x7f0000000100), 0x8) r1 = dup(r0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000140)={0x400, 0xffffffffffff8001}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x3) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x501000) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$int_in(r1, 0x5421, &(0x7f00000003c0)=0x7) readv(r0, &(0x7f0000002700)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/172, 0xac}], 0x2) 03:34:42 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setaffinity(r0, 0x15, &(0x7f0000000040)=0x1000000fffffffe) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, &(0x7f00000001c0)=""/105, 0x69) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9208, 0x0) read(r2, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r1, 0x15) 03:34:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 03:34:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000000f, &(0x7f0000000040)=0x50b, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 03:34:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xd}}, 0x14}, 0x1}, 0x0) 03:34:42 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, &(0x7f0000000080)) 03:34:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 03:34:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000000f, &(0x7f0000000040)=0x50b, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 03:34:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xd}}, 0x14}, 0x1}, 0x0) 03:34:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETAF(r2, 0x80047437, &(0x7f0000000000)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 03:34:42 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r0, &(0x7f00000000c0)=""/128, 0x80) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 03:34:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000000f, &(0x7f0000000040)=0x50b, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 03:34:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xd}}, 0x14}, 0x1}, 0x0) 03:34:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x8000000000000007, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000100)="14", 0x1) 03:34:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}], 0x10) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, 0x84) 03:34:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 03:34:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000000f, &(0x7f0000000040)=0x50b, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 03:34:43 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setaffinity(r0, 0x15, &(0x7f0000000040)=0x1000000fffffffe) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, &(0x7f00000001c0)=""/105, 0x69) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9208, 0x0) read(r2, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r1, 0x15) 03:34:43 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000007080)=[{{&(0x7f0000006a40)=@nfc={0x27}, 0x80, &(0x7f0000006c80), 0x0, &(0x7f0000006cc0)}}], 0x1, 0x0) 03:34:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) 03:34:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 03:34:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227c, &(0x7f0000000200)) 03:34:43 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 03:34:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x205000000) 03:34:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 03:34:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b287bf4042d1", 0x4c}], 0x1}, 0x0) 03:34:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0), &(0x7f0000000300)=0x8) [ 759.514156] binder: BINDER_SET_CONTEXT_MGR already set [ 759.530689] binder: 24898:24904 ioctl 40046207 0 returned -16 [ 759.541663] binder_alloc: 24898: binder_alloc_buf, no vma [ 759.547465] binder: 24898:24900 transaction failed 29189/-3, size 24-8 line 2967 [ 759.557619] binder: release 24898:24900 transaction 193 out, still active 03:34:43 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 03:34:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 03:34:43 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001cc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 759.564686] binder: unexpected work type, 4, not freed [ 759.569986] binder: undelivered TRANSACTION_COMPLETE [ 759.578389] binder: send failed reply for transaction 193, target dead [ 759.595524] binder: undelivered TRANSACTION_ERROR: 29189 03:34:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}], 0x10) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, 0x84) 03:34:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={r2}) [ 759.719097] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 03:34:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0xb, 0x80000001}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:43 executing program 3: unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28}, 0x10) [ 759.764982] binder: release 24920:24925 transaction 198 out, still active [ 759.772037] binder: unexpected work type, 4, not freed [ 759.777340] binder: undelivered TRANSACTION_COMPLETE [ 759.797679] binder: send failed reply for transaction 198, target dead [ 759.843345] binder: 24931:24933 ERROR: BC_REGISTER_LOOPER called without request [ 759.852047] binder_alloc: binder_alloc_mmap_handler: 24931 20001000-20004000 already mapped failed -16 [ 759.863391] binder: BINDER_SET_CONTEXT_MGR already set [ 759.868893] binder: 24931:24933 ioctl 40046207 0 returned -16 [ 759.876195] binder: 24931:24934 ERROR: BC_REGISTER_LOOPER called without request [ 759.884153] binder_alloc: 24931: binder_alloc_buf, no vma [ 759.889799] binder: 24931:24933 transaction failed 29189/-3, size 0-0 line 2967 [ 759.900060] binder: 24931:24933 got reply transaction with no transaction stack [ 759.907609] binder: 24931:24933 transaction failed 29201/-71, size 80-8 line 2759 [ 759.916584] binder: undelivered TRANSACTION_COMPLETE [ 759.921859] binder: undelivered transaction 203, process died. [ 759.940901] binder: undelivered TRANSACTION_ERROR: 29201 [ 759.949223] binder: undelivered TRANSACTION_ERROR: 29189 [ 759.955493] binder: undelivered TRANSACTION_COMPLETE [ 760.021120] pic_ioport_write: 230 callbacks suppressed [ 760.021125] kvm: pic: single mode not supported [ 760.026508] pic_ioport_write: 270 callbacks suppressed 03:34:44 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 03:34:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 03:34:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x10001, 0x0, 0x40, 0xfffffffffffffff7, 0x9}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000200)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={"000000000000000000efff0000080012", 0x400}) close(r2) 03:34:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) 03:34:44 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000001f000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xd7, &(0x7f0000000280)="3c2dbcd405e8e96a639a2fee86dd", &(0x7f0000000380)=""/215}, 0x28) 03:34:44 executing program 6: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond_slave_0\x00', &(0x7f0000000180)=@ethtool_dump={0x40}}) [ 760.026513] kvm: pic: level sensitive irq not supported [ 760.297459] binder: release 24954:24956 transaction 209 out, still active [ 760.309933] binder: unexpected work type, 4, not freed [ 760.315250] binder: undelivered TRANSACTION_COMPLETE 03:34:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x10001, 0x0, 0x40, 0xfffffffffffffff7, 0x9}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000200)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={"000000000000000000efff0000080012", 0x400}) close(r2) 03:34:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 760.372070] binder: send failed reply for transaction 209, target dead [ 760.473676] binder: release 24969:24975 transaction 213 out, still active [ 760.480701] binder: unexpected work type, 4, not freed [ 760.485993] binder: undelivered TRANSACTION_COMPLETE [ 760.491684] binder: send failed reply for transaction 213, target dead 03:34:44 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000100), 0x8) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:34:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x400000053, 0x0, 0x0, 0x0, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000100), &(0x7f0000000600)=""/4096, 0x0, 0xfffffffffffffffc, 0x0, &(0x7f0000000080)}) 03:34:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000)="d3", &(0x7f0000000080)=""/233}, 0x18) 03:34:44 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) sendmmsg$unix(r1, &(0x7f0000001000)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)="b6cdf141498a9b9ec73d87f1fea3251e5ca5ad9b75023700be1e2bdc3e234417886acd902ebeedc28567d5378bb878a2a0e504", 0x33}, {&(0x7f0000000400)="2e21899a70f0060b7e630099e6b5459d1e2ff9eaab5ce223cb76fab935fabb86cdb8667142f5e3f855cc0c4abdb4a26852d0d6a4e7ee1fbca9228e5ec8f47e8f978a10d7a9", 0x45}], 0x2, &(0x7f0000000940)}], 0x1, 0x8000) recvfrom(r1, &(0x7f0000000000)=""/19, 0x13, 0x0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="1bf330c5f38c"}, 0x933700) 03:34:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}], 0x10) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, 0x84) 03:34:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f00000000c0)={0x10, 0xf0ffffff02000000, 0xff00000000000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x48, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 03:34:44 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) 03:34:44 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x3, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 03:34:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x10001, 0x0, 0x40, 0xfffffffffffffff7, 0x9}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000200)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={"000000000000000000efff0000080012", 0x400}) close(r2) 03:34:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000080)="a4d50891ffd8b1d241f94a0bff080635", 0x10) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) 03:34:44 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)="020b8c3e407658cf472070c76d3842b99769b24f8daf74a0c72deb423aa43d40acc3e41d0b9f89b14d924f414cca614ed588e8bfbf6ce704ae8e20546bc056370ab7699935f66573007e982d3bc26c106469a7406aa8cef3f8d26eb8b27086f4d222") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0a66ef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295784157b015680cbeb8b1c4dd4f5c4d7050000d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:44 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) 03:34:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240)='wlan1*\x00', 0x0) 03:34:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000000c0)=0x90) close(r2) close(r1) 03:34:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x10001, 0x0, 0x40, 0xfffffffffffffff7, 0x9}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000200)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={"000000000000000000efff0000080012", 0x400}) close(r2) 03:34:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") timer_create(0x2, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x77359400}}, &(0x7f0000040000)) timer_gettime(0x0, &(0x7f0000000040)) 03:34:45 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000100), 0x8) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:34:45 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) 03:34:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x40000108]}) 03:34:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4) 03:34:45 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007f5300fe01b2a4a280930a06000000a84308910000003900090020000c00060000001900a30700000000000000dc1338d54400009b84136ef75a1500de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000003000)}, 0x0) 03:34:45 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x3a8, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2715, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0xd) 03:34:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x2276, 0xffffffffffffffff) 03:34:45 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) 03:34:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4) 03:34:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x40000001]}) 03:34:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0xff, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, &(0x7f0000000140)=0x20) 03:34:45 executing program 6: syz_open_dev$mice(&(0x7f0000001a80)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x4ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abcfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) 03:34:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000000c0)=0x90) close(r2) close(r1) 03:34:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4) 03:34:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 03:34:45 executing program 7: r0 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)={0x2}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = dup3(r1, r1, 0x0) ioctl$sock_bt_hci(r2, 0xc00448f7, &(0x7f0000000340)="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") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000002c0)=""/9, 0x9, 0x0, &(0x7f0000000300)={0x0, 0x989680}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='bcsh0\x00', 0x5}) 03:34:46 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000100), 0x8) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:34:46 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) 03:34:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x80, 0x103000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000140)='./file0/file0\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) 03:34:46 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000346fc8)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="78733976000898fcffff6054be13cfe62785ce10", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="fcfec94f4d0300b8"], 0x8) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000180)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/223, 0xdf}}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/161, 0xa1}], 0x1}}], 0x2, 0x0, &(0x7f0000001400)={0x0, 0x1c9c380}) 03:34:46 executing program 7: r0 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)={0x2}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = dup3(r1, r1, 0x0) ioctl$sock_bt_hci(r2, 0xc00448f7, &(0x7f0000000340)="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") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000002c0)=""/9, 0x9, 0x0, &(0x7f0000000300)={0x0, 0x989680}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='bcsh0\x00', 0x5}) 03:34:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4) 03:34:46 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x400000000004, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x200000066}}) 03:34:46 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000346fc8)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="78733976000898fcffff6054be13cfe62785ce10", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="fcfec94f4d0300b8"], 0x8) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000180)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/223, 0xdf}}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/161, 0xa1}], 0x1}}], 0x2, 0x0, &(0x7f0000001400)={0x0, 0x1c9c380}) 03:34:46 executing program 7: r0 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)={0x2}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = dup3(r1, r1, 0x0) ioctl$sock_bt_hci(r2, 0xc00448f7, &(0x7f0000000340)="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") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000002c0)=""/9, 0x9, 0x0, &(0x7f0000000300)={0x0, 0x989680}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='bcsh0\x00', 0x5}) 03:34:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x80, 0x103000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000140)='./file0/file0\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) 03:34:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x80, 0x103000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000140)='./file0/file0\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) 03:34:46 executing program 7: r0 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)={0x2}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = dup3(r1, r1, 0x0) ioctl$sock_bt_hci(r2, 0xc00448f7, &(0x7f0000000340)="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") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000002c0)=""/9, 0x9, 0x0, &(0x7f0000000300)={0x0, 0x989680}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='bcsh0\x00', 0x5}) 03:34:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000000c0)=0x90) close(r2) close(r1) 03:34:46 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000346fc8)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="78733976000898fcffff6054be13cfe62785ce10", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="fcfec94f4d0300b8"], 0x8) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000180)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/223, 0xdf}}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/161, 0xa1}], 0x1}}], 0x2, 0x0, &(0x7f0000001400)={0x0, 0x1c9c380}) 03:34:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 03:34:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x80, 0x103000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000140)='./file0/file0\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) 03:34:47 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000100), 0x8) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:34:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x128, 0x170, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @quota={'quota\x00', 0x18}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"95065deba0aee3e4d2418cbb0187f2074e0349954b022b1f67521d0ef3c3"}}}]}]}, 0x278) 03:34:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x80, 0x103000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000140)='./file0/file0\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) 03:34:47 executing program 7: r0 = socket$inet6(0xa, 0x1400000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') getdents64(r1, &(0x7f0000000100)=""/225, 0xe1) getdents64(r1, &(0x7f0000000340)=""/57, 0x39) 03:34:47 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000346fc8)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="78733976000898fcffff6054be13cfe62785ce10", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="fcfec94f4d0300b8"], 0x8) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000180)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/223, 0xdf}}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/161, 0xa1}], 0x1}}], 0x2, 0x0, &(0x7f0000001400)={0x0, 0x1c9c380}) 03:34:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x80, 0x103000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000140)='./file0/file0\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) 03:34:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x200000000000003, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x9, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) 03:34:47 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xf000000000000000, 0x0) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) 03:34:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x80, 0x103000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000140)='./file0/file0\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) 03:34:47 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x616, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:47 executing program 4: kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) 03:34:47 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x616, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000000c0)=0x90) close(r2) close(r1) 03:34:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:34:48 executing program 5: r0 = socket$inet6(0xa, 0x80005, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) dup3(r1, r2, 0x0) 03:34:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 03:34:48 executing program 5: r0 = socket$inet6(0xa, 0x80005, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) dup3(r1, r2, 0x0) 03:34:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='[proc\x00', r0}, 0x10) setsockopt$inet_tcp_buf(r2, 0x6, 0x7c957d371538e228, &(0x7f0000000180)="484f243687b6db5ad34d9fc342f89f55415dd44fa769e71daee263033f4b58018ff085e75efdf8d5a9c9f0457c4dde1184420d0c15ee42196b82c9060cebc65d3e8a0634061006bc4a4464413547789d98d17403bb15027946519aefa8231bc9a7ad3209d813", 0x66) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0xd9fe, 0x4) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = dup2(r0, r0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000140)={0x0, 0x1, 0x7fff}) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) poll(&(0x7f0000000040)=[{r3, 0x40}, {r3}], 0x2, 0xe0) dup2(r1, r0) 03:34:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 03:34:48 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x616, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:48 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000700)=0x1) 03:34:48 executing program 1: r0 = socket$inet(0x10, 0x2, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:34:48 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x616, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:48 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000700)=0x1) 03:34:48 executing program 5: r0 = socket$inet6(0xa, 0x80005, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) dup3(r1, r2, 0x0) 03:34:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pwrite64(r0, &(0x7f0000000340)="471d99b1", 0x4, 0x0) 03:34:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000280), 0x4) r2 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 03:34:48 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000700)=0x1) [ 764.454369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 764.469839] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 764.504774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 764.542977] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. 03:34:48 executing program 3: sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) msgrcv(0x0, &(0x7f0000000040)=ANY=[], 0x2000000, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)) 03:34:48 executing program 5: r0 = socket$inet6(0xa, 0x80005, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) dup3(r1, r2, 0x0) 03:34:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00002a9000/0xc00000)=nil, 0xc00000}, 0x1}) 03:34:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 03:34:49 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000700)=0x1) 03:34:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x40000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000002c0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:34:49 executing program 1: getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") select(0x40, &(0x7f0000000fc0)={0x8}, &(0x7f0000000180), &(0x7f0000002000), &(0x7f0000003000)={0x77359400}) 03:34:49 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, &(0x7f0000000140)=0x100) 03:34:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100), 0x8b, 0x0, &(0x7f0000191000), &(0x7f0000000000), 0x0) 03:34:49 executing program 4: r0 = getpgrp(0x0) syz_open_procfs(r0, &(0x7f0000000040)) 03:34:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x7}, 0x8) r1 = socket$inet6_sctp(0xa, 0x10000000000005, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0), 0xffc1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 03:34:49 executing program 6: mknod(&(0x7f000000f000)='./file0\x00', 0x6115, 0x71e) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='jfs\x00', 0x0, 0x0) 03:34:49 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl(r0, 0x80984120, &(0x7f0000001f64)) 03:34:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 03:34:49 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getitimer(0x0, &(0x7f0000000240)) 03:34:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000001340)=""/203, 0xcb}, {&(0x7f0000000140)=""/119, 0x77}, {&(0x7f0000001440)=""/133, 0x85}, {&(0x7f0000001500)=""/79, 0x4f}], 0x5}}], 0x1, 0x0, 0x0) [ 765.100322] IPVS: ftp: loaded support on port[0] = 21 [ 765.174791] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 765.191334] IPVS: ftp: loaded support on port[0] = 21 [ 765.206658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 03:34:49 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl(r0, 0x80984120, &(0x7f0000001f64)) 03:34:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x27, 0x101, 0x0, 0x0, {0x9}, [@typed={0x8, 0x4, @u32}]}, 0x1c}, 0x1}, 0x0) 03:34:49 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="6f1a8ba6bd0535593f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000000180)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 765.260038] print_req_error: I/O error, dev loop30, sector 64 [ 765.266430] print_req_error: I/O error, dev loop30, sector 120 [ 765.414045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 765.446509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 03:34:50 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xe, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth0_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) close(r0) 03:34:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000140)) 03:34:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x36a44c91) 03:34:50 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl(r0, 0x80984120, &(0x7f0000001f64)) 03:34:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000240), 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@report={0x4c, 0x20, 0x0, 0x0, 0x0, {0x0, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@multicast2=0xe0000002}}}, 0x4c}, 0x8}, 0x0) 03:34:50 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000140)=0x0) r3 = socket(0x1e, 0x1000000000005, 0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) sendmsg(r3, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x38) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}]) 03:34:50 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000000), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000d0ec0000d0c088699e184b00e0c4"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000600)=""/219, 0xdb}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0xffff, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 03:34:50 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl(r0, 0x80984120, &(0x7f0000001f64)) 03:34:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0xd, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 03:34:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x40042408, &(0x7f0000000040)) close(r1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:34:50 executing program 2: r0 = socket$inet6(0xa, 0x80005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000040), &(0x7f00000032c0)) 03:34:50 executing program 4: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000200)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000442000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ada000/0x4000)=nil, 0x0) 03:34:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x36a44c91) 03:34:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000600)=@broute={'bro\nte\x00', 0x20, 0x3, 0x588, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x0, 'nr0\x00', 'ip6gretap0\x00', 'syzkaller1\x00', 'ip6gretap0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x100, 0x180, 0x1b0, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1177bc2cb1875933}}}, @helper={'helper\x00', 0x28, {{0x0, 'tftp-20000\x00'}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}, {{{0x11, 0x0, 0x0, 'irlan0\x00', 'lo\x00', 'teql0\x00', 'team_slave_1\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'teql0\x00', 'irlan0\x00', 'bridge_slave_1\x00', 'bridge0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x1c8, 0x248, 0x290, [@comment={'comment\x00', 0x100}, @vlan={'vlan\x00', 0x8}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x600) 03:34:50 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x30) fcntl$setstatus(r1, 0x4, 0x6101) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) [ 766.333467] sctp: [Deprecated]: syz-executor3 (pid 25392) Use of int in maxseg socket option. [ 766.333467] Use struct sctp_assoc_value instead 03:34:50 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$evdev(r0, &(0x7f0000000200), 0x20020) 03:34:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x36a44c91) 03:34:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000005c0)=0x2, 0x3) [ 766.375740] sctp: [Deprecated]: syz-executor3 (pid 25399) Use of int in maxseg socket option. [ 766.375740] Use struct sctp_assoc_value instead 03:34:50 executing program 7: request_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) [ 766.513969] xt_time: unknown flags 0x30 03:34:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x9, 0x70bd25, 0x25dfdbfe, {0xe}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5470}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000d24ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xa2f1}, 0x1}, 0x0) recvmsg(r5, &(0x7f00000000c0)={&(0x7f00004afff8)=@sco, 0x8, &(0x7f000020ff70)=[{&(0x7f0000359f45)=""/187, 0xbb}], 0x1, &(0x7f00002d0000)=""/4096, 0xffffffffffffff02}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f0000000200)=0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) 03:34:50 executing program 1: timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000c0bfe0), &(0x7f0000037000)) 03:34:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x36a44c91) [ 766.700331] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 03:34:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001a00)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f00000011c0), 0x0, &(0x7f0000001200)=""/182, 0xb6}}, {{0x0, 0x0, &(0x7f0000001940), 0x0, &(0x7f0000001980)=""/115, 0x73}}], 0x2, 0x0, 0x0) 03:34:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000005c0)=0x2, 0x3) 03:34:51 executing program 1: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x8}}, 0x14}, 0x1}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") ioctl$SG_GET_NUM_WAITING(r1, 0x40286608, &(0x7f0000000000)) [ 767.110458] EXT4-fs warning (device sda1): verify_group_input:122: Last group not full 03:34:51 executing program 5: r0 = socket(0x10, 0x40000000000003, 0x0) write(r0, &(0x7f0000000180)="2400000058001f0014b2f407000904000200071008000100ffffffff0800030000000000", 0x24) 03:34:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x80000001, 0x4000000000401}, {0x60}, {0x6}]}, 0x10) [ 767.175522] EXT4-fs warning (device sda1): verify_group_input:122: Last group not full 03:34:51 executing program 4: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000200)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000442000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ada000/0x4000)=nil, 0x0) 03:34:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x9, 0x70bd25, 0x25dfdbfe, {0xe}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5470}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000d24ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xa2f1}, 0x1}, 0x0) recvmsg(r5, &(0x7f00000000c0)={&(0x7f00004afff8)=@sco, 0x8, &(0x7f000020ff70)=[{&(0x7f0000359f45)=""/187, 0xbb}], 0x1, &(0x7f00002d0000)=""/4096, 0xffffffffffffff02}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f0000000200)=0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) 03:34:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x9c, 0x23, 0x0, 0x0, 0x0, 0x0, [@migrate={0x88, 0x11, [{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@loopback={0x0, 0x1}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6}, {@in=@dev={0xac, 0x14}, @in=@broadcast=0xffffffff}]}]}, 0xfffffe7b}, 0x1}, 0x0) recvmmsg(r1, &(0x7f00000087c0)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f0000005640)=[{&(0x7f0000005580)=""/158, 0x9e}], 0x1}}, {{&(0x7f0000005680)=@ipx, 0x80, &(0x7f0000006940)=[{&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006800)=""/253, 0xfd}], 0x2, &(0x7f00000069c0)=""/188, 0xbc}}], 0x2, 0x0, 0x0) 03:34:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000005c0)=0x2, 0x3) 03:34:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 03:34:51 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d}}) 03:34:51 executing program 7: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000880)={0x0, 0xe9, "22cee4dddc012563bce60d5956b734a03b80420421db50fe56dccae24ec092c68a0a8021e7bb8eec01a8d7217fa32493ab136961d0b9b296d56a2451f365e69a0a86631ba59bac3088e35fe63c5d964924fa12d2f50bc3a23b2f3ca804c3643517bddeae6535a253adfc03a1db792397a7412ad645a8967b91ba7cca7084019f80f37f571ed2911eb79e4c7dba7dce3a889805fa3538c55a3433cede1daa884291fa37c93bb05ad0728bf38471d61edb46051dcc6cb6d0efbe6f26b0ac275097bd85991be25f1c61163cd798a548a75e456c38024be310143237371d7e64beb8dc41ec0581f5869683"}, &(0x7f00000000c0)=0xf1) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x66}, 0x8) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000744000), &(0x7f0000000200), &(0x7f0000000180)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200041, 0x0) add_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="ba8a8e13c1a1fb85a2d932e7378cb74a0148ccd20dd9186f3dae1b723f1654e5281c3b5dbd55e326faa1fc86ef3df2ffa0be0987a485ffb727dd92a46bf19d594a", 0x41, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000980)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000009c0)="786b3ce65322ec5da562ea8488f806f79804f8803e3bbf0deb838eaa475215dbe3ac9ac035a1de20a1e0451b033ba3eb5f87042ec82339ae2478ce5b86f45023ab4b39c863c088a159b7458d09f0f456ea42636cd8834b16412225039c3fc62dbf", 0x61, 0xfffffffffffffffa) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 03:34:51 executing program 5: r0 = socket(0x10, 0x20000000000003, 0x0) recvmsg$kcm(r0, &(0x7f00000018c0)={&(0x7f0000000740)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000001880)=""/45, 0x2d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/161, 0xa1}, 0x0) write(r0, &(0x7f0000000000)="220000005e000721004f10f7d0e0100a4da761424d0bbc54b190243105ebd900001a", 0x22) 03:34:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5457, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) 03:34:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000005c0)=0x2, 0x3) 03:34:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x9, 0x70bd25, 0x25dfdbfe, {0xe}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5470}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000d24ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xa2f1}, 0x1}, 0x0) recvmsg(r5, &(0x7f00000000c0)={&(0x7f00004afff8)=@sco, 0x8, &(0x7f000020ff70)=[{&(0x7f0000359f45)=""/187, 0xbb}], 0x1, &(0x7f00002d0000)=""/4096, 0xffffffffffffff02}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f0000000200)=0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) 03:34:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="fb0cb0cce232e9a09e1e80f00b0c3eb633c37ea3a0", 0x15) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) sendto$inet(r0, &(0x7f0000e76000)="18631ccc129cfe6da87b432660521bda2cfa08561e1daa4de85af3298223e83f37926ae556dd4a7a25f1a7b54208b3c12ae701b74daf6c7e9ec726930f1893953fc43d7c63050e359e8ada93a455fa265b578a5f92b7fc5698f55d554653f0ced1f85c3735bd21bca77d7d9ba3458472926ed49515628bd9c3b940a33cc1bc77ea3a584afc89539a7417791023ff8ca33799b374e760179e5b39b74997e096128c12a6dda762f27df4b0f2b39eb1736b5ae773592489f2f5fd86c1910d414735c23f2aa2053c06fd076b126a9e3318158fb971e3a179206e0cfa842510d062585f2ed0433bd6f6c826706e26b1a1c7ab8aba4278978279bef2a074af9240ad01beb0b7d6d24c06ca3b93a11ec2dde0cd556f7f661fda8d4b52095312c1ad6e538d10ae71ce64181ca2ac7ebff633c940fceb8191e431014cc1ad60cbaedb15832025573e0d44dd1132df1a4e4094be90f9d743074178b4e239470e82745feaa4577ff19c9295d4366509a8118d9c2d7f407974af1818796aecfb780aae793f4f16dad688abad30ca0965ddc9764321505d6ef60bc519dc03a465534b66af52e4e70669ae4506107dc830ef124521097e9fcdadcc39a8eb7b41fb60b74583c5abdf384467d20a97dba87da9ece6628fdc4a2f781ab0780df2e2cffb318bff3013fe4a5b7ba50c0ce804e8102d41a6856364ef62ca72b815672074595b734d76fab41e26af3ccf2d39f4d49d2d3d1b117881792f068a7cac9782f2c8cbcf11023685ac781ff70f96b16d7eb956fe31aea3af7974f8385cf2fe9152baa7c2556e8bb7030b0dd1f0d21503af85de38a85532a75dfa0ce136703def956ade894ff2d7f415a355a33fe65c5e7c6e6fd58f39169e60d50fba3ce3bc9058322a3575dc6412aa5ecb8d62939e5c94b0ba12613a6a3618912437182bce9130f8ece10ad861159bea5911d44f7a8d7ef8f7a160d6ae3b7165fb66425ca9732686356636efdb77fc05e28a5a6493f9bf9703fcc9f5571ab3ce59ca5ee35a94e821e6ada2da7916a37a74a30313820a5cdf1f3017a268acb2bf42dcbcaa6722bb31a70dd8b812760bcd092c65360a171227f80de6b8d1e127774b392fc52bc0b565ab6f8450d3b7ab1c3543917ab303955d66fee82791eff78f1a98177ea3acf2a4c926618a0dd180bcafce2f24196fff796c498900f945f97ba2904aafc4b5775e171ee5aa13e35f34cd58e700abd191b42dbb6a1d4847747bc330318b3865b18e301d44e3c6274dd2a374d25885680f18295efeb6d94f943b43fc8fae544cbc5f5e9528e45b8f8e579f6815295eaeab7f3980a09bd13858a22cd2c5b788c29c016d578b052e2d2c0ef7913a78c2b21b3713d293b62f54ecab1efb03c4518e71c9457c3c190c31f13b7a06fa28ecc071b29829cef338e80dae408d7f06b8e75da745cf83fb8a6e16600549ed3a729811cd77c8165758e023d706b218e0780678ca6d7bd291980a268f4a55d00a6ea969a14c0efe619b032fc6ccae50845c82fec6e8662ffb25dc4a733426a500828bbc1fe570acc5eefd334a2f68e497448dc85becb9c084b5186ca9b872be84a39853a59c32305d2c8d1365bf4a047e829e995c843fbda0a3f4bf9373d2c6e2f9b71f088d61cbe793409b450aff67d0ead723b7da7ecd896ddc5ba10d34cfa4b203d19b9707eb5a8cb98a9a38d5d95219f41989088973778fe7dcad466cb8221504300bd6fd90a2a48e033cc93474f6091be4466c89aff8c8dab3b838808ea220e63e2cdba7b7a65025c315739232c9b91db85e93a2022f08d3d367c014dcfa9437df5548a6a53237fbd312c747a696ad991e4734adb8f1ce54e505616117abda379d7cc636712aab4cd88059a8382a9f57ca4f4eefe878773f7ea46ad0c2d28eb8621ef7000997a8d89c8d4ff1d00c223dbd642cbe29bf3bfaca3c77949eeeaf57b5c068d3729266dc8fb7e2e737e94458fefe1420830415d7a948a850c4b88218fc005b6c664f909a84d92c8a50698feb5be92feeebd8b813fd4a143a248040e9", 0x5a9, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 03:34:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:34:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) setsockopt$sock_int(r1, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f000086eff0)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x9}}, 0x1c) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) 03:34:51 executing program 1: mmap(&(0x7f000090c000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x2a2800, 0x0) readlinkat(r0, &(0x7f000090fff8)='./file0\x00', &(0x7f0000728000)=""/145, 0x3f) 03:34:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x9, 0x70bd25, 0x25dfdbfe, {0xe}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5470}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000d24ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xa2f1}, 0x1}, 0x0) recvmsg(r5, &(0x7f00000000c0)={&(0x7f00004afff8)=@sco, 0x8, &(0x7f000020ff70)=[{&(0x7f0000359f45)=""/187, 0xbb}], 0x1, &(0x7f00002d0000)=""/4096, 0xffffffffffffff02}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f0000000200)=0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) 03:34:52 executing program 4: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000200)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000442000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ada000/0x4000)=nil, 0x0) 03:34:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000100), &(0x7f0000013000)=0x4) close(r2) close(r1) 03:34:52 executing program 3: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f00004fd000), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000c8, &(0x7f0000000080), 0x4) 03:34:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8, 0x9, 0x51}]}}}]}, 0x38}, 0x1}, 0x0) 03:34:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x808410, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) fdatasync(r0) 03:34:52 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getrlimit(0x10b, &(0x7f0000000100)) 03:34:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x9c, 0x23, 0x0, 0x0, 0x0, 0x0, [@migrate={0x88, 0x11, [{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@loopback={0x0, 0x1}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6}, {@in=@dev={0xac, 0x14}, @in=@broadcast=0xffffffff}]}]}, 0xfffffe7b}, 0x1}, 0x0) recvmmsg(r1, &(0x7f00000087c0)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f0000005640)=[{&(0x7f0000005580)=""/158, 0x9e}], 0x1}}, {{&(0x7f0000005680)=@ipx, 0x80, &(0x7f0000006940)=[{&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006800)=""/253, 0xfd}], 0x2, &(0x7f00000069c0)=""/188, 0xbc}}], 0x2, 0x0, 0x0) 03:34:52 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20141042, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x4080, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8001) sendfile(r1, r2, &(0x7f0000000080), 0x2008000ffffffff) [ 768.610855] netlink: 'syz-executor1': attribute type 9 has an invalid length. [ 768.645616] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000045) [ 768.652806] FAT-fs (loop7): Filesystem has been set read-only 03:34:52 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getrlimit(0x10b, &(0x7f0000000100)) 03:34:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c, {[{@blksize={'blksize', 0x3d}, 0x2c}]}}) 03:34:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="f2410f1b1c74460fc71a66430f3881a00a0000000f20e035004000000f22e066ba6100b00deeb805000000b9a82e00000f01d966ba4000ed663ed9f7c442c1aac6c4c1245ce4", 0x46}], 0x1, 0x0, &(0x7f0000000240), 0xffffffffffffe8b) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0xc018ae85, &(0x7f0000000100)) [ 768.660949] FAT-fs (loop2): error, invalid access to FAT (entry 0x000006c0) [ 768.666847] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000045) [ 768.668219] FAT-fs (loop2): Filesystem has been set read-only [ 768.676847] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000045) [ 768.693277] attempt to access beyond end of device [ 768.698358] loop7: rw=0, want=305, limit=116 03:34:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000008000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:52 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x2) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) tkill(r1, 0x1000000000016) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="82dc937b455098323dac0337348b48185611450cf6f32086c9a09a9987ec4dc9d04d26ddc913851f0cce32b57d44ccd123804400b31d253c86ff650027db0000000000000000000000000000000000000000000000000000"], 0x58) set_mempolicy(0x3, &(0x7f0000000280)=0x401, 0x1) [ 768.706258] FAT-fs (loop2): error, invalid access to FAT (entry 0x000006c0) 03:34:53 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getrlimit(0x10b, &(0x7f0000000100)) 03:34:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c, {[{@blksize={'blksize', 0x3d}, 0x2c}]}}) [ 768.882152] *** Guest State *** [ 768.885533] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 768.894414] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 768.903312] CR3 = 0x0000000000000000 [ 768.907065] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 768.913587] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 768.920192] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 768.926188] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 768.932197] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 768.938887] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 768.946894] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 768.954889] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 768.962944] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 768.970950] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 768.978957] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 768.986954] GDTR: limit=0x00000000, base=0x0000000000000000 [ 768.995058] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.003057] IDTR: limit=0x00000000, base=0x0000000000000000 [ 769.011074] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.019070] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 769.025505] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 769.032980] Interruptibility = 00000000 ActivityState = 00000000 [ 769.039246] *** Host State *** [ 769.042469] RIP = 0xffffffff811f4694 RSP = 0xffff88019e01f350 [ 769.048479] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 769.055525] FSBase=00007ff2dc2eb700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 769.063358] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 769.069283] CR0=0000000080050033 CR3=00000001cdad9000 CR4=00000000001426e0 03:34:53 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getrlimit(0x10b, &(0x7f0000000100)) [ 769.076349] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 769.084217] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 769.090304] *** Control State *** [ 769.093790] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 769.101087] EntryControls=0000d1ff ExitControls=0023efff [ 769.106575] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 769.113536] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.120246] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.126851] reason=80000021 qualification=0000000000000000 [ 769.133201] IDTVectoring: info=00000000 errcode=00000000 [ 769.138676] TSC Offset = 0xfffffe614835483b [ 769.143122] EPT pointer = 0x00000001a5f8901e [ 769.168972] *** Guest State *** [ 769.172356] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 769.181233] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 769.190097] CR3 = 0x0000000000000000 [ 769.193853] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 769.200369] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 769.206905] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 769.212926] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 769.219534] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 769.226250] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.234267] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.242269] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.250313] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.258444] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.266468] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.274473] GDTR: limit=0x00000000, base=0x0000000000000000 [ 769.282502] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.290547] IDTR: limit=0x00000000, base=0x0000000000000000 [ 769.298573] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.306597] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 769.313054] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 769.320549] Interruptibility = 00000000 ActivityState = 00000000 [ 769.326818] *** Host State *** [ 769.330049] RIP = 0xffffffff811f4694 RSP = 0xffff88019e01f350 [ 769.336066] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 769.342507] FSBase=00007ff2dc2eb700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 769.350345] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 769.356274] CR0=0000000080050033 CR3=00000001cdad9000 CR4=00000000001426e0 [ 769.363333] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 769.370033] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 769.376118] *** Control State *** [ 769.379609] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 769.386319] EntryControls=0000d1ff ExitControls=0023efff [ 769.391805] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 769.398771] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.405475] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.412095] reason=80000021 qualification=0000000000000000 [ 769.418443] IDTVectoring: info=00000000 errcode=00000000 [ 769.423935] TSC Offset = 0xfffffe614835483b [ 769.428285] EPT pointer = 0x00000001a5f8901e 03:34:53 executing program 4: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000200)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000442000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ada000/0x4000)=nil, 0x0) 03:34:53 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xfffffffffffffffb}) 03:34:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c, {[{@blksize={'blksize', 0x3d}, 0x2c}]}}) 03:34:53 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() prctl$setptracer(0x59616d61, r0) 03:34:53 executing program 6: r0 = socket$nl_generic(0xa, 0x5, 0x84) write(0xffffffffffffffff, &(0x7f0000000040)="3e0000004e001f00ff03f4f9002304000a04f511280001", 0x17) ioctl$sock_SIOCETHTOOL(r0, 0x89fb, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="fdf14000000000000000000000000000000000001e"]}) 03:34:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001500192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 03:34:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x9c, 0x23, 0x0, 0x0, 0x0, 0x0, [@migrate={0x88, 0x11, [{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@loopback={0x0, 0x1}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6}, {@in=@dev={0xac, 0x14}, @in=@broadcast=0xffffffff}]}]}, 0xfffffe7b}, 0x1}, 0x0) recvmmsg(r1, &(0x7f00000087c0)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f0000005640)=[{&(0x7f0000005580)=""/158, 0x9e}], 0x1}}, {{&(0x7f0000005680)=@ipx, 0x80, &(0x7f0000006940)=[{&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006800)=""/253, 0xfd}], 0x2, &(0x7f00000069c0)=""/188, 0xbc}}], 0x2, 0x0, 0x0) [ 769.814614] netlink: 64 bytes leftover after parsing attributes in process `syz-executor1'. 03:34:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003}) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0xfffffffffffffff7, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000003c0)=0x81, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x80) ioctl$TIOCSCTTY(r2, 0x540e, 0x9) r3 = getpid() wait4(r3, &(0x7f0000000340), 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)=0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="f1adeb1af858baacf3badb1d79cae63160297c5622f1bd4355db6251ba98a1e2907b45d18f94a48704000000222a0027dec36a9f5f10be85cdfbb42864d37ef802ac13632e6787578d000000d38f350b8b23000000000000000000", 0x5b, 0xfffffffffffffffb) wait4(r4, &(0x7f0000000200), 0x4, &(0x7f0000000240)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0xfffffffffffffffe, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000480)={0x303, 0x33}, 0x4) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000040)={0x80000001, 0x5, 0x1}) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000140)={0x101, 0x80000000, 0x0, 0xd2, 0x80000000, 0x7}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000300)) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000440)={0x2}) 03:34:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c, {[{@blksize={'blksize', 0x3d}, 0x2c}]}}) 03:34:54 executing program 6: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x40000000000004, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 03:34:54 executing program 5: getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 769.855632] kvm: apic: phys broadcast and lowest prio 03:34:54 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 'queue1\x00', 0xfffffffffffffc01}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f0000000280)={0x10}, 0xffb8, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0xfffffffffffffdd9}, 0x1}, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x4) tgkill(r1, r1, 0x2f) ptrace$getregs(0x4209, r1, 0x730004, &(0x7f0000000000)=""/38) 03:34:54 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000000)=0xa2) [ 769.889245] kvm: apic: phys broadcast and lowest prio 03:34:54 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000080)) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) [ 770.030963] Option ' ' to dns_resolver key: bad/missing value 03:34:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xff, 0x20001, 0x2}, 0x2c) 03:34:54 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40086604, &(0x7f00000001c0)) [ 770.083209] Option ' ' to dns_resolver key: bad/missing value 03:34:54 executing program 7: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) 03:34:54 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 03:34:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003}) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0xfffffffffffffff7, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000003c0)=0x81, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x80) ioctl$TIOCSCTTY(r2, 0x540e, 0x9) r3 = getpid() wait4(r3, &(0x7f0000000340), 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)=0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="f1adeb1af858baacf3badb1d79cae63160297c5622f1bd4355db6251ba98a1e2907b45d18f94a48704000000222a0027dec36a9f5f10be85cdfbb42864d37ef802ac13632e6787578d000000d38f350b8b23000000000000000000", 0x5b, 0xfffffffffffffffb) wait4(r4, &(0x7f0000000200), 0x4, &(0x7f0000000240)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0xfffffffffffffffe, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000480)={0x303, 0x33}, 0x4) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000040)={0x80000001, 0x5, 0x1}) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000140)={0x101, 0x80000000, 0x0, 0xd2, 0x80000000, 0x7}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000300)) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000440)={0x2}) 03:34:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x900}, 0xb1, &(0x7f0000000a80)={&(0x7f0000000000)=@ipv6_newroute={0x38, 0x18, 0x311, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1}}]}, 0x38}, 0x1}, 0x0) 03:34:54 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40086604, &(0x7f00000001c0)) 03:34:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x9c, 0x23, 0x0, 0x0, 0x0, 0x0, [@migrate={0x88, 0x11, [{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@loopback={0x0, 0x1}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6}, {@in=@dev={0xac, 0x14}, @in=@broadcast=0xffffffff}]}]}, 0xfffffe7b}, 0x1}, 0x0) recvmmsg(r1, &(0x7f00000087c0)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f0000005640)=[{&(0x7f0000005580)=""/158, 0x9e}], 0x1}}, {{&(0x7f0000005680)=@ipx, 0x80, &(0x7f0000006940)=[{&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006800)=""/253, 0xfd}], 0x2, &(0x7f00000069c0)=""/188, 0xbc}}], 0x2, 0x0, 0x0) 03:34:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000072]}) 03:34:55 executing program 6: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000480)) 03:34:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x900}, 0xb1, &(0x7f0000000a80)={&(0x7f0000000000)=@ipv6_newroute={0x38, 0x18, 0x311, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1}}]}, 0x38}, 0x1}, 0x0) 03:34:55 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40086604, &(0x7f00000001c0)) 03:34:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000100), 0xaea, &(0x7f0000fff000/0x1000)=nil, 0x2) 03:34:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000240007031dfffd946f61830020200a000900000000008568f1ffffff0400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 770.899262] Option ' ' to dns_resolver key: bad/missing value 03:34:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x1000007ffe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) close(r2) 03:34:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003}) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0xfffffffffffffff7, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000003c0)=0x81, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x80) ioctl$TIOCSCTTY(r2, 0x540e, 0x9) r3 = getpid() wait4(r3, &(0x7f0000000340), 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)=0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="f1adeb1af858baacf3badb1d79cae63160297c5622f1bd4355db6251ba98a1e2907b45d18f94a48704000000222a0027dec36a9f5f10be85cdfbb42864d37ef802ac13632e6787578d000000d38f350b8b23000000000000000000", 0x5b, 0xfffffffffffffffb) wait4(r4, &(0x7f0000000200), 0x4, &(0x7f0000000240)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0xfffffffffffffffe, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000480)={0x303, 0x33}, 0x4) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000040)={0x80000001, 0x5, 0x1}) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000140)={0x101, 0x80000000, 0x0, 0xd2, 0x80000000, 0x7}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000300)) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000440)={0x2}) 03:34:55 executing program 6: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000480)) 03:34:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x900}, 0xb1, &(0x7f0000000a80)={&(0x7f0000000000)=@ipv6_newroute={0x38, 0x18, 0x311, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1}}]}, 0x38}, 0x1}, 0x0) 03:34:55 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000001009371, &(0x7f0000006f80)="010000000000000018") 03:34:55 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40086604, &(0x7f00000001c0)) 03:34:55 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280)={0x5a}, 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000000300)='^', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000040)="d0", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 771.064623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 771.114594] Option ' ' to dns_resolver key: bad/missing value 03:34:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0009020000000000400000000000"], 0x10}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) dup3(r2, r1, 0x0) 03:34:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003}) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0xfffffffffffffff7, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000003c0)=0x81, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x80) ioctl$TIOCSCTTY(r2, 0x540e, 0x9) r3 = getpid() wait4(r3, &(0x7f0000000340), 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)=0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="f1adeb1af858baacf3badb1d79cae63160297c5622f1bd4355db6251ba98a1e2907b45d18f94a48704000000222a0027dec36a9f5f10be85cdfbb42864d37ef802ac13632e6787578d000000d38f350b8b23000000000000000000", 0x5b, 0xfffffffffffffffb) wait4(r4, &(0x7f0000000200), 0x4, &(0x7f0000000240)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0xfffffffffffffffe, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000480)={0x303, 0x33}, 0x4) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000040)={0x80000001, 0x5, 0x1}) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000140)={0x101, 0x80000000, 0x0, 0xd2, 0x80000000, 0x7}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000300)) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000440)={0x2}) [ 771.327866] Option ' ' to dns_resolver key: bad/missing value 03:34:55 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000140)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0xa3023, 0x0) 03:34:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x900}, 0xb1, &(0x7f0000000a80)={&(0x7f0000000000)=@ipv6_newroute={0x38, 0x18, 0x311, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1}}]}, 0x38}, 0x1}, 0x0) 03:34:55 executing program 6: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000480)) 03:34:55 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_names\x00') sendfile(r0, r1, &(0x7f0000000040), 0x8010) 03:34:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40086610, &(0x7f0000000000)) 03:34:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x20000280, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000003e0a2c1900000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001db8ce221433345a000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x138) r2 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendto$inet6(r2, &(0x7f0000000140), 0xc, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 03:34:55 executing program 0: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x5, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000000c0), 0x8) 03:34:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1}, 0x0) 03:34:56 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000001e00)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5cfa90f95f8549929feb97795cb386b7fe74b7a302f6b353c84a55ff590479bcfec6f659f4c11a562b1f84e1468cf293c2a5c93bc44e29d0fe81fe62145e03"}, 0x80, &(0x7f0000001fc0), 0x0, &(0x7f0000002000)}}], 0x1, 0x20000010) 03:34:56 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 03:34:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x8}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4, &(0x7f0000000200)={@dev={0xfe, 0x80, [0xffffffa4]}}, 0x2c) 03:34:56 executing program 6: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000480)) 03:34:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000280)={0xf, 0x8, 0xfa00}, 0x10) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 03:34:56 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000001700)='./bus\x00', &(0x7f0000001740)='./file0\x00') 03:34:56 executing program 0: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000) 03:34:56 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 03:34:56 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) clone(0x20000000, &(0x7f0000000080), &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000000080)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000140)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") wait4(0x0, &(0x7f0000000100), 0x40000000, &(0x7f00000001c0)) 03:34:56 executing program 5: creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), 0xc) clone(0x3f00000000000000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 03:34:56 executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000440)="025cc83d6d345f8f762070") bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x800000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x3, 0x800006, 0x4, 0x7, 0x1f, r4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x9, 0x0, 0x9, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 03:34:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0xc0185879, &(0x7f0000000000)={0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) 03:34:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x8000) 03:34:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 03:34:56 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 03:34:56 executing program 5: creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), 0xc) clone(0x3f00000000000000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 03:34:56 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x1e, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x3, 0x2, &(0x7f0000000000)=@raw=[@exit={0x95}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xb9, &(0x7f00000012c0)=""/185, 0x0, 0x0, [], r1}, 0x48) 03:34:56 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 03:34:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0xc0185879, &(0x7f0000000000)={0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) 03:34:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x66f7}) 03:34:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x9, 0x2, &(0x7f00000001c0)=@raw=[@alu], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, [0x2]}, 0x48) 03:34:57 executing program 0: futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x405ffffffe) 03:34:57 executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000440)="025cc83d6d345f8f762070") bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x800000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x3, 0x800006, 0x4, 0x7, 0x1f, r4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x9, 0x0, 0x9, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 03:34:57 executing program 5: creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), 0xc) clone(0x3f00000000000000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 03:34:57 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000440)="025cc83d6d345f8f762070") bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x800000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x3, 0x800006, 0x4, 0x7, 0x1f, r4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x9, 0x0, 0x9, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 03:34:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001340)={[{@noquota='noquota', 0x2c}, {@locktable={'locktable', 0x3d}, 0x2c}]}) 03:34:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x30}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:34:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0xc0185879, &(0x7f0000000000)={0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) 03:34:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1, 0x0) 03:34:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) [ 773.337058] gfs2: invalid mount option: locktable= [ 773.342138] gfs2: can't parse mount arguments [ 773.383405] gfs2: invalid mount option: locktable= [ 773.388690] gfs2: can't parse mount arguments 03:34:57 executing program 5: creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), 0xc) clone(0x3f00000000000000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 03:34:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0xc0185879, &(0x7f0000000000)={0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) 03:34:57 executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000440)="025cc83d6d345f8f762070") bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x800000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x3, 0x800006, 0x4, 0x7, 0x1f, r4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x9, 0x0, 0x9, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 03:34:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x3, 0x0, [0xd90]}) 03:34:57 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5423, &(0x7f0000000080)) 03:34:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) open_by_handle_at(r1, &(0x7f00000000c0)={0x8, 0x1}, 0x0) 03:34:57 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000440)="025cc83d6d345f8f762070") bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x800000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x3, 0x800006, 0x4, 0x7, 0x1f, r4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x9, 0x0, 0x9, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 03:34:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x38}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:34:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0xff, 0x4) 03:34:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x3}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x1}}]}, 0x2c}, 0x1}, 0x0) 03:34:57 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000140)='./file0/bus\x00', 0x0) 03:34:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="9a0028a800dfd8f22e260f01c9f36d66b9800000c00f326635000800000f30f3ab0f01df66b98f0b00000f32d18d9808262636c19d5e0d00", 0x38}], 0x24, 0x0, &(0x7f0000000040)=[@dstype0={0x6, 0xc}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:57 executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000440)="025cc83d6d345f8f762070") bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x800000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x3, 0x800006, 0x4, 0x7, 0x1f, r4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x9, 0x0, 0x9, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 03:34:58 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000440)="025cc83d6d345f8f762070") bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x800000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x3, 0x800006, 0x4, 0x7, 0x1f, r4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x9, 0x0, 0x9, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 03:34:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="bcd6a76e96c6856800000ced5c54befef7008e72e8cfe269", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003400)=[{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000003c0)="817a969adc4f6b1ac3b87272de85859e50", 0x11}], 0x1, &(0x7f0000001400)}], 0x1, 0x8001) recvmmsg(r2, &(0x7f0000004f00)=[{{&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980)=[{&(0x7f0000001640)=""/63, 0x3f}], 0x1, &(0x7f00000019c0)=""/230, 0xe6}}, {{&(0x7f00000049c0)=@ll, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004d80)=""/107, 0x6b}], 0x1, &(0x7f0000004ec0)=""/7, 0x7}}], 0x2, 0x0, &(0x7f0000005140)={0x0, 0x1c9c380}) [ 773.835891] netlink: 'syz-executor3': attribute type 21 has an invalid length. [ 773.869925] netlink: 'syz-executor3': attribute type 1 has an invalid length. 03:34:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000140)="0304000007005b0000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e065901f0053c0f485472da7222a2bb401000000c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf56fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x1, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 03:34:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0xff, 0x4) 03:34:58 executing program 2: r0 = socket(0x40000000002, 0x3, 0x39) sendto$unix(r0, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000340)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000640)=""/242, 0xf2}, 0x0) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000180)) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000840)) 03:34:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x3f, 0x0, "9f11ebcd0bf1474bb0954572c05b609c9d1c109d76a2c8d72747b2efce0db5948594ddd4a3b3dffbc73aedc4e460f3d4d0b4b164473122804ccc4a017a3d5bf06d81ee4c7aae0ce430974dc836f33bc4"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x0, 0x0, "177f19352f6e4a025dc11b548c3a8fc085992b5bb8119c632b9c2d2a1d6d235105c53bd02065fd18715ada8437d4cc16f82a8bd54f0487ababab8b64afe95d93ddca5eb9b005755c8b2552d6b022d6c7"}, 0xd8) dup3(r1, r0, 0x0) 03:34:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f6, &(0x7f0000000080)={'ip6tnl0\x00', @ifru_names='teql0\x00'}) 03:34:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x6464, 0xaf) close(r3) dup3(r1, r2, 0x0) 03:34:58 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2300000007ffff160065747a3065269dd03fe3642435dcb1491633d61e9a"], 0x1e) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000', 0x2c}]}}) 03:34:58 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)}) 03:34:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)="f672892e35691e3076cece8391e65d8a826752922a4c37ad4c45e4daead871c0b01650404f17d4891cc56cbbf8ddf7c098739609c7c2236943d3ab33d95ada4cf65341e624f0bc5a833b4ecfabdc7f60a5f9ff2b25995bd778ef5f83582bda28a988f80d47913acb49e8f2024a1851b1fdc926b9f473596e236f831385d217c2315eeec3388de94a520731333f72e64535489d715268c86634db284d340bc6402dd168902043494e052d6bc75e74cda9159aab79010d64a6441f661f1c43e0f57285fe448ce400ebf543b6c0dcdda228", 0xd0}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 03:34:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0xff, 0x4) 03:34:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x4c92aa8c0880d374) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000000240)=""/101, 0xffffffffffffff52, 0x0, 0x0, 0xfffffde1) 03:34:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x6c}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 774.545486] 9pnet: p9_errstr2errno: server reported unknown error etz0e&Ð?ãd$5ܱI3Öš [ 774.561202] 9pnet: p9_errstr2errno: server reported unknown error etz0e&Ð?ãd$5ܱI3Öš [ 774.571402] binder: 25976:25982 ERROR: BC_REGISTER_LOOPER called without request 03:34:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x3}, 0x2) 03:34:58 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x80, 0x0, 0x3}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x39d) 03:34:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0xff, 0x4) 03:34:58 executing program 3: msgctl$IPC_RMID(0x0, 0x823f7d75c9000000) 03:34:58 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0xf) 03:34:59 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f00000000c0)={[{@largeio='largeio', 0x2c}]}) [ 774.951968] XFS (loop5): Invalid superblock magic number [ 774.971810] XFS (loop5): Invalid superblock magic number [ 775.361221] binder: send failed reply for transaction 217 to 25976:26051 [ 775.368443] binder: 25976:25982 ioctl c0306201 200000c0 returned -14 [ 775.376617] binder: BINDER_SET_CONTEXT_MGR already set [ 775.382189] binder: 25976:26051 ioctl 40046207 0 returned -16 [ 775.389322] binder: 25976:25982 ERROR: BC_REGISTER_LOOPER called without request [ 775.398463] binder: undelivered TRANSACTION_COMPLETE [ 775.398605] binder: 25976:25982 transaction failed 29189/-22, size 0-0 line 2852 [ 775.403659] binder: undelivered TRANSACTION_ERROR: 29201 [ 775.417152] binder: undelivered TRANSACTION_ERROR: 29189 03:34:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000020000000000000000000000", 0x10}]) 03:34:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000440)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munmap(&(0x7f0000fdf000/0xe000)=nil, 0xe000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000340)="66b80d0000000f23c00f21f86635010002000f23f8f4baf80c66b89aaa128c66efbafc0cedbaf80c66b8cc44728666efbafc0c66b851da000066eff20f78e9fa0e0f01cabaf80c66b85962a38e66efbafc0cb002ee660fd2f2f082710952baf80c66b8d1394d8666efbafc0cec"}], 0xc0, 0x0, &(0x7f0000000300), 0x1000000000000449) 03:34:59 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000000008912, &(0x7f0000000280)="024a903d6d345f8f762070") r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x6857b21ff1155d93) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) pwrite64(r1, &(0x7f0000000000)="af", 0x1, 0x0) ftruncate(r1, 0x0) 03:34:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:34:59 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="1656610de99efc3b62ab0bb30a1c0081284dfb21ee28dedead03350946706f742c97ec4bfb51295a454a74a343b7364307f988365972c5120b9888e868481088d8ce8a97088d14b48cf1a6e338e83acb420f9781d5b8e4a74280dcbe7e9df6f0a816e8b85a23a3bc04750cb2fda3df89ffdf8a6def837827339c82208f00352598fbcb002c9df1eace5ddc975b5b9a0504", 0x91}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x14, &(0x7f0000001740), 0x1, &(0x7f0000000380)}, 0x0) 03:34:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x27, 0x101, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, @u32}]}, 0x1c}, 0x1}, 0x0) 03:34:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="260f0d95060000002e650f320f32c4c2e102fd0f9e8200000000b8ef0000000f23d00f21f8350000000d0f23f86565660f3880140866b84a000f00d8660f1ae2b8010000000f23d00f21f8350000000d0f23f8", 0x53}], 0x1, 0x3, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:59 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='s'], &(0x7f0000000300)='lo\x00', 0x3, 0x0) dup2(r0, r1) [ 775.634663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 03:34:59 executing program 0: r0 = socket$inet6(0xa, 0x800000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f00000001c0)=0x98) 03:34:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f00000015c0), &(0x7f00000000c0)=0x2) 03:34:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}]}, &(0x7f0000000080)=0x10) 03:34:59 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 03:34:59 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 03:34:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000000180)) read(r0, &(0x7f0000000340)=""/249, 0xf9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 03:34:59 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client', 0x2c}, {@noextend='noextend', 0x2c}]}}) 03:35:00 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file2\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/91, 0x5b) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 03:35:00 executing program 5: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}, {{&(0x7f00000035c0)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000005700), 0x0, &(0x7f0000000140)=[{0x10, 0x10f}], 0x10}}], 0x2, 0x0) 03:35:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40505331, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 03:35:00 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client', 0x2c}, {@noextend='noextend', 0x2c}]}}) 03:35:00 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x4e21}, 0x3e) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 03:35:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) bind(r0, &(0x7f0000000340)=@rc={0x1f, {0x1}}, 0x80) [ 775.965128] tmpfs: No value for mount option './file0' [ 775.975627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:35:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000007ffd)) 03:35:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x3c, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 03:35:00 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client', 0x2c}, {@noextend='noextend', 0x2c}]}}) [ 776.720505] print_req_error: I/O error, dev loop0, sector 0 [ 776.727547] print_req_error: I/O error, dev loop0, sector 1168 [ 776.734187] Buffer I/O error on dev loop0, logical block 146, lost async page write 03:35:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) 03:35:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2000, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 03:35:00 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) 03:35:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x0, 0xabc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff80}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x0, 0x0, &(0x7f00000000c0), 0x33e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:01 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000e78a42), 0xffae, 0x8084, &(0x7f00004d4000)={0x2, 0x4e20}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") ioctl$int_in(r0, 0x4000005452, &(0x7f0000f75000)=0x4) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x9) 03:35:01 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ppoll(&(0x7f0000ae7000), 0x0, &(0x7f0000845ff0), &(0x7f000079dff8), 0x8) 03:35:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 03:35:01 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client', 0x2c}, {@noextend='noextend', 0x2c}]}}) 03:35:01 executing program 1: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0xb8018c61afe6edf8) 03:35:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000200000000000000593a5e0ecde7540100000002"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 03:35:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000040)=0x401, 0x4) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0) 03:35:01 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 03:35:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000001c0)={0x28, 0x2}, 0x28) 03:35:01 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000011000/0x1000)=nil}) 03:35:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 03:35:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) 03:35:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000001c0)={0x28, 0x2}, 0x28) 03:35:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r2, &(0x7f0000458000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000def000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}}}}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @quote={{}, 0x0, &(0x7f00008e3000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @quote={{}, 0x0, &(0x7f00004f8000)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0xff9a) recvmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f0000002640)=@vsock, 0x10, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/196, 0xc4}], 0x1, &(0x7f0000002940)=""/154, 0x9a}}], 0x1, 0x0, &(0x7f0000002ac0)) [ 777.139031] IPv6 header not found [ 777.142625] IPv6 header not found [ 777.156624] IPv6 header not found [ 777.160166] IPv6 header not found 03:35:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 03:35:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) 03:35:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000200000000000000593a5e0ecde7540100000002"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 03:35:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r2, &(0x7f0000458000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000def000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}}}}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @quote={{}, 0x0, &(0x7f00008e3000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @quote={{}, 0x0, &(0x7f00004f8000)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0xff9a) recvmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f0000002640)=@vsock, 0x10, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/196, 0xc4}], 0x1, &(0x7f0000002940)=""/154, 0x9a}}], 0x1, 0x0, &(0x7f0000002ac0)) 03:35:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 03:35:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000001c0)={0x28, 0x2}, 0x28) 03:35:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) 03:35:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000200000000000000593a5e0ecde7540100000002"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 03:35:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r2, &(0x7f0000458000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000def000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}}}}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @quote={{}, 0x0, &(0x7f00008e3000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @quote={{}, 0x0, &(0x7f00004f8000)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0xff9a) recvmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f0000002640)=@vsock, 0x10, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/196, 0xc4}], 0x1, &(0x7f0000002940)=""/154, 0x9a}}], 0x1, 0x0, &(0x7f0000002ac0)) [ 777.949038] FAULT_FLAG_ALLOW_RETRY missing 30 [ 777.953651] CPU: 1 PID: 26213 Comm: syz-executor6 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 777.962144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.971501] Call Trace: [ 777.974101] dump_stack+0x1c9/0x2b4 [ 777.977757] ? dump_stack_print_info.cold.2+0x52/0x52 [ 777.982985] ? kasan_check_write+0x14/0x20 [ 777.987232] ? do_raw_spin_lock+0xc1/0x200 [ 777.991488] handle_userfault.cold.33+0x47/0x62 [ 777.996172] ? userfaultfd_ioctl+0x5430/0x5430 [ 778.000791] ? trace_hardirqs_on+0x10/0x10 [ 778.005042] ? perf_event_update_userpage+0xd30/0xd30 [ 778.010245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 778.015795] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 778.020994] ? perf_trace_lock+0xde/0x920 [ 778.025153] ? userfaultfd_ctx_put+0x810/0x810 [ 778.029734] ? perf_sched_cb_inc+0x2e0/0x2e0 [ 778.034131] ? zap_class+0x740/0x740 [ 778.037851] ? finish_task_switch+0x1d3/0x870 [ 778.042337] ? lock_downgrade+0x8f0/0x8f0 [ 778.046468] ? finish_task_switch+0x171/0x870 [ 778.051047] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 778.055652] ? trace_hardirqs_on+0x10/0x10 [ 778.059898] ? lock_acquire+0x1e4/0x540 [ 778.063873] ? __handle_mm_fault+0x3a38/0x44a0 [ 778.068438] ? lock_downgrade+0x8f0/0x8f0 [ 778.072574] ? kasan_check_read+0x11/0x20 [ 778.076709] ? do_raw_spin_unlock+0xa7/0x2f0 [ 778.081109] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 778.085679] ? kasan_check_write+0x14/0x20 [ 778.089898] ? do_raw_spin_lock+0xc1/0x200 [ 778.094133] __handle_mm_fault+0x3a45/0x44a0 [ 778.098531] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 778.103369] ? plist_check_list+0xa0/0xa0 [ 778.107512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 778.113041] ? ring_buffer_record_is_on+0xe1/0x130 [ 778.118406] ? ring_buffer_nest_end+0xb0/0xb0 [ 778.122893] ? lock_acquire+0x1e4/0x540 [ 778.126855] ? handle_mm_fault+0x417/0xc80 [ 778.131071] ? lock_downgrade+0x8f0/0x8f0 [ 778.135219] ? lock_release+0xa30/0xa30 [ 778.139367] ? rcu_note_context_switch+0x730/0x730 [ 778.144282] ? mem_cgroup_from_task+0xcb/0x1f0 [ 778.148862] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 778.153626] handle_mm_fault+0x53e/0xc80 [ 778.157674] ? __handle_mm_fault+0x44a0/0x44a0 [ 778.162248] ? find_vma+0x34/0x190 [ 778.165800] __do_page_fault+0x620/0xe50 [ 778.169858] ? mm_fault_error+0x380/0x380 [ 778.173996] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 778.178995] ? futex_wait_setup+0x281/0x410 [ 778.183313] do_page_fault+0xf6/0x8c0 [ 778.187108] ? vmalloc_sync_all+0x30/0x30 [ 778.191247] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 778.196782] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 778.201879] ? lock_acquire+0x1e4/0x540 [ 778.205848] ? __might_fault+0x12b/0x1e0 [ 778.209894] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 778.214730] page_fault+0x1e/0x30 [ 778.218176] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 778.223783] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 778.242919] RSP: 0018:ffff8801ce25f7f0 EFLAGS: 00010202 [ 778.248276] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 778.255535] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801ce25f890 [ 778.262792] RBP: ffff8801ce25f828 R08: ffffed0039c4bf13 R09: ffffed0039c4bf12 [ 778.270043] R10: ffffed0039c4bf12 R11: 0000000000000003 R12: 0000000020013004 [ 778.277300] R13: 0000000020013000 R14: ffff8801ce25f890 R15: 00007ffffffff000 [ 778.284741] ? _copy_from_user+0x10d/0x150 [ 778.288960] evdev_do_ioctl+0xb69/0x21a0 [ 778.293003] ? is_bpf_text_address+0xae/0x170 [ 778.297482] ? str_to_user+0x90/0x90 [ 778.301177] ? do_futex+0x249/0x27d0 [ 778.304873] ? kasan_check_read+0x11/0x20 [ 778.309003] ? rcu_is_watching+0x8c/0x150 [ 778.313131] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 778.317781] ? zap_class+0x740/0x740 [ 778.321669] ? exit_robust_list+0x290/0x290 [ 778.326059] ? lock_acquire+0x1e4/0x540 [ 778.330015] ? __fget+0x4ac/0x740 [ 778.333459] ? lock_downgrade+0x8f0/0x8f0 [ 778.337953] ? lock_release+0xa30/0xa30 [ 778.341907] ? save_stack+0xa9/0xd0 [ 778.345539] ? save_stack+0x43/0xd0 [ 778.349184] ? __fget+0x4d5/0x740 [ 778.352626] ? ksys_dup3+0x690/0x690 [ 778.356326] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 778.360893] evdev_ioctl_handler+0x144/0x1a0 [ 778.365291] evdev_ioctl+0x27/0x2e [ 778.368823] ? evdev_ioctl_compat+0x30/0x30 [ 778.373127] do_vfs_ioctl+0x1de/0x1720 [ 778.377011] ? ioctl_preallocate+0x300/0x300 [ 778.381406] ? __fget_light+0x2f7/0x440 [ 778.385373] ? fget_raw+0x20/0x20 [ 778.388815] ? trace_hardirqs_on+0xd/0x10 [ 778.392946] ? __x64_sys_futex+0x47f/0x6a0 [ 778.397176] ? do_futex+0x27d0/0x27d0 [ 778.400962] ? security_file_ioctl+0x94/0xc0 [ 778.405356] ksys_ioctl+0xa9/0xd0 [ 778.408791] __x64_sys_ioctl+0x73/0xb0 [ 778.412667] do_syscall_64+0x1b9/0x820 [ 778.416538] ? finish_task_switch+0x1d3/0x870 [ 778.421028] ? syscall_return_slowpath+0x5e0/0x5e0 [ 778.425941] ? syscall_return_slowpath+0x31d/0x5e0 [ 778.430872] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 778.435872] ? prepare_exit_to_usermode+0x291/0x3b0 [ 778.440872] ? perf_trace_sys_enter+0xb10/0xb10 [ 778.445523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 778.450355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 778.455525] RIP: 0033:0x455ab9 [ 778.458689] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 778.477815] RSP: 002b:00007f3b325f8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.485514] RAX: ffffffffffffffda RBX: 00007f3b325f96d4 RCX: 0000000000455ab9 [ 778.492767] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000014 [ 778.500015] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 778.507264] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 778.514518] R13: 00000000004bd1d2 R14: 00000000004cb9b0 R15: 0000000000000000 [ 778.537975] print_req_error: I/O error, dev loop0, sector 1664 03:35:02 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 03:35:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) 03:35:02 executing program 6: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xffffffffffffff3f, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) read(r0, &(0x7f0000000040)=""/58, 0xfc3c) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "edf5a227253b3f03"}}, 0x48}, 0x1}, 0x0) 03:35:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000001c0)={0x28, 0x2}, 0x28) 03:35:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000200000000000000593a5e0ecde7540100000002"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 03:35:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r2, &(0x7f0000458000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000def000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}}}}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @quote={{}, 0x0, &(0x7f00008e3000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @quote={{}, 0x0, &(0x7f00004f8000)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0xff9a) recvmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f0000002640)=@vsock, 0x10, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/196, 0xc4}], 0x1, &(0x7f0000002940)=""/154, 0x9a}}], 0x1, 0x0, &(0x7f0000002ac0)) [ 778.544281] Buffer I/O error on dev loop0, logical block 208, lost async page write [ 778.547442] print_req_error: I/O error, dev loop0, sector 0 03:35:02 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000100)=""/198, &(0x7f0000000040)=0xc6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0x40317, 0x0, 0x0, {0x1}, [@nested={0xc, 0x3, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') 03:35:02 executing program 6: r0 = getpgid(0x0) rt_sigqueueinfo(r0, 0x2, &(0x7f0000000040)={0x6, 0x7c, 0xc1, 0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@pppoe={0x0, 0x0, {0x0, @random}}, &(0x7f0000000100)=0x80, 0x80000) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r0) futex(&(0x7f000000cffc), 0x800000000007, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) [ 778.791935] netlink: 'syz-executor6': attribute type 3 has an invalid length. [ 778.801815] netlink: 'syz-executor6': attribute type 3 has an invalid length. 03:35:03 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x2d, @dev={0xfe, 0x80, [], 0x12}, 0x800}}, 0x446, 0xeb, 0x8, 0x1000, 0x56}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r1, 0x2) 03:35:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000005c0)=""/1, 0x1) sync_file_range(r2, 0x3572, 0xee, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCSETSF(r2, 0x5424, &(0x7f0000000000)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000040)=0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) socket$vsock_stream(0x28, 0x1, 0x0) [ 779.561419] print_req_error: I/O error, dev loop0, sector 4480 [ 779.564111] print_req_error: I/O error, dev loop0, sector 0 [ 779.567480] Buffer I/O error on dev loop0, logical block 560, lost async page write 03:35:03 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 03:35:04 executing program 6: r0 = getegid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getgroups(0x4, &(0x7f00000001c0)=[r0, r1, r2, r3]) socket$key(0xf, 0x3, 0x2) 03:35:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x3f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in={{0x2, 0x4e21, @rand_addr=0x4}}, [0x5, 0x4, 0x401, 0x100, 0xfffffffffffffff9, 0x0, 0x2, 0x7f, 0x20, 0x181, 0x2, 0x90e1, 0x7, 0x3, 0x7fff]}, &(0x7f0000000280)=0x100) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) r3 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="000604030000000000000000000000000000ffff0000000000000000000000000000000000000001fe80000000000000000000000000000078"], 0x38) socket$inet6(0xa, 0x1000000000002, 0x0) shutdown(r3, 0x1) 03:35:04 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x9) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socketpair(0x0, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='.]\x00'}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc0000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000680)={'ip6tnl0\x00', @random="c95f92247b1b"}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000006c0)={'team_slave_1\x00', @random="0300d8ebb0ff"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x28, &(0x7f0000000700)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={r4}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0), 0x4) recvmsg(r3, &(0x7f0000005640)={&(0x7f00000033c0)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000004600)=[{&(0x7f0000003440)=""/94, 0x5e}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/56, 0x38}, {&(0x7f0000004500)=""/202, 0xca}], 0x4, &(0x7f0000004640)=""/4096, 0x1000, 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000005680)={0x1b, 0x4, &(0x7f0000000800)=@raw=[@jmp={0x5, 0x8, 0xd, 0xb, 0x4, 0x2, 0xc}, @alu={0x7, 0xfff, 0x3, 0x3, 0x0, 0x0, 0x9}], &(0x7f0000000840)='syzkaller\x00', 0x10000, 0x98, &(0x7f0000000880)=""/152, 0x41100, 0x1, [], r5, 0xe}, 0x48) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000005700)=r2) openat$cgroup_ro(r3, &(0x7f0000005740)='memory.swap.current\x00', 0x0, 0x0) mkdir(&(0x7f00000057c0)='./file0\x00', 0x10) 03:35:04 executing program 7: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}}}, 0x26) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14) getpid() ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:35:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = getpgid(0x0) getpriority(0x1, r1) 03:35:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") setrlimit(0x7, &(0x7f0000a9cff8)) pipe2(&(0x7f0000000000), 0x0) 03:35:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x324, &(0x7f0000000100)=[{}]}, 0x10) 03:35:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f000000f000)={0x10}, 0x1e9, &(0x7f0000bd7000)={&(0x7f0000000180)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in=@loopback=0x7f000001, 0x0, 0x32}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8, 0x16}, @algo_aead={0x4c, 0x12, {{'rfc4309(rfc4309(rfc7539(xts(twofish),rmd320-generic)))\x00'}}}]}, 0xfe37}, 0x1}, 0x0) 03:35:04 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000040)="2e2f66696c6530000000000000000005b400", 0x0, 0xaaaaaaaaaaaab09, &(0x7f0000000480), 0x0, &(0x7f0000000000)={[{@jqfmt_vfsv0='jqfmt=vfsv0', 0x2c}, {@jdev={'jdev', 0x3d, "2e2f66696c6530000000000000000005b4"}, 0x2c}]}) 03:35:04 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) setpgid(r1, 0x0) 03:35:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x2c) 03:35:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x1c}}) close(r2) close(r1) 03:35:04 executing program 5: pipe(&(0x7f0000000040)={0x0, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2011, r2, 0x0) ioctl$sock_SIOCINQ(r0, 0xc0189436, &(0x7f0000000180)) 03:35:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000001580)=""/250, 0xfa}], 0x1) pread64(r0, &(0x7f0000df6000), 0x0, 0x0) read(r0, &(0x7f0000000040)=""/206, 0xce) 03:35:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001880)="d417735d", 0x4}], 0x1, &(0x7f0000001340)}}], 0x1, 0x0) [ 780.451183] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 780.558439] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 03:35:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000003b40)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) 03:35:04 executing program 7: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}}}, 0x26) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14) getpid() ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:35:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x1, 0x2, [{{0x2, 0x0, @loopback=0x7f000001}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}]}, 0x190) 03:35:04 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="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") 03:35:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') fstat(r1, &(0x7f0000003ec0)) 03:35:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000029c0)='./file0\x00', 0x6009, 0x1) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 03:35:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x1, 0x2, [{{0x2, 0x0, @loopback=0x7f000001}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}]}, 0x190) [ 780.931545] print_req_error: I/O error, dev loop5, sector 0 [ 780.949623] XFS (loop5): SB validate failed with error -5. [ 780.967651] print_req_error: I/O error, dev loop5, sector 0 [ 781.005814] print_req_error: I/O error, dev loop5, sector 0 03:35:05 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1011, r0, 0x80000000) 03:35:05 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="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") 03:35:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="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") 03:35:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000043cfff)=[{&(0x7f0000000000)="be", 0x1}], 0x1, &(0x7f0000000080)}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x20f}}], 0x30}], 0x1, 0x0) 03:35:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x1, 0x2, [{{0x2, 0x0, @loopback=0x7f000001}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}]}, 0x190) 03:35:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) socket$packet(0x11, 0x3, 0x300) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/124, 0x7c}, 0x0) 03:35:05 executing program 7: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}}}, 0x26) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14) getpid() ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:35:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000029c0)='./file0\x00', 0x6009, 0x1) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 03:35:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x1, 0x2, [{{0x2, 0x0, @loopback=0x7f000001}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}]}, 0x190) 03:35:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="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") 03:35:05 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="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") 03:35:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) 03:35:05 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="63707526267c7c000000010000039cd30e35cca01d3d0b0a1c60666f8dcc6d5c76fd2e9e09626b31deea1b0d3b8184872d58b62cc5b4223726b5797482fb1d83e6f82e2d6d0af3b128e9604401695c8d6c866c68a8fc80de2c4b74f41ac55d593b0906be2aaa26bd16785186f3d61afdd00427799b7ce4b70845ed9780731957b75bf0253e4d4df598be5e3d7121a60f70013200bbbe9d7235af657010520b26afa8247f3756ed4c4a34cf9040d5540acac2865fc1ce8ded62538de97482f4317a7772e66f88e5e3e7476378c091498dfde4bb73bf0a004b9ee55ba00a0f04a6b07345298ad052c3c12c62201c2349527a36fe4a7edad75fbe1fe586b1787526fbf2bfe87f9193ab05") 03:35:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="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") [ 781.406381] print_req_error: I/O error, dev loop5, sector 0 [ 781.412722] XFS (loop5): SB validate failed with error -5. 03:35:05 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 03:35:05 executing program 7: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}}}, 0x26) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14) getpid() ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:35:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000029c0)='./file0\x00', 0x6009, 0x1) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 03:35:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) [ 781.495032] device veth1_to_bond entered promiscuous mode 03:35:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="eb3c90ff0f000600000000000204010002000e7000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) [ 781.581044] device veth1_to_bond left promiscuous mode [ 781.711837] FAT-fs (loop6): Directory bread(block 112) failed [ 781.718084] XFS (loop5): SB validate failed with error -5. [ 781.726222] print_req_error: 2 callbacks suppressed [ 781.726231] print_req_error: I/O error, dev loop5, sector 0 [ 781.737178] FAT-fs (loop6): Directory bread(block 113) failed [ 781.743749] FAT-fs (loop6): Directory bread(block 114) failed [ 781.750717] FAT-fs (loop6): Directory bread(block 115) failed [ 781.756938] FAT-fs (loop6): Directory bread(block 116) failed [ 781.763196] FAT-fs (loop6): Directory bread(block 117) failed [ 781.769659] FAT-fs (loop6): Directory bread(block 118) failed [ 781.776234] FAT-fs (loop6): Directory bread(block 119) failed [ 781.782437] FAT-fs (loop6): Directory bread(block 120) failed [ 781.788527] FAT-fs (loop6): Directory bread(block 121) failed [ 781.870545] attempt to access beyond end of device [ 781.875698] loop6: rw=1, want=296, limit=112 03:35:06 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/21}, 0x18) 03:35:06 executing program 4: unshare(0x40000000) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000780)={0x0, 0x80000000000001}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) 03:35:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) socket$packet(0x11, 0x3, 0x300) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/124, 0x7c}, 0x0) 03:35:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14}}]}}}]}, 0x40}, 0x1}, 0x0) 03:35:06 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r1, 0x80000000000089e0, &(0x7f0000000040)) 03:35:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) 03:35:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000029c0)='./file0\x00', 0x6009, 0x1) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 03:35:06 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75e50000bfa100000000000007010000f8ffffffb702000008000000bf130000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000010000)={r0, 0x0, 0xe, 0x100, &(0x7f0000020000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140)=""/256}, 0x28) 03:35:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 782.117008] IPVS: ftp: loaded support on port[0] = 21 03:35:06 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 03:35:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14}}]}}}]}, 0x40}, 0x1}, 0x0) 03:35:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) [ 782.145394] device veth1_to_bond entered promiscuous mode [ 782.177057] device veth1_to_bond left promiscuous mode 03:35:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) socket$packet(0x11, 0x3, 0x300) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/124, 0x7c}, 0x0) 03:35:06 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`?', 0x30, 0x3a, 0xffffffffffffffff, @local={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x2, 0xbf00], {0x0, 0x6, "c10200", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0xfc00}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 782.226824] print_req_error: I/O error, dev loop5, sector 0 [ 782.240871] XFS (loop5): SB validate failed with error -5. [ 782.246821] IPVS: ftp: loaded support on port[0] = 21 [ 782.263263] print_req_error: I/O error, dev loop5, sector 0 03:35:06 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x105d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2, 0xe8030000}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 03:35:06 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x9, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 03:35:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14}}]}}}]}, 0x40}, 0x1}, 0x0) 03:35:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) 03:35:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f562070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 03:35:06 executing program 1: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ftruncate(r0, 0x8) ftruncate(r0, 0x0) [ 782.403433] device veth1_to_bond entered promiscuous mode 03:35:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="8859c9fa2b52af5fac6bb50c3e381cd353b6edc75ed9dd594eb8193f188b0e6fd01b2ddda3e0a00bc7fed2d822ea737e1586531ff073a8519961d54e50a58ab9e0b5389a", 0x44, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246) [ 782.453612] device veth1_to_bond left promiscuous mode 03:35:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) socket$packet(0x11, 0x3, 0x300) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/124, 0x7c}, 0x0) 03:35:06 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000180)={@empty, @multicast1=0xe0000001}, 0x7) 03:35:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1}, {0x391, 0x2, [{0x51, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x94}, 0x1}, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f00000000c0)) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000340)) 03:35:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14}}]}}}]}, 0x40}, 0x1}, 0x0) 03:35:06 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x9, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 03:35:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x9, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 03:35:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='^vmnet1posix_acl_access+vboxnet1\x00', 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='\x00', 0x1, 0x0) flistxattr(r0, &(0x7f0000000200)=""/26, 0x8973f473ee7fadf9) 03:35:06 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x70, &(0x7f0000018000)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x8c) 03:35:06 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000073]}) [ 782.682129] netlink: 120 bytes leftover after parsing attributes in process `syz-executor2'. [ 782.696622] device veth1_to_bond entered promiscuous mode 03:35:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x9, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 782.733738] netlink: 120 bytes leftover after parsing attributes in process `syz-executor2'. [ 782.750532] device veth1_to_bond left promiscuous mode 03:35:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) dup2(r0, r1) 03:35:06 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x9, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 03:35:06 executing program 0: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_OWNER(r3, 0xaf02, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000016c40)={'ip6gre0\x00'}) close(r1) 03:35:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@nat={'%at\x00', 0x19, 0x1, 0x1e0, [0x20000380, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, &(0x7f0000000040), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'team_slave_0\x00', 'bridge_slave_0\x00', 'bond_slave_1\x00', 'veth1_to_bridge\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xe0, 0x12f, 0x150, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @snat={'snat\x00', 0x10, {{@random="5f5a1fad6899"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x258) 03:35:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x1000000000005) write$binfmt_elf32(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) tkill(r1, 0x1000000000016) 03:35:07 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 03:35:07 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x9, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 03:35:07 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x9, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 782.973201] kernel msg: ebtables bug: please report to author: target size too small 03:35:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) dup2(r0, r1) 03:35:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000181, 0x0) 03:35:07 executing program 1: signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x1, 0x0) 03:35:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005e1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="cb082fb2f00f1bf21327eada9f1905000800000036754f79d46214000000d1c491b5371b8071d6fdba5edfcd519d5e3107be46ec5e25083e44425c0fbaf705005e5caac3579566f32c9ea2023af85cadc90293f653afc773808e960c2502802a48fd69db90eaaf6725fa175ed29fdcf231a9bacdefdf63e8f90b07c6c4ee0678c349ab7de9a788e9669a873149b4746d91008af6b69a8974ace0b2ef817013d54e67f2ddbd55a3ba80334a419843665efad0e99e91530086", 0xb8) 03:35:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) dup2(r0, r1) 03:35:08 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="1db510774375f47a05942c459e810c73fdf5623fb1eea51ac1e04c0907bc6c8326e016c477b652f66bcff5828246a8c69e7a40e2aa1197a1d13cb6162194e50a799882e500", 0x45, r0) keyctl$search(0xa, r0, &(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0) 03:35:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 03:35:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x4, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr, @multicast2=0xe0000002}, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x4, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00'}, 0x18) 03:35:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) dup2(r0, r1) 03:35:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000003c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ab9b3f8683ecf89dee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca9fcf03cbf82bd13534737339245d3c70641be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf3ad8882947ffa1fb4c050727beb12c57e06ff590000000000000000000000000000008924578ad49ea1144c7448d640aa88a66a71b77d73a924ff027fdcb550161653d4cb57088385248286f5be9d8766c70c29e6f5063dfe74a1b0b52079159048210b4d271ac94c889b063ca34a09579af03631f128e6dd2c966daecd7c6f7e0f4ebcaf80250cfab07184838078c71d809d06dc0bac75db814525d1d1acaf4cb6f4890f397382ae636697f688094e38db5c22770f53076c630df9bb4c149189ffa975f52087311c5baafc11c90bdc25fc803b71153ddc3995b2df49cdd784bc5bea40861070dadb395e85c93cdfa08e") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x4) ioctl$SG_GET_NUM_WAITING(r1, 0x40086610, &(0x7f0000000000)) 03:35:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x1000000000005) write$binfmt_elf32(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) tkill(r1, 0x1000000000016) 03:35:08 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1e, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0xfffffffffffffe0f) 03:35:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0x23c, &(0x7f0000015ff0)={&(0x7f0000013000)={0x2c, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x14, @u32=0xffffffffffffffff}]}, 0x2c}, 0x1}, 0x0) 03:35:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) [ 783.997666] EXT4-fs (sda1): resizing filesystem from 524032 to 2 blocks [ 784.004519] EXT4-fs warning (device sda1): ext4_resize_fs:1929: can't shrink FS - resize aborted [ 784.005484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 03:35:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000004c0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000007c0)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) 03:35:08 executing program 0: r0 = gettid() setpgid(r0, 0x0) 03:35:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 784.095172] EXT4-fs (sda1): resizing filesystem from 524032 to 2 blocks [ 784.102028] EXT4-fs warning (device sda1): ext4_resize_fs:1929: can't shrink FS - resize aborted 03:35:08 executing program 4: r0 = getpid() ptrace(0x10, r0) 03:35:08 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ab"], 0x1) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r1, 0x0, 0x7fffff29) [ 784.242463] binder: 26719:26723 transaction failed 29189/-22, size 0-0 line 2852 [ 784.271096] binder: 26719:26723 transaction failed 29189/-22, size 0-0 line 2852 03:35:08 executing program 7: r0 = socket(0x11, 0x3, 0xffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="6e65742f707479706500bf9252008aed083c5cdcc60cad9772a84913a46fe5bce76b82d4651707c5855a83350009648972ff0cb654a2ac928c666b26f5f76490bedeb1ebdd66a69a2a35881acec0a684bec684de1cfa3e8a90d90d7d5233397d4974b3adc4e7d52e9bff13558b000000000000000000000050ecc7e7b9fd83fc7c82c818af5114b59a86c9e022fce88012efd4935c01238deece9082dd983b6af942abb00cc47ba07a5a847f5b160d8a6550878f6579e387057a58b8252728108fb52adb6120edcb") sendfile(r0, r1, &(0x7f00000001c0)=0x40000, 0x80000003) 03:35:08 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 03:35:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 03:35:08 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) unshare(0x400) ftruncate(r0, 0x0) 03:35:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 784.288706] binder: undelivered TRANSACTION_ERROR: 29189 [ 784.300451] binder: undelivered TRANSACTION_ERROR: 29189 03:35:08 executing program 0: getgroups(0x1c1, &(0x7f0000762000)) 03:35:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14}}]}, 0x2c}, 0x1}, 0x0) 03:35:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x1000000000005) write$binfmt_elf32(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) tkill(r1, 0x1000000000016) 03:35:08 executing program 7: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x7fffffffefff) 03:35:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 03:35:08 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xc0}, 0x1}, 0x0) 03:35:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000004c0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000007c0)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) 03:35:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x111, 0x9}}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x3, 0xb8, [], 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/184}, &(0x7f00000004c0)=0x78) ioctl(r2, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) r4 = socket$inet(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x1c) 03:35:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000080)) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) 03:35:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000015e15)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0xf5ffffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0xfffffff5], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x58], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 03:35:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 03:35:09 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f0000000180)=0x3a) 03:35:09 executing program 7: unshare(0x40600) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 03:35:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000080)) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) 03:35:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mbind(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000000)=0xc977dba, 0x424, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080), 0x5, 0x4) [ 785.320412] sock: sock_set_timeout: `syz-executor4' (pid 26795) tries to set negative timeout [ 785.341906] sock: sock_set_timeout: `syz-executor4' (pid 26808) tries to set negative timeout 03:35:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 03:35:09 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x1000000000005) write$binfmt_elf32(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) tkill(r1, 0x1000000000016) 03:35:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000080)) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) 03:35:09 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x204db6558f819705, 0x0, 0x0, {0x2}}, 0x1c}, 0x1}, 0x0) 03:35:09 executing program 5: r0 = timerfd_create(0x9, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x5}}, &(0x7f0000002000)) 03:35:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000004c0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000007c0)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) 03:35:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2c}, 0x10) 03:35:10 executing program 1: socketpair$inet(0x1e, 0x802, 0x0, &(0x7f0000000040)={0x0}) sendmsg$key(r0, &(0x7f0000f22000)={0x0, 0x0, &(0x7f0000f22000)={&(0x7f00001d7000)={0x1e, 0x0, 0x401, 0x0, 0x1}, 0x2ac4}, 0x1}, 0x0) 03:35:10 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="73623d307830303013"]) 03:35:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000080)) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) 03:35:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="3bff20"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x10000005d) write$binfmt_script(r0, &(0x7f0000001b40)={'#! ', './file0', [], 0xa, "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"}, 0x801) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') truncate(&(0x7f0000000000)='./file0/file1\x00', 0x201f) 03:35:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x64}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:35:10 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) clone(0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000e9b000), &(0x7f0000000000)) [ 786.359848] EXT4-fs: Invalid sb specification: sb=0x000,errors=continue [ 786.381906] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 03:35:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="3bff20"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:10 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 786.425924] EXT4-fs: Invalid sb specification: sb=0x000,errors=continue [ 786.440813] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 03:35:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)="2f67726f75702e7374610000aff3e0000000001ce21ff1e9c681c40f5e9dbf747b455ebaadcbf6114dd7b7bc96d702d2bd63f0ec8fc2e3729cfafa0968523b9a250b3ae506a7d509783f5069858179dbe916038dc21f1ed88711f85e4debbf387e58872674c71fa4a2f76dbb092066cd703bf48088b50dd73d1076cc9b986a5d69d9", 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x401c5820, 0x800003) 03:35:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fadvise64(r1, 0x0, 0x20007, 0x4) 03:35:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="3bff20"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:10 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) [ 786.679514] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1065) [ 786.687533] FAT-fs (loop1): Filesystem has been set read-only [ 786.710461] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1065) 03:35:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000004c0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000007c0)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) 03:35:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) sendto$inet6(r0, &(0x7f00001e2000), 0x0, 0x0, &(0x7f0000f14000)={0xa, 0x4e21}, 0x1c) 03:35:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x1, &(0x7f0000000000)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0xa3020, 0x0) 03:35:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr, @multicast2=0xe0000002}, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000003c0)) dup3(r1, r2, 0x0) 03:35:11 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'nr0\x00'}}, 0x1e) 03:35:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="3bff20"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 787.372783] binder: BINDER_SET_CONTEXT_MGR already set [ 787.381670] binder: 26896:26935 ioctl 40046207 0 returned -16 [ 787.395508] binder_alloc: 26896: binder_alloc_buf, no vma [ 787.401380] binder: 26896:26900 transaction failed 29189/-3, size 0-0 line 2967 03:35:11 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'nr0\x00'}}, 0x1e) 03:35:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040), 0x4) 03:35:11 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002e00)="ac", 0x1}], 0x1, &(0x7f0000000040)}}, {{&(0x7f0000002f80)=@in6={0xa}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003340)="bd", 0x1}], 0x1, &(0x7f0000003480)}}], 0x2, 0x0) 03:35:11 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) clone(0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000e9b000), &(0x7f0000000000)) 03:35:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4000000000000087) connect$inet6(r0, &(0x7f0000000200)={0xa}, 0x1c) io_setup(0x101, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001ec0)="5ba81c8b", 0x4}]) [ 787.496895] binder: undelivered TRANSACTION_ERROR: 29189 [ 787.512136] binder: send failed reply for transaction 222 to 26896:26900 [ 787.520710] binder: undelivered TRANSACTION_ERROR: 29189 03:35:11 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 03:35:11 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x10d, 0xa, &(0x7f0000000240)={0x7}, 0xc) 03:35:11 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./file0\x00', 0x0) 03:35:11 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'nr0\x00'}}, 0x1e) 03:35:11 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'nr0\x00'}}, 0x1e) [ 787.785542] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000203) [ 787.792820] FAT-fs (loop1): Filesystem has been set read-only 03:35:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff84}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 03:35:12 executing program 5: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) 03:35:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0x405c5503, &(0x7f0000000380)) 03:35:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='numa_maps\x00') unlink(&(0x7f0000000040)='./bus\x00') readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 03:35:12 executing program 3: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000240)) 03:35:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e26, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x0, 0x20}, &(0x7f0000000340)=0x18) 03:35:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:12 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000002400)='veno\x00', 0x5) sendto$inet(r1, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r3 = dup2(r0, r0) readv(r3, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/109, 0x6d}], 0x1) sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) 03:35:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0]) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000300)}}], 0xc5, 0x0) [ 788.554161] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop3 [ 788.579593] binder: release 26964:26973 transaction 225 out, still active 03:35:12 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) clone(0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000e9b000), &(0x7f0000000000)) 03:35:12 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 03:35:12 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0), &(0x7f0000000340)=0x14) close(r0) finit_module(0xffffffffffffffff, &(0x7f00000001c0)='!self\x00', 0x3) [ 788.624898] binder: send failed reply for transaction 225, target dead 03:35:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0]) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000300)}}], 0xc5, 0x0) 03:35:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:12 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0), &(0x7f0000000340)=0x14) close(r0) finit_module(0xffffffffffffffff, &(0x7f00000001c0)='!self\x00', 0x3) 03:35:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0]) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000300)}}], 0xc5, 0x0) 03:35:13 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff0e, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00084000998681ff130200001200100000030100000200000001000084811f4ce10000001e001e00000000000010ec0302008100526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000000040)) 03:35:13 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0), &(0x7f0000000340)=0x14) close(r0) finit_module(0xffffffffffffffff, &(0x7f00000001c0)='!self\x00', 0x3) 03:35:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0]) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000300)}}], 0xc5, 0x0) 03:35:13 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 789.525699] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 789.539077] REISERFS (device loop5): using ordered data mode [ 789.545066] reiserfs: using flush barriers 03:35:13 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x17}) 03:35:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000010000002500000000000000"], 0x14}, 0x0) 03:35:13 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0), &(0x7f0000000340)=0x14) close(r0) finit_module(0xffffffffffffffff, &(0x7f00000001c0)='!self\x00', 0x3) 03:35:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102c}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) [ 789.587624] REISERFS warning (device loop5): sh-458 journal_init_dev: cannot init journal device 'unknown-block(259,0)': -6 [ 789.599084] REISERFS warning (device loop5): sh-462 journal_init: unable to initialize journal device [ 789.621500] REISERFS warning (device loop5): sh-2022 reiserfs_fill_super: unable to initialize journal space 03:35:13 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) clone(0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000e9b000), &(0x7f0000000000)) 03:35:13 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 03:35:13 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) [ 789.637391] binder: release 27051:27056 transaction 227 out, still active [ 789.657114] binder: send failed reply for transaction 227, target dead [ 789.673093] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 789.682214] REISERFS (device loop5): using ordered data mode 03:35:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="d91800000000000067"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xffff8000, 0x2f}, [@ldst={0x3fd}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 789.688116] reiserfs: using flush barriers [ 789.693170] REISERFS warning (device loop5): sh-458 journal_init_dev: cannot init journal device 'unknown-block(259,0)': -6 [ 789.704708] REISERFS warning (device loop5): sh-462 journal_init: unable to initialize journal device [ 789.714512] REISERFS warning (device loop5): sh-2022 reiserfs_fill_super: unable to initialize journal space 03:35:13 executing program 4: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000600)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x2) fallocate(r1, 0x3, 0x0, 0xffff) 03:35:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="f20fbcbd0080000066b81f008ec8c4e205bcab27000000b8d13200000f23d80f21f835000000900f23f8c4e2fdb80d0b00000066baf80cb8bc068586ef66bafc0cec660f38820265f2af0fd2c9b8000001000f23c80f21f8350000b0000f23f8", 0x60}], 0x1, 0x80000037, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {0x0, 0x0, 0x0, 0x347, 0x5, 0x0, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:14 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000009000/0x2000)=nil, 0x2000) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 03:35:14 executing program 2: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000f9dff4)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00004c4fe4)=[@enter_looper={0x630c}], 0x29a, 0x0, &(0x7f0000fedffe)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:14 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001080)={0x0, @in6={{0xa}}, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x40}, 0x98) 03:35:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000000140)="580000001400190000000080040d8c562806f0e67445ae9c85106a9643c218fe59a2e04a03ca8164263e800000000a215a0004fbf50dfff90003ed5e0000000000221f100001000700f8ffff0000ec6b0f536e0000000000", 0x58}], 0x1) [ 790.087517] *** Guest State *** [ 790.090919] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 790.099823] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 790.108717] CR3 = 0x0000000000000000 [ 790.112481] RSP = 0x0000000000000f80 RIP = 0x0000000000008006 [ 790.118521] RFLAGS=0x00000046 DR7 = 0x0000000000000400 [ 790.124528] binder: BINDER_SET_CONTEXT_MGR already set [ 790.124537] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 03:35:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 790.124553] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.136764] binder: 27149:27153 ioctl 40046207 0 returned -16 [ 790.144756] DS: sel=0x0000, attr=0x04087, limit=0x00000000, base=0x0000000000000000 [ 790.144773] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.144789] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.144804] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.144819] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.144830] GDTR: limit=0x00000000, base=0x0000000000000000 [ 790.144850] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.144861] IDTR: limit=0x00000000, base=0x0000000000000000 [ 790.144877] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.144886] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 790.144895] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 03:35:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) dup3(r3, r2, 0x0) [ 790.144903] Interruptibility = 00000008 ActivityState = 00000000 [ 790.144914] *** Host State *** [ 790.246718] RIP = 0xffffffff811f4694 RSP = 0xffff880199d6f350 [ 790.252754] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 790.259211] FSBase=00007f114a354700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 790.267067] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 790.272998] CR0=0000000080050033 CR3=00000001cad4a000 CR4=00000000001426e0 [ 790.280068] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 03:35:14 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xa, @rand_addr}]}}}]}, 0x38}, 0x1}, 0x0) [ 790.286787] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 790.292902] *** Control State *** [ 790.296379] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 790.303082] EntryControls=0000d1ff ExitControls=0023efff [ 790.308604] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 790.315590] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 790.322337] VMExit: intr_info=00000000 errcode=00000000 ilen=00000006 [ 790.328967] reason=80000021 qualification=0000000000000000 03:35:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000002c0)="366536f26f660f22c066b871e5ee230f23c80f21f86635040030000f23f80f38f0b7cedb66b9ab0a000066b80300000066ba000000000f300f01cf66b8b4c800000f23d00f21f866353000000f0f23f8ba410066ed66b9be09000066b80000000066ba008000000f30f30f001e0000", 0x6f}], 0x1, 0x24, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") fanotify_init(0x20, 0x0) [ 790.335336] IDTVectoring: info=00000000 errcode=00000000 [ 790.340842] TSC Offset = 0xfffffe55eeca92a0 [ 790.345203] EPT pointer = 0x000000019521301e 03:35:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000500)=""/65, 0x409}, {&(0x7f0000000200)=""/250, 0x4}], 0x1000000000000238, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e1d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 790.482874] netlink: 'syz-executor7': attribute type 10 has an invalid length. [ 790.721074] *** Guest State *** [ 790.724484] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 790.733361] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 790.742245] CR3 = 0x0000000000000000 [ 790.745998] RSP = 0x0000000000000f80 RIP = 0x0000000000008006 [ 790.752013] RFLAGS=0x00000046 DR7 = 0x0000000000000400 [ 790.758014] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 790.764706] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.772699] DS: sel=0x0000, attr=0x04087, limit=0x00000000, base=0x0000000000000000 [ 790.780692] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.788715] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.796717] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.804719] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.812823] GDTR: limit=0x00000000, base=0x0000000000000000 [ 790.820840] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.828827] IDTR: limit=0x00000000, base=0x0000000000000000 [ 790.837315] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 790.845512] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 790.851944] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 790.859419] Interruptibility = 00000008 ActivityState = 00000000 [ 790.865671] *** Host State *** [ 790.868914] RIP = 0xffffffff811f4694 RSP = 0xffff88018f72f350 [ 790.874921] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 790.881360] FSBase=00007f114a312700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 790.889174] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 790.895091] CR0=0000000080050033 CR3=00000001cad4a000 CR4=00000000001426f0 [ 790.902255] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87a01380 [ 790.908977] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 790.915066] *** Control State *** [ 790.918578] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 790.925262] EntryControls=0000d1ff ExitControls=0023efff [ 790.930745] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 790.937700] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 790.944402] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 790.950997] reason=80000021 qualification=0000000000000000 [ 790.957363] IDTVectoring: info=00000000 errcode=00000000 [ 790.962831] TSC Offset = 0xfffffe55eeca92a0 [ 790.967265] EPT pointer = 0x000000019521301e [ 791.025562] binder_alloc: binder_alloc_mmap_handler: 27149 20000000-20002000 already mapped failed -16 [ 791.037900] binder: release 27123:27129 transaction 229 out, still active [ 791.040367] binder: BINDER_SET_CONTEXT_MGR already set [ 791.055468] binder: send failed reply for transaction 229, target dead [ 791.056598] binder: 27149:27191 ioctl 40046207 0 returned -16 [ 791.062360] binder: send failed reply for transaction 230 to 27149:27188 03:35:15 executing program 4: mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)) 03:35:15 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r0, 0x945efa8d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) close(r1) 03:35:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mknod(&(0x7f0000000540)="2e2f66696c65302f2e696c2e2efe00", 0xc000, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount$9p_unix(&(0x7f0000000040)="2e2f66696c65302f2e696c2e2efe00", &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000340)={'trans=unix,'}) 03:35:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000500)=""/65, 0x409}, {&(0x7f0000000200)=""/250, 0x4}], 0x1000000000000238, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e1d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:15 executing program 6: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000480)='bdev-bdevmime_typecpuset\x00', 0x0) dup2(r1, r0) 03:35:15 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="82780000260f017731f3d87e0b0f20e06635000020000f22e066b9800000c00f326635002000000f30640f02d766b8008000000f23d80f21f86635400000f00f23f8db13b85f078ee82e0f01cf", 0x4d}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1, 0x4b564d02]}) 03:35:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="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", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x100000001, 0x12) write$cgroup_int(r1, &(0x7f0000000000), 0x12) [ 791.073256] binder: 27149:27191 transaction failed 29189/-22, size 0-0 line 2852 [ 791.175446] 9pnet: p9_fd_create_unix (27197): problem connecting socket: ./file0/.il..þ: -2 [ 791.193873] 9pnet: p9_fd_create_unix (27206): problem connecting socket: ./file0/.il..þ: -2 [ 791.219054] binder: undelivered TRANSACTION_ERROR: 29189 03:35:15 executing program 2: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000f9dff4)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00004c4fe4)=[@enter_looper={0x630c}], 0x29a, 0x0, &(0x7f0000fedffe)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:15 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x4}, 0x1c) 03:35:15 executing program 7: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x32, 0x0, @dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x53e]}) 03:35:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000500)=""/65, 0x409}, {&(0x7f0000000200)=""/250, 0x4}], 0x1000000000000238, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e1d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x0) 03:35:15 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) [ 791.236424] binder: undelivered TRANSACTION_COMPLETE [ 791.241630] binder: undelivered TRANSACTION_ERROR: 29189 03:35:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001600)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128l)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x139f}], 0x1, &(0x7f0000fb3fa9)=""/87, 0xfffffffffffffce7}, 0x17f) 03:35:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x6, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 'ip6_vti0\x00'}) 03:35:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x8b03, 0x3, 0x0, 0x1d}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r2, 0x5412, &(0x7f00000000c0)={0xd}) 03:35:15 executing program 7: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffad, 0x0, 0x2}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 03:35:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000500)=""/65, 0x409}, {&(0x7f0000000200)=""/250, 0x4}], 0x1000000000000238, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e1d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) socket$inet_udp(0x2, 0x2, 0x0) 03:35:15 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x30, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x10, 0x2b, [@nested={0xc, 0x3, [@typed={0x8, 0x0, @fd}]}]}]}, 0x30}, 0x1}, 0x0) 03:35:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$kcm(0x29, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000280), 0x1f) 03:35:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000d39000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) sendto(r1, &(0x7f0000000000)="b1", 0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000070b000)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000d90fa7)='u', 0x1}], 0x1, &(0x7f0000275000)}}], 0x1, 0x0) r2 = accept(r0, &(0x7f0000001700)=@alg, &(0x7f0000001780)=0x80) shutdown(r2, 0x1) [ 791.539490] IPVS: ftp: loaded support on port[0] = 21 03:35:15 executing program 7: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0xc0ed0000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) [ 791.642795] netlink: 'syz-executor6': attribute type 3 has an invalid length. [ 791.682908] netlink: 'syz-executor6': attribute type 3 has an invalid length. [ 791.691895] IPVS: ftp: loaded support on port[0] = 21 03:35:16 executing program 2: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000f9dff4)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00004c4fe4)=[@enter_looper={0x630c}], 0x29a, 0x0, &(0x7f0000fedffe)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000380)=@known='security.capability\x00', &(0x7f00000003c0)=""/220, 0xdc) 03:35:16 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0xc}) 03:35:16 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 03:35:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x18, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) 03:35:16 executing program 7: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0xc0ed0000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 03:35:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000100), 0x10) [ 792.215807] binder: release 27226:27287 transaction 233 out, still active [ 792.222839] binder: undelivered TRANSACTION_COMPLETE [ 792.232618] binder: release 27226:27235 transaction 233 in, still active [ 792.256393] binder: send failed reply for transaction 233, target dead 03:35:16 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000001c0)=""/101) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:35:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x29, 0x82d, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) 03:35:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44a72107130ee55d660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a"}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f00000026c0)=[{&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c95d9d47e4635c995b18ba766a818648cd01f2e3825bee3eb373769cb2c85d7f0bb3aff58d31b0352895601ee239883abfad45a0e8c0f59bf3b52edf3500bb"}, 0x60, &(0x7f0000002600), 0x5f}], 0x4924924924926b2, 0x0) 03:35:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000380)=@known='security.capability\x00', &(0x7f00000003c0)=""/220, 0xdc) 03:35:16 executing program 7: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0xc0ed0000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 03:35:16 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0xc}) 03:35:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14}, 0xfff1}, 0x1}, 0x0) 03:35:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) dup2(r0, r1) dup2(r0, r2) 03:35:16 executing program 5: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x1400) 03:35:17 executing program 2: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000f9dff4)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00004c4fe4)=[@enter_looper={0x630c}], 0x29a, 0x0, &(0x7f0000fedffe)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 03:35:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000380)=@known='security.capability\x00', &(0x7f00000003c0)=""/220, 0xdc) 03:35:17 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0xc}) 03:35:17 executing program 7: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0xc0ed0000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 03:35:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14}, 0xfff1}, 0x1}, 0x0) 03:35:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000004300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000042c0)={&(0x7f0000000b40)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4, 0x2}}}]}, 0x38}, 0x1}, 0x0) 03:35:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) dup2(r0, r1) dup2(r0, r2) 03:35:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) dup2(r0, r1) dup2(r0, r2) [ 793.289408] binder: release 27305:27346 transaction 235 out, still active [ 793.296410] binder: undelivered TRANSACTION_COMPLETE [ 793.309415] binder: release 27305:27306 transaction 235 in, still active [ 793.337329] binder: send failed reply for transaction 235, target dead 03:35:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000380)=@known='security.capability\x00', &(0x7f00000003c0)=""/220, 0xdc) 03:35:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14}, 0xfff1}, 0x1}, 0x0) 03:35:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) dup2(r0, r1) dup2(r0, r2) 03:35:17 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0xc}) 03:35:17 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, &(0x7f0000000200), 0xd1b2, 0xfffffffffffffffe) 03:35:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) dup2(r0, r1) dup2(r0, r2) 03:35:17 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{&(0x7f00000055c0)=@ax25, 0x80, &(0x7f0000005880), 0x0, &(0x7f00000058c0)=""/4096, 0x1000}}], 0x3d3, 0x0, &(0x7f0000006b00)={0x77359400}) 03:35:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) dup2(r0, r1) dup2(r0, r2) 03:35:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) dup2(r0, r1) dup2(r0, r2) 03:35:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) write(r0, &(0x7f00000001c0), 0xffe1) 03:35:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14}, 0xfff1}, 0x1}, 0x0) 03:35:18 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendfile(r1, r1, 0x0, 0x2) 03:35:18 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)}, {&(0x7f0000000240)="362b0c299e55f3a673e0093741e7e4bdee1b42b366cfedb90f48f4841967320f53a9df6338750d67485743db7ebc55209115a232cab090", 0x37}, {&(0x7f0000000380)="0b8b80fc11bdb204ba323066de3f5516ccd9c51d010b48126bda7e80fdfc222a15a50a0f7b5fd546575ab58ea39dec18102b7bd13e56fa74909293def9936acb043cf84517c32322aee7262147ee53ea79f1b8aaf6d61a36a25e11196506dcf1469acd9c91ace7506c0ad7b9d6876f7183f9966d2df7ea197cc1955bb49e3759ec7fb4437c617a8d1b4938eda6850a3c96c9d69a724e3f65fdb74454853440dd3e8c08f46a0789911da27692fb52df38b950ac24b36293b516339f87480f8cab9a2276dfa42725cf", 0xc8}, {&(0x7f0000000480)="d369d87620578fd0171611e06796f6524a7024e96f65dc6e0042b0b58e48567cafa10f925227839be9e3b99adbd9cfe8ff0ed4a59ef5ab4c02a68d9a2b6b4c07d0ba9da7efcf995857380f873ba96f809ecebfc33a9a11484ea1b3e8d996c9", 0x5f}, {&(0x7f0000000540)="e552563b576e734c8bedaf7e06fdcfc5ab50c667df45d094e0d127738a8a976979d21c1407b1e8abb165ef665eb2005efc31ad45e6e5392d0e5a8bad630836a0b4b78036be8c1108c5f875b69d07b702857b245ff880f6fb382806fa83b94621a2afc46050f00f1f48f53eb5fcfdba3ffa3d13f1b57147c71a7bf49edcaa0428b55512ae4e228cb23eb6e46b0a2535cf49febba3f87a476aeaa6559bb1ef48683fe5571f0fde0d2ee8fa813ec172414c11afdf07eed1a73e4f74af00bba524eb3ac37d8fd1a1c020c1f10cb509f901b2a46286494145dce8a984d20a4ede361d001331adb957a466158547e6", 0xec}], 0x5) 03:35:18 executing program 6: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000200)={[{@fat=@flush='flush', 0x2c}]}) 03:35:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000001c0), 0x10) [ 794.249412] binder: release 27364:27402 transaction 237 out, still active [ 794.256428] binder: undelivered TRANSACTION_COMPLETE [ 794.265709] binder: release 27364:27367 transaction 237 in, still active [ 794.290372] binder: send failed reply for transaction 237, target dead 03:35:18 executing program 7: socketpair$unix(0x1, 0x801, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r1 = inotify_init1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) open$dir(&(0x7f00000000c0)='./file0\x00', 0x185842, 0x0) 03:35:18 executing program 5: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000400)={{}, 'port0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x200000000000029}, 0x2a7) [ 794.340632] FAT-fs (loop6): Directory bread(block 2569) failed 03:35:18 executing program 1: mmap(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x0, 0xd132, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00007cd000/0x4000)=nil) sigaltstack(&(0x7f00007c9000/0x8000)=nil, &(0x7f0000000180)) 03:35:18 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="01", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001a40)={&(0x7f0000001640)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x32, &(0x7f0000001a00)}, 0x122) 03:35:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000001300)='/dev/snd/pcmC#D#p\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 03:35:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x23, &(0x7f0000000000), 0x8) close(r2) close(r1) [ 794.393236] FAT-fs (loop6): Directory bread(block 2570) failed [ 794.427486] FAT-fs (loop6): Directory bread(block 2571) failed 03:35:18 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000b00)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) [ 794.438482] FAT-fs (loop6): Directory bread(block 2572) failed [ 794.447443] FAT-fs (loop6): Directory bread(block 2573) failed [ 794.463324] FAT-fs (loop6): Directory bread(block 2574) failed [ 794.469718] FAT-fs (loop6): Directory bread(block 2575) failed [ 794.480889] FAT-fs (loop6): Directory bread(block 2576) failed [ 794.486987] FAT-fs (loop6): Directory bread(block 2577) failed 03:35:18 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000001c0), 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 794.493694] FAT-fs (loop6): Directory bread(block 2578) failed 03:35:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{@uni_xlateno='uni_xlate=0', 0x2c}]}) 03:35:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="ee67727eb44dadf904bc948611c1d88799f6a496c0a29913233e16013d9eb25c3e08f2f53beecbf406eb736e41b52d1a72834dddf0e50aba616ff2c7a2e169cf516daa333075e1c094ce79eaf9d14572a901d83f9affab0f5d8a1900db18f7b98d4f905900d48919126d1ca35935347bd4d026987879f09cb519b295c506d5a83b04c42233353cd1b114097d245ea7cb1ec77364a6c38dd4d8291a9c65499a6b84e6", 0xa2}], 0x1, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:18 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 03:35:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000001300)='/dev/snd/pcmC#D#p\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 03:35:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000001300)='/dev/snd/pcmC#D#p\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) [ 794.681769] FAT-fs (loop1): bogus number of reserved sectors [ 794.687772] FAT-fs (loop1): Can't find a valid FAT filesystem 03:35:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) unshare(0x2000400) write$evdev(r2, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {{0x2}}], 0x30) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000002c0)=""/240) 03:35:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="ee67727eb44dadf904bc948611c1d88799f6a496c0a29913233e16013d9eb25c3e08f2f53beecbf406eb736e41b52d1a72834dddf0e50aba616ff2c7a2e169cf516daa333075e1c094ce79eaf9d14572a901d83f9affab0f5d8a1900db18f7b98d4f905900d48919126d1ca35935347bd4d026987879f09cb519b295c506d5a83b04c42233353cd1b114097d245ea7cb1ec77364a6c38dd4d8291a9c65499a6b84e6", 0xa2}], 0x1, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 794.783811] FAT-fs (loop1): bogus number of reserved sectors [ 794.789799] FAT-fs (loop1): Can't find a valid FAT filesystem 03:35:19 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") exit(0x0) close(r0) 03:35:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r1, &(0x7f0000e6d000)=""/384, 0x180) close(r1) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() fcntl$setown(r2, 0x8, r3) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r2, 0xa, 0x20) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 03:35:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000001300)='/dev/snd/pcmC#D#p\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 03:35:19 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(cipher_null-generic)\x00'}, 0x58) close(r0) 03:35:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000001300)='/dev/snd/pcmC#D#p\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 03:35:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="ee67727eb44dadf904bc948611c1d88799f6a496c0a29913233e16013d9eb25c3e08f2f53beecbf406eb736e41b52d1a72834dddf0e50aba616ff2c7a2e169cf516daa333075e1c094ce79eaf9d14572a901d83f9affab0f5d8a1900db18f7b98d4f905900d48919126d1ca35935347bd4d026987879f09cb519b295c506d5a83b04c42233353cd1b114097d245ea7cb1ec77364a6c38dd4d8291a9c65499a6b84e6", 0xa2}], 0x1, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000001300)='/dev/snd/pcmC#D#p\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 03:35:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000200)={0x3ff}) 03:35:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000500)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) close(r3) close(r2) 03:35:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000001300)='/dev/snd/pcmC#D#p\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 03:35:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="ee67727eb44dadf904bc948611c1d88799f6a496c0a29913233e16013d9eb25c3e08f2f53beecbf406eb736e41b52d1a72834dddf0e50aba616ff2c7a2e169cf516daa333075e1c094ce79eaf9d14572a901d83f9affab0f5d8a1900db18f7b98d4f905900d48919126d1ca35935347bd4d026987879f09cb519b295c506d5a83b04c42233353cd1b114097d245ea7cb1ec77364a6c38dd4d8291a9c65499a6b84e6", 0xa2}], 0x1, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:19 executing program 6: r0 = userfaultfd(0x0) fcntl$getflags(r0, 0x401) 03:35:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x8004, 0x800000000001a, 0x0, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184908, &(0x7f0000000080)) 03:35:19 executing program 6: r0 = userfaultfd(0x0) fcntl$getflags(r0, 0x401) 03:35:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') sendfile(r0, r0, &(0x7f0000000100)=0x400005, 0x6) 03:35:19 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x7fffdffee000}}) [ 795.583670] ion_ioctl: ioctl validate failed 03:35:20 executing program 5: syz_read_part_table(0xebffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="000000000e00000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000020000000000030d00f0043100c90000006400000000043200632020002d010000d306000055aa", 0x60, 0x1a0}]) [ 795.998926] loop5: p1 p3 p4 [ 796.033770] loop5: p1 p3 p4 03:35:20 executing program 6: r0 = userfaultfd(0x0) fcntl$getflags(r0, 0x401) 03:35:20 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@timestamp={0x44, 0x4, 0x7}]}}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000000)) 03:35:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x8004, 0x800000000001a, 0x0, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184908, &(0x7f0000000080)) 03:35:20 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x100000005, 0x2, 0x5000, 0x2000, &(0x7f0000009000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000001300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2}], @gre_common_policy=[@IFLA_GRE_OFLAGS={0x8, 0x3}]]}}}]}, 0x48}, 0x1}, 0x0) 03:35:20 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) 03:35:20 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) close(r0) fsync(r2) 03:35:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000140), 0x8) 03:35:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x8004, 0x800000000001a, 0x0, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184908, &(0x7f0000000080)) 03:35:20 executing program 6: r0 = userfaultfd(0x0) fcntl$getflags(r0, 0x401) 03:35:20 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@timestamp={0x44, 0x4, 0x7}]}}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000000)) 03:35:20 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) 03:35:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000140), 0x8) 03:35:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000140), 0x8) [ 796.389542] netlink: 'syz-executor4': attribute type 2 has an invalid length. [ 796.396913] netlink: 'syz-executor4': attribute type 3 has an invalid length. 03:35:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x8004, 0x800000000001a, 0x0, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184908, &(0x7f0000000080)) 03:35:20 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 03:35:20 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@timestamp={0x44, 0x4, 0x7}]}}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000000)) 03:35:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000140), 0x8) 03:35:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x8000400) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x1264, &(0x7f0000000080)) 03:35:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000140), 0x8) 03:35:20 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) 03:35:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 03:35:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 03:35:21 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@timestamp={0x44, 0x4, 0x7}]}}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000000)) 03:35:21 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x98) 03:35:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000140), 0x8) 03:35:21 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) 03:35:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x2, "9f92"}, &(0x7f0000000240)=0xa) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280), &(0x7f0000000340)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 03:35:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000140), 0x8) 03:35:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x10) listen(r1, 0x0) 03:35:21 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x900, 0xfffffffffffff1bb}}, @IFA_ADDRESS={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 03:35:21 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0x20000000c0385720, &(0x7f0000000000)) 03:35:21 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x32) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 03:35:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f00000001c0), 0x4) 03:35:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x300, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 03:35:21 executing program 3: mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000140)=""/51, 0x33}, &(0x7f0000000180)}, 0x20) 03:35:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCFLSH(r0, 0x540b, 0x1) 03:35:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") flock(r0, 0xc) 03:35:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_stats={0x15, 0x2000000}}) close(r2) close(r1) 03:35:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000) 03:35:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae91, &(0x7f00000001c0)) 03:35:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1d, 0x0, 0xa5}) 03:35:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x300, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 03:35:21 executing program 7: socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x17) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x13f) close(r1) 03:35:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f00000004c0)="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") 03:35:21 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa}) fcntl$setstatus(r0, 0x4, 0x400000000002001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfffffffffffffffe}, {}, @raw32}], 0x32c) dup2(r1, r0) dup2(r0, r2) [ 797.677970] device lo entered promiscuous mode 03:35:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000) 03:35:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x300, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 03:35:21 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8000000008b0f, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_map={0x20}}) 03:35:21 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='gretap0\x00', 0x10) sendto(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x2, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x80) 03:35:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x300, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 03:35:22 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000000300)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x100000000002) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000240)=0x10) [ 798.043317] Y­4`Ò˜: renamed from lo 03:35:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCFLSH(r0, 0x540b, 0x1) 03:35:22 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 03:35:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000) 03:35:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0xff76}, 0x1}, 0x0) 03:35:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0)=0x3f, 0x4) sendmmsg(r0, &(0x7f0000000880), 0x40000000000034e, 0x0) 03:35:22 executing program 6: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_nanosleep(0x8, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000040)) 03:35:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000) 03:35:22 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x400c0930, &(0x7f0000000040)) 03:35:22 executing program 6: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_nanosleep(0x8, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000040)) 03:35:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) close(r2) 03:35:22 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 03:35:22 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 03:35:22 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={[{@creator={'creator', 0x3d, "135f40e8"}, 0x2c}]}) 03:35:22 executing program 6: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_nanosleep(0x8, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000040)) 03:35:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="cd7290074c33b5ba5472c1892c2273651b5fca8881c22d2080ddf45989bbe92905abdb0447971f3b9413bab7ba60000a4ba0dbab8ec6ea3fc4b26e118a1aef8792728f7f55e4aa6c492460d946ab928533bb58f24e3989a8b1a8d304f0427c28cef56b26cb5b2a0c7e26a6607e6a2affab2950a894f567826f917b5eb19c1e176661c743e5ecc6894ea151f45f971742a276e4cc7cef0bb47e4545eea78af6e43cca0f087369c37050b2e811d2502d79b73e539da0119f32", 0xb8) 03:35:23 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) [ 798.852643] hfsplus: unable to find HFS+ superblock [ 798.902446] hfsplus: unable to find HFS+ superblock 03:35:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCFLSH(r0, 0x540b, 0x1) 03:35:23 executing program 5: ioperm(0x0, 0x102, 0x0) ioperm(0x0, 0x7, 0xfffffffffffffffe) 03:35:23 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 03:35:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) close(r2) 03:35:23 executing program 6: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_nanosleep(0x8, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000040)) 03:35:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x87e, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) 03:35:23 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={[{@creator={'creator', 0x3d, "135f40e8"}, 0x2c}]}) 03:35:23 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340), &(0x7f00000002c0)=0x8) 03:35:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345e8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="0a0775b0d5e36eddaa1e6ea64aa8e1c9", 0x10) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) sendmmsg(r2, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006f00)='O', 0x1}], 0x1, &(0x7f00000071c0)}}, {{&(0x7f0000008f00)=@ipx={0x4, 0x0, 0x0, "632ac09b863c"}, 0x80, &(0x7f0000009440)=[{&(0x7f0000008fc0)="08a32831793ae3455a6f29facd88402ce7", 0x11}, {&(0x7f0000009280)="0e6e15620827b594", 0x8}], 0x2, &(0x7f00000094c0), 0x0, 0x10}, 0x4}], 0x2, 0x4000000) 03:35:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) 03:35:23 executing program 6: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) 03:35:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) close(r2) [ 799.563684] hfsplus: unable to find HFS+ superblock 03:35:23 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={[{@creator={'creator', 0x3d, "135f40e8"}, 0x2c}]}) 03:35:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) shutdown(r1, 0x1) 03:35:23 executing program 6: capset(&(0x7f000015eff8)={0x19980330}, &(0x7f000053a000)) prctl$setmm(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) 03:35:23 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 799.765664] hfsplus: unable to find HFS+ superblock 03:35:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCFLSH(r0, 0x540b, 0x1) 03:35:24 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000340)='{ppp1eth1self!user\x00', 0x3) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x1fd, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000300)) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) prctl$getreaper(0x1b, &(0x7f0000000080)) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000280)={0x0, 0x0, {0x29, 0x10, 0x2, 0xe, 0xb, 0x6364, 0x1, 0x16, 0x1}}) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0xffff, 0x2, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 03:35:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) close(r2) 03:35:24 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={[{@creator={'creator', 0x3d, "135f40e8"}, 0x2c}]}) 03:35:24 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) dup(r0) 03:35:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010907031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:35:24 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 03:35:24 executing program 3: r0 = socket(0x11, 0x8080a, 0x0) getpeername(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) 03:35:24 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000400)="0149dac167b6535b", 0x8}], 0x1) recvmsg(r1, &(0x7f0000000100)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/134, 0x86}], 0x1, &(0x7f0000000080)=""/107, 0x6b}, 0x0) [ 800.611194] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 800.627344] hfsplus: unable to find HFS+ superblock 03:35:24 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="a2", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000001940), 0x0, &(0x7f00000019c0)=""/154, 0x9a}, 0x0) 03:35:24 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 03:35:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000008000100000000004000000000010000000000000025000000ffffffff00040000000000000a0000000636"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x390}]}) 03:35:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3d6, &(0x7f0000002d80)=0x0) r2 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xd201, 0x0) io_submit(r1, 0x2, &(0x7f0000000880)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="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", 0xfd, 0x8, 0x0, 0x0, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f00000002c0)}]) 03:35:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000050bff6)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5419, &(0x7f0000000000)) 03:35:24 executing program 3: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f0000000180)='./control/file0\x00') write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x3eb) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ftruncate(r1, 0x7c) dup2(r2, r1) close(r0) 03:35:25 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) ioctl$sock_inet_SIOCGARP(r1, 0x890b, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:35:25 executing program 1: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000300)="24ac068c1e6251fdb7ddcde03ff7ccb6611a475fd714794cc6b5fc2f57a902f786e77b3e8a809ab524c32cf836e7e9542e3ae5bf5dcab13d004baf88bfc37a892fba0500000000002430b0", 0x4b) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) setitimer(0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000140)) 03:35:25 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) tkill(r0, 0x1000000000016) 03:35:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000050bff6)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5419, &(0x7f0000000000)) 03:35:25 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/135, 0x87, 0x0, &(0x7f0000000280)=@rc={0x1f}, 0x80) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 03:35:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@broadcast=0xffffffff}}, [@policy_type={0xc, 0x10, {0x2}}]}, 0x5c}, 0x1}, 0x0) 03:35:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='security.evm\x00', &(0x7f0000000040)="6f428f4ed4df5a5ec3dd6cb73edd1f725d5d076eff1f4072e20ea03bc51975bef82d028a2511817051239c742a9036222207f050995a9945d6cec12644", 0x227, 0x0) 03:35:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000050bff6)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5419, &(0x7f0000000000)) 03:35:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e}], 0x1, 0x0, &(0x7f0000000200)="fd"}) 03:35:25 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000480), 0x12) 03:35:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x882) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18}, 0x18) 03:35:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000050bff6)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5419, &(0x7f0000000000)) 03:35:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x8000000000000007, &(0x7f0000000000)) fcntl$lock(r1, 0x26, &(0x7f000001d000)) dup3(r0, r1, 0x0) 03:35:25 executing program 3: mremap(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 03:35:25 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000480), 0x12) [ 801.769772] binder: 27983:27987 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 801.785179] binder: 27983:27989 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:26 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x882) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18}, 0x18) 03:35:26 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) setfsgid(r1) 03:35:26 executing program 2: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x4) lseek(r0, 0x7ffffffffffffffc, 0x1) 03:35:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$getreaper(0x1b, &(0x7f00000000c0)) 03:35:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8188aea6, &(0x7f00000001c0)) 03:35:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000003, 0x5011, r1, 0x0) fcntl$addseals(r1, 0x409, 0x4) fallocate(r1, 0x0, 0x0, 0xeb96) 03:35:26 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x1, 0x4b, 0x2}, {{0x0, 0x2710}}], 0x247) 03:35:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="9c"], 0x1) r1 = open(&(0x7f0000000000)="2e2f66696c65302f662e6c6530f0", 0x40003ffd, 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x100000213) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x8a9, &(0x7f00000004c0)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x17) 03:35:26 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x882) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18}, 0x18) 03:35:26 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000480), 0x12) 03:35:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x13}, [@typed={0x5, 0x9, @fd}]}, 0x1c}, 0x1}, 0x0) 03:35:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000180)=""/255) 03:35:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}, 0x1}, 0x0) 03:35:26 executing program 2: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) 03:35:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}, 0x1}, 0x0) 03:35:26 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x882) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18}, 0x18) 03:35:26 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000480), 0x12) 03:35:26 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x4) 03:35:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') setns(r1, 0x0) [ 802.827293] FAT-fs (loop3): error, clusters badly computed (3 != 1) [ 802.833827] FAT-fs (loop3): Filesystem has been set read-only [ 802.840430] FAT-fs (loop3): error, clusters badly computed (4 != 2) [ 802.847129] FAT-fs (loop3): error, clusters badly computed (5 != 3) [ 802.853859] FAT-fs (loop3): error, clusters badly computed (6 != 4) [ 802.860566] FAT-fs (loop3): error, clusters badly computed (7 != 5) [ 802.867272] FAT-fs (loop3): error, clusters badly computed (8 != 6) [ 802.874006] FAT-fs (loop3): error, clusters badly computed (9 != 7) [ 802.887162] FAT-fs (loop3): error, clusters badly computed (10 != 8) [ 802.893888] FAT-fs (loop3): error, clusters badly computed (11 != 9) [ 802.908172] FAT-fs (loop3): error, clusters badly computed (12 != 10) [ 802.929643] FAT-fs (loop3): error, clusters badly computed (13 != 11) [ 802.961472] FAT-fs (loop3): error, clusters badly computed (14 != 12) 03:35:27 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 03:35:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}, 0x1}, 0x0) 03:35:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x4, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 803.014847] FAT-fs (loop3): error, clusters badly computed (15 != 13) [ 803.041862] FAT-fs (loop3): error, clusters badly computed (16 != 14) [ 803.048958] FAT-fs (loop3): error, clusters badly computed (17 != 15) [ 803.056335] FAT-fs (loop3): error, clusters badly computed (18 != 16) [ 803.063797] FAT-fs (loop3): error, clusters badly computed (19 != 17) [ 803.070882] FAT-fs (loop3): error, clusters badly computed (20 != 18) [ 803.077866] FAT-fs (loop3): error, clusters badly computed (21 != 19) [ 803.084893] FAT-fs (loop3): error, clusters badly computed (22 != 20) [ 803.091775] FAT-fs (loop3): error, clusters badly computed (23 != 21) [ 803.098602] FAT-fs (loop3): error, clusters badly computed (24 != 22) [ 803.105789] FAT-fs (loop3): error, clusters badly computed (25 != 23) [ 803.112830] FAT-fs (loop3): error, clusters badly computed (26 != 24) [ 803.119782] FAT-fs (loop3): error, clusters badly computed (27 != 25) [ 803.126935] FAT-fs (loop3): error, clusters badly computed (28 != 26) [ 803.133864] FAT-fs (loop3): error, clusters badly computed (29 != 27) [ 803.140779] FAT-fs (loop3): error, clusters badly computed (30 != 28) [ 803.147595] FAT-fs (loop3): error, clusters badly computed (31 != 29) [ 803.154636] FAT-fs (loop3): error, clusters badly computed (32 != 30) [ 803.164154] FAT-fs (loop3): error, clusters badly computed (33 != 31) [ 803.171198] FAT-fs (loop3): error, clusters badly computed (34 != 32) [ 803.178216] FAT-fs (loop3): error, clusters badly computed (35 != 33) [ 803.185090] FAT-fs (loop3): error, clusters badly computed (36 != 34) [ 803.191880] FAT-fs (loop3): error, clusters badly computed (37 != 35) [ 803.198888] FAT-fs (loop3): error, clusters badly computed (38 != 36) [ 803.205721] FAT-fs (loop3): error, clusters badly computed (39 != 37) [ 803.212575] FAT-fs (loop3): error, clusters badly computed (40 != 38) [ 803.219927] FAT-fs (loop3): error, clusters badly computed (41 != 39) [ 803.227246] FAT-fs (loop3): error, clusters badly computed (42 != 40) [ 803.234158] FAT-fs (loop3): error, clusters badly computed (43 != 41) [ 803.240927] FAT-fs (loop3): error, clusters badly computed (44 != 42) [ 803.247775] FAT-fs (loop3): error, clusters badly computed (45 != 43) [ 803.256549] FAT-fs (loop3): error, clusters badly computed (46 != 44) [ 803.263371] FAT-fs (loop3): error, clusters badly computed (47 != 45) [ 803.270376] FAT-fs (loop3): error, clusters badly computed (48 != 46) [ 803.277177] FAT-fs (loop3): error, clusters badly computed (49 != 47) [ 803.284205] FAT-fs (loop3): error, clusters badly computed (50 != 48) [ 803.291016] FAT-fs (loop3): error, clusters badly computed (51 != 49) [ 803.298536] FAT-fs (loop3): error, clusters badly computed (52 != 50) [ 803.305379] FAT-fs (loop3): error, clusters badly computed (53 != 51) [ 803.313493] FAT-fs (loop3): error, clusters badly computed (54 != 52) [ 803.320981] FAT-fs (loop3): error, clusters badly computed (55 != 53) [ 803.328268] FAT-fs (loop3): error, clusters badly computed (56 != 54) [ 803.334977] FAT-fs (loop3): error, clusters badly computed (57 != 55) [ 803.341989] FAT-fs (loop3): error, clusters badly computed (58 != 56) [ 803.348805] FAT-fs (loop3): error, clusters badly computed (59 != 57) [ 803.367853] FAT-fs (loop3): error, clusters badly computed (60 != 58) [ 803.374621] FAT-fs (loop3): error, clusters badly computed (61 != 59) [ 803.381514] FAT-fs (loop3): error, clusters badly computed (62 != 60) [ 803.388451] FAT-fs (loop3): error, clusters badly computed (63 != 61) [ 803.395574] FAT-fs (loop3): error, clusters badly computed (64 != 62) [ 803.403236] FAT-fs (loop3): error, clusters badly computed (65 != 63) [ 803.421470] FAT-fs (loop3): error, clusters badly computed (66 != 64) [ 803.428568] FAT-fs (loop3): error, clusters badly computed (67 != 65) [ 803.435725] FAT-fs (loop3): error, clusters badly computed (68 != 66) [ 803.442734] FAT-fs (loop3): error, clusters badly computed (69 != 67) [ 803.449686] FAT-fs (loop3): error, clusters badly computed (70 != 68) [ 803.456601] FAT-fs (loop3): error, clusters badly computed (71 != 69) [ 803.463661] FAT-fs (loop3): error, clusters badly computed (72 != 70) [ 803.471007] FAT-fs (loop3): error, clusters badly computed (73 != 71) [ 803.478762] FAT-fs (loop3): error, clusters badly computed (74 != 72) [ 803.485677] FAT-fs (loop3): error, clusters badly computed (75 != 73) [ 803.492809] FAT-fs (loop3): error, clusters badly computed (76 != 74) [ 803.500987] FAT-fs (loop3): error, clusters badly computed (77 != 75) [ 803.508146] FAT-fs (loop3): error, clusters badly computed (78 != 76) [ 803.515231] FAT-fs (loop3): error, clusters badly computed (79 != 77) [ 803.522204] FAT-fs (loop3): error, clusters badly computed (80 != 78) [ 803.529201] FAT-fs (loop3): error, clusters badly computed (81 != 79) [ 803.536116] FAT-fs (loop3): error, clusters badly computed (82 != 80) [ 803.543133] FAT-fs (loop3): error, clusters badly computed (83 != 81) [ 803.550287] FAT-fs (loop3): error, clusters badly computed (84 != 82) [ 803.557568] FAT-fs (loop3): error, clusters badly computed (85 != 83) [ 803.564998] FAT-fs (loop3): error, clusters badly computed (86 != 84) [ 803.572196] FAT-fs (loop3): error, clusters badly computed (87 != 85) [ 803.579657] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 803.592260] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 803.605786] FAT-fs (loop3): error, invalid access to FAT (entry 0x00005323) 03:35:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="9c"], 0x1) r1 = open(&(0x7f0000000000)="2e2f66696c65302f662e6c6530f0", 0x40003ffd, 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x100000213) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x8a9, &(0x7f00000004c0)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x17) 03:35:27 executing program 7: ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x68) 03:35:27 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fallocate(r1, 0x0, 0x0, 0x80000001) 03:35:27 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='umask']) 03:35:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) fstat(r0, &(0x7f00000008c0)) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) clock_gettime(0x0, &(0x7f0000004d40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004cc0)=[{{&(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/10, 0xa}}, {{&(0x7f00000007c0)=@pptp={0x0, 0x0, {0x0, @multicast1}}, 0x80, &(0x7f00000008c0), 0x35b, &(0x7f0000003940)=""/37, 0x25}}, {{&(0x7f0000003980)=@un=@abs, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000580)=""/33, 0x21}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000300)=""/216, 0xd8}, {&(0x7f0000000400)=""/255, 0xff}], 0x7, &(0x7f0000004c40)=""/68, 0x44}}], 0x3, 0x40012160, &(0x7f0000004d80)={0x0, r2+10000000}) 03:35:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}, 0x1}, 0x0) 03:35:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x4, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 803.626273] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 803.634701] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 03:35:27 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 803.699283] ntfs: (device loop2): parse_options(): The umask option requires an argument. [ 803.709116] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 03:35:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x4, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 03:35:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x23, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x108) 03:35:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f309d440f20c03501000000440f22c00fc72ec4e17853bd450000002e0fc75900c4c2f547c4640f01cb66baa000ec0f017e0a", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x353) 03:35:27 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(morus640-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="104a2d9e3da15b605e2e56c00c59cac3", 0x10}], 0x1, &(0x7f0000002800)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0) [ 803.747905] ntfs: (device loop2): parse_options(): The umask option requires an argument. 03:35:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 804.055370] FAT-fs (loop3): error, clusters badly computed (3 != 1) [ 804.061940] FAT-fs (loop3): Filesystem has been set read-only [ 804.068597] FAT-fs (loop3): error, clusters badly computed (4 != 2) [ 804.075713] FAT-fs (loop3): error, clusters badly computed (5 != 3) [ 804.089448] FAT-fs (loop3): error, clusters badly computed (6 != 4) [ 804.095969] FAT-fs (loop3): error, clusters badly computed (7 != 5) [ 804.102616] FAT-fs (loop3): error, clusters badly computed (8 != 6) [ 804.109138] FAT-fs (loop3): error, clusters badly computed (9 != 7) [ 804.115878] FAT-fs (loop3): error, clusters badly computed (10 != 8) [ 804.122488] FAT-fs (loop3): error, clusters badly computed (11 != 9) [ 804.129191] FAT-fs (loop3): error, clusters badly computed (12 != 10) [ 804.135887] FAT-fs (loop3): error, clusters badly computed (13 != 11) [ 804.142589] FAT-fs (loop3): error, clusters badly computed (14 != 12) [ 804.149285] FAT-fs (loop3): error, clusters badly computed (15 != 13) [ 804.156015] FAT-fs (loop3): error, clusters badly computed (16 != 14) [ 804.162680] FAT-fs (loop3): error, clusters badly computed (17 != 15) [ 804.169475] FAT-fs (loop3): error, clusters badly computed (18 != 16) [ 804.176144] FAT-fs (loop3): error, clusters badly computed (19 != 17) [ 804.183739] FAT-fs (loop3): error, clusters badly computed (20 != 18) [ 804.190496] FAT-fs (loop3): error, clusters badly computed (21 != 19) [ 804.215382] FAT-fs (loop3): error, clusters badly computed (22 != 20) [ 804.222073] FAT-fs (loop3): error, clusters badly computed (23 != 21) [ 804.228828] FAT-fs (loop3): error, clusters badly computed (24 != 22) [ 804.235481] FAT-fs (loop3): error, clusters badly computed (25 != 23) [ 804.242244] FAT-fs (loop3): error, clusters badly computed (26 != 24) [ 804.248911] FAT-fs (loop3): error, clusters badly computed (27 != 25) [ 804.255981] FAT-fs (loop3): error, clusters badly computed (28 != 26) [ 804.262646] FAT-fs (loop3): error, clusters badly computed (29 != 27) [ 804.269403] FAT-fs (loop3): error, clusters badly computed (30 != 28) [ 804.276483] FAT-fs (loop3): error, clusters badly computed (31 != 29) [ 804.283241] FAT-fs (loop3): error, clusters badly computed (32 != 30) [ 804.289893] FAT-fs (loop3): error, clusters badly computed (33 != 31) [ 804.296906] FAT-fs (loop3): error, clusters badly computed (34 != 32) [ 804.303586] FAT-fs (loop3): error, clusters badly computed (35 != 33) [ 804.310351] FAT-fs (loop3): error, clusters badly computed (36 != 34) [ 804.317011] FAT-fs (loop3): error, clusters badly computed (37 != 35) [ 804.323771] FAT-fs (loop3): error, clusters badly computed (38 != 36) [ 804.330478] FAT-fs (loop3): error, clusters badly computed (39 != 37) [ 804.337237] FAT-fs (loop3): error, clusters badly computed (40 != 38) [ 804.344177] FAT-fs (loop3): error, clusters badly computed (41 != 39) [ 804.350911] FAT-fs (loop3): error, clusters badly computed (42 != 40) [ 804.357629] FAT-fs (loop3): error, clusters badly computed (43 != 41) [ 804.364402] FAT-fs (loop3): error, clusters badly computed (44 != 42) [ 804.371049] FAT-fs (loop3): error, clusters badly computed (45 != 43) [ 804.377824] FAT-fs (loop3): error, clusters badly computed (46 != 44) [ 804.384535] FAT-fs (loop3): error, clusters badly computed (47 != 45) [ 804.391269] FAT-fs (loop3): error, clusters badly computed (48 != 46) [ 804.397971] FAT-fs (loop3): error, clusters badly computed (49 != 47) [ 804.404694] FAT-fs (loop3): error, clusters badly computed (50 != 48) 03:35:28 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c5ee539", 0xcd, 0x10000}], 0x0, &(0x7f0000000240)=ANY=[]) 03:35:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003400)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001240)="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", 0xec1}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/78, 0xfffffe06}], 0x1}, 0x0) 03:35:28 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0xffffffffffffffff) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0x68) [ 804.411409] FAT-fs (loop3): error, clusters badly computed (51 != 49) [ 804.418208] FAT-fs (loop3): error, clusters badly computed (52 != 50) [ 804.424918] FAT-fs (loop3): error, clusters badly computed (53 != 51) [ 804.432226] FAT-fs (loop3): error, clusters badly computed (54 != 52) [ 804.438978] FAT-fs (loop3): error, clusters badly computed (55 != 53) [ 804.445767] FAT-fs (loop3): error, clusters badly computed (56 != 54) [ 804.452485] FAT-fs (loop3): error, clusters badly computed (57 != 55) [ 804.459328] FAT-fs (loop3): error, clusters badly computed (58 != 56) [ 804.466236] FAT-fs (loop3): error, clusters badly computed (59 != 57) [ 804.473246] FAT-fs (loop3): error, clusters badly computed (60 != 58) [ 804.480261] FAT-fs (loop3): error, clusters badly computed (61 != 59) [ 804.487050] FAT-fs (loop3): error, clusters badly computed (62 != 60) [ 804.493735] FAT-fs (loop3): error, clusters badly computed (63 != 61) [ 804.500557] FAT-fs (loop3): error, clusters badly computed (64 != 62) [ 804.512754] FAT-fs (loop3): error, clusters badly computed (65 != 63) [ 804.519693] FAT-fs (loop3): error, clusters badly computed (66 != 64) [ 804.526562] FAT-fs (loop3): error, clusters badly computed (67 != 65) [ 804.533583] FAT-fs (loop3): error, clusters badly computed (68 != 66) [ 804.540444] FAT-fs (loop3): error, clusters badly computed (69 != 67) [ 804.547388] FAT-fs (loop3): error, clusters badly computed (70 != 68) [ 804.554748] FAT-fs (loop3): error, clusters badly computed (71 != 69) [ 804.564810] FAT-fs (loop3): error, clusters badly computed (72 != 70) [ 804.571995] FAT-fs (loop3): error, clusters badly computed (73 != 71) [ 804.579202] FAT-fs (loop3): error, clusters badly computed (74 != 72) [ 804.586146] FAT-fs (loop3): error, clusters badly computed (75 != 73) [ 804.593349] FAT-fs (loop3): error, clusters badly computed (76 != 74) [ 804.600212] FAT-fs (loop3): error, clusters badly computed (77 != 75) [ 804.607394] FAT-fs (loop3): error, clusters badly computed (78 != 76) [ 804.614397] FAT-fs (loop3): error, clusters badly computed (79 != 77) [ 804.622232] FAT-fs (loop3): error, clusters badly computed (80 != 78) [ 804.629694] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 804.638022] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000c00) 03:35:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="9c"], 0x1) r1 = open(&(0x7f0000000000)="2e2f66696c65302f662e6c6530f0", 0x40003ffd, 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x100000213) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x8a9, &(0x7f00000004c0)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x17) 03:35:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x4, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 03:35:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/230}, 0x4) 03:35:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 03:35:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f309d440f20c03501000000440f22c00fc72ec4e17853bd450000002e0fc75900c4c2f547c4640f01cb66baa000ec0f017e0a", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x353) 03:35:28 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f00000012c0), &(0x7f0000001080), &(0x7f00000022c0), &(0x7f0000001f00)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f4, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x005\x00', @ifru_settings={0x707000}}) 03:35:28 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c5ee539", 0xcd, 0x10000}], 0x0, &(0x7f0000000240)=ANY=[]) [ 804.668363] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 971333148 transid 756082810144684242 /dev/loop5 [ 804.683496] BTRFS error (device loop5): unsupported checksum algorithm 3786 [ 804.690738] BTRFS error (device loop5): superblock checksum mismatch [ 804.706960] BTRFS error (device loop5): open_ctree failed 03:35:28 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() r3 = dup(r1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e18ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r4, 0x8, r2) readv(r5, &(0x7f0000000040)=[{&(0x7f0000fb6f9c)=""/25, 0x19}], 0x1) fcntl$setsig(r4, 0xa, 0x12) dup2(r4, r5) tkill(r2, 0x16) 03:35:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900070035000c00060000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 03:35:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/19, 0x13}, 0x1) 03:35:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f309d440f20c03501000000440f22c00fc72ec4e17853bd450000002e0fc75900c4c2f547c4640f01cb66baa000ec0f017e0a", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x353) 03:35:29 executing program 7: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000100)) 03:35:29 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x26, 0x80}}) [ 804.931707] IPv6: Can't replace route, no match found [ 804.958432] BTRFS error (device loop5): unsupported checksum algorithm 3786 [ 804.965753] BTRFS error (device loop5): superblock checksum mismatch [ 804.981915] BTRFS error (device loop5): open_ctree failed 03:35:29 executing program 7: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@rand_addr=0xfffffffffffffffd, @rand_addr]}, 0x18) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 03:35:29 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c5ee539", 0xcd, 0x10000}], 0x0, &(0x7f0000000240)=ANY=[]) [ 805.064214] FAT-fs (loop3): error, clusters badly computed (3 != 1) [ 805.070779] FAT-fs (loop3): Filesystem has been set read-only [ 805.077731] FAT-fs (loop3): error, clusters badly computed (4 != 2) [ 805.084836] FAT-fs (loop3): error, clusters badly computed (5 != 3) [ 805.093639] FAT-fs (loop3): error, clusters badly computed (6 != 4) [ 805.100656] FAT-fs (loop3): error, clusters badly computed (7 != 5) [ 805.108276] FAT-fs (loop3): error, clusters badly computed (8 != 6) [ 805.114946] FAT-fs (loop3): error, clusters badly computed (9 != 7) [ 805.121911] FAT-fs (loop3): error, clusters badly computed (10 != 8) [ 805.129084] FAT-fs (loop3): error, clusters badly computed (11 != 9) [ 805.135909] FAT-fs (loop3): error, clusters badly computed (12 != 10) [ 805.142640] FAT-fs (loop3): error, clusters badly computed (13 != 11) [ 805.149485] FAT-fs (loop3): error, clusters badly computed (14 != 12) [ 805.156246] FAT-fs (loop3): error, clusters badly computed (15 != 13) [ 805.163000] FAT-fs (loop3): error, clusters badly computed (16 != 14) [ 805.169831] FAT-fs (loop3): error, clusters badly computed (17 != 15) [ 805.176644] FAT-fs (loop3): error, clusters badly computed (18 != 16) [ 805.183399] FAT-fs (loop3): error, clusters badly computed (19 != 17) [ 805.190243] FAT-fs (loop3): error, clusters badly computed (20 != 18) [ 805.197167] FAT-fs (loop3): error, clusters badly computed (21 != 19) [ 805.204803] FAT-fs (loop3): error, clusters badly computed (22 != 20) [ 805.214704] FAT-fs (loop3): error, clusters badly computed (23 != 21) [ 805.232400] FAT-fs (loop3): error, clusters badly computed (24 != 22) [ 805.240172] FAT-fs (loop3): error, clusters badly computed (25 != 23) [ 805.247559] FAT-fs (loop3): error, clusters badly computed (26 != 24) [ 805.257354] FAT-fs (loop3): error, clusters badly computed (27 != 25) [ 805.264659] FAT-fs (loop3): error, clusters badly computed (28 != 26) [ 805.276443] BTRFS error (device loop5): unsupported checksum algorithm 3786 [ 805.283757] BTRFS error (device loop5): superblock checksum mismatch [ 805.285146] FAT-fs (loop3): error, clusters badly computed (29 != 27) [ 805.297296] FAT-fs (loop3): error, clusters badly computed (30 != 28) [ 805.304495] BTRFS error (device loop5): open_ctree failed [ 805.309339] FAT-fs (loop3): error, clusters badly computed (31 != 29) [ 805.316858] FAT-fs (loop3): error, clusters badly computed (32 != 30) [ 805.323576] FAT-fs (loop3): error, clusters badly computed (33 != 31) [ 805.330624] FAT-fs (loop3): error, clusters badly computed (34 != 32) [ 805.337654] FAT-fs (loop3): error, clusters badly computed (35 != 33) [ 805.350215] FAT-fs (loop3): error, clusters badly computed (36 != 34) [ 805.356935] FAT-fs (loop3): error, clusters badly computed (37 != 35) [ 805.363776] FAT-fs (loop3): error, clusters badly computed (38 != 36) [ 805.371091] FAT-fs (loop3): error, clusters badly computed (39 != 37) [ 805.377879] FAT-fs (loop3): error, clusters badly computed (40 != 38) [ 805.384751] FAT-fs (loop3): error, clusters badly computed (41 != 39) [ 805.391705] FAT-fs (loop3): error, clusters badly computed (42 != 40) [ 805.398674] FAT-fs (loop3): error, clusters badly computed (43 != 41) [ 805.405444] FAT-fs (loop3): error, clusters badly computed (44 != 42) [ 805.412139] FAT-fs (loop3): error, clusters badly computed (45 != 43) [ 805.418909] FAT-fs (loop3): error, clusters badly computed (46 != 44) [ 805.425630] FAT-fs (loop3): error, clusters badly computed (47 != 45) [ 805.432451] FAT-fs (loop3): error, clusters badly computed (48 != 46) [ 805.439108] FAT-fs (loop3): error, clusters badly computed (49 != 47) [ 805.445874] FAT-fs (loop3): error, clusters badly computed (50 != 48) [ 805.452535] FAT-fs (loop3): error, clusters badly computed (51 != 49) [ 805.459354] FAT-fs (loop3): error, clusters badly computed (52 != 50) [ 805.466011] FAT-fs (loop3): error, clusters badly computed (53 != 51) [ 805.472770] FAT-fs (loop3): error, clusters badly computed (54 != 52) [ 805.479430] FAT-fs (loop3): error, clusters badly computed (55 != 53) [ 805.486218] FAT-fs (loop3): error, clusters badly computed (56 != 54) [ 805.492916] FAT-fs (loop3): error, clusters badly computed (57 != 55) [ 805.499647] FAT-fs (loop3): error, clusters badly computed (58 != 56) [ 805.506376] FAT-fs (loop3): error, clusters badly computed (59 != 57) [ 805.513156] FAT-fs (loop3): error, clusters badly computed (60 != 58) [ 805.519889] FAT-fs (loop3): error, clusters badly computed (61 != 59) [ 805.526785] FAT-fs (loop3): error, clusters badly computed (62 != 60) [ 805.533488] FAT-fs (loop3): error, clusters badly computed (63 != 61) [ 805.540211] FAT-fs (loop3): error, clusters badly computed (64 != 62) [ 805.546917] FAT-fs (loop3): error, clusters badly computed (65 != 63) [ 805.553627] FAT-fs (loop3): error, clusters badly computed (66 != 64) [ 805.560345] FAT-fs (loop3): error, clusters badly computed (67 != 65) [ 805.567098] FAT-fs (loop3): error, clusters badly computed (68 != 66) [ 805.573957] FAT-fs (loop3): error, clusters badly computed (69 != 67) [ 805.580712] FAT-fs (loop3): error, clusters badly computed (70 != 68) [ 805.587409] FAT-fs (loop3): error, clusters badly computed (71 != 69) [ 805.594204] FAT-fs (loop3): error, clusters badly computed (72 != 70) [ 805.600892] FAT-fs (loop3): error, clusters badly computed (73 != 71) [ 805.607776] FAT-fs (loop3): error, clusters badly computed (74 != 72) [ 805.614463] FAT-fs (loop3): error, clusters badly computed (75 != 73) [ 805.621262] FAT-fs (loop3): error, clusters badly computed (76 != 74) [ 805.627985] FAT-fs (loop3): error, clusters badly computed (77 != 75) [ 805.634771] FAT-fs (loop3): error, clusters badly computed (78 != 76) [ 805.641430] FAT-fs (loop3): error, clusters badly computed (79 != 77) [ 805.648199] FAT-fs (loop3): error, clusters badly computed (80 != 78) [ 805.655056] FAT-fs (loop3): error, clusters badly computed (81 != 79) [ 805.661859] FAT-fs (loop3): error, clusters badly computed (82 != 80) [ 805.668488] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 805.676658] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 805.744389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1041) 03:35:31 executing program 7: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000c89f60)={0x0, @in={{0x2}}}, &(0x7f0000d28000)=0xa0) 03:35:31 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa}}}, 0x90) 03:35:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f309d440f20c03501000000440f22c00fc72ec4e17853bd450000002e0fc75900c4c2f547c4640f01cb66baa000ec0f017e0a", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x353) 03:35:31 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0xffffffffffffffff) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0x68) 03:35:31 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c5ee539", 0xcd, 0x10000}], 0x0, &(0x7f0000000240)=ANY=[]) 03:35:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="9c"], 0x1) r1 = open(&(0x7f0000000000)="2e2f66696c65302f662e6c6530f0", 0x40003ffd, 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x100000213) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x8a9, &(0x7f00000004c0)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x17) 03:35:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00005aeff6)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x805, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0x6) sendfile(r1, r0, 0x0, 0x6) 03:35:31 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0xffffffffffffffff) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0x68) [ 807.541881] BTRFS error (device loop5): unsupported checksum algorithm 3786 [ 807.549204] BTRFS error (device loop5): superblock checksum mismatch [ 807.575869] BTRFS error (device loop5): open_ctree failed [ 807.719563] FAT-fs (loop3): error, clusters badly computed (3 != 1) [ 807.726201] FAT-fs (loop3): Filesystem has been set read-only [ 807.732546] FAT-fs (loop3): error, clusters badly computed (4 != 2) [ 807.739780] FAT-fs (loop3): error, clusters badly computed (5 != 3) [ 807.746535] FAT-fs (loop3): error, clusters badly computed (6 != 4) [ 807.753340] FAT-fs (loop3): error, clusters badly computed (7 != 5) [ 807.760143] FAT-fs (loop3): error, clusters badly computed (8 != 6) [ 807.766679] FAT-fs (loop3): error, clusters badly computed (9 != 7) [ 807.773288] FAT-fs (loop3): error, clusters badly computed (10 != 8) [ 807.779905] FAT-fs (loop3): error, clusters badly computed (11 != 9) [ 807.786592] FAT-fs (loop3): error, clusters badly computed (12 != 10) [ 807.793276] FAT-fs (loop3): error, clusters badly computed (13 != 11) [ 807.800064] FAT-fs (loop3): error, clusters badly computed (14 != 12) [ 807.806842] FAT-fs (loop3): error, clusters badly computed (15 != 13) [ 807.813842] FAT-fs (loop3): error, clusters badly computed (16 != 14) [ 807.820655] FAT-fs (loop3): error, clusters badly computed (17 != 15) [ 807.827719] FAT-fs (loop3): error, clusters badly computed (18 != 16) [ 807.834509] FAT-fs (loop3): error, clusters badly computed (19 != 17) [ 807.841389] FAT-fs (loop3): error, clusters badly computed (20 != 18) [ 807.848632] FAT-fs (loop3): error, clusters badly computed (21 != 19) [ 807.855663] FAT-fs (loop3): error, clusters badly computed (22 != 20) [ 807.862516] FAT-fs (loop3): error, clusters badly computed (23 != 21) [ 807.869992] FAT-fs (loop3): error, clusters badly computed (24 != 22) [ 807.877353] FAT-fs (loop3): error, clusters badly computed (25 != 23) [ 807.884792] FAT-fs (loop3): error, clusters badly computed (26 != 24) [ 807.891799] FAT-fs (loop3): error, clusters badly computed (27 != 25) [ 807.898757] FAT-fs (loop3): error, clusters badly computed (28 != 26) [ 807.905491] FAT-fs (loop3): error, clusters badly computed (29 != 27) [ 807.912442] FAT-fs (loop3): error, clusters badly computed (30 != 28) [ 807.919149] FAT-fs (loop3): error, clusters badly computed (31 != 29) [ 807.925963] FAT-fs (loop3): error, clusters badly computed (32 != 30) [ 807.932652] FAT-fs (loop3): error, clusters badly computed (33 != 31) [ 807.939450] FAT-fs (loop3): error, clusters badly computed (34 != 32) [ 807.946180] FAT-fs (loop3): error, clusters badly computed (35 != 33) [ 807.953003] FAT-fs (loop3): error, clusters badly computed (36 != 34) [ 807.959672] FAT-fs (loop3): error, clusters badly computed (37 != 35) [ 807.966464] FAT-fs (loop3): error, clusters badly computed (38 != 36) [ 807.973124] FAT-fs (loop3): error, clusters badly computed (39 != 37) [ 807.979899] FAT-fs (loop3): error, clusters badly computed (40 != 38) [ 807.986553] FAT-fs (loop3): error, clusters badly computed (41 != 39) [ 807.993344] FAT-fs (loop3): error, clusters badly computed (42 != 40) [ 808.000050] FAT-fs (loop3): error, clusters badly computed (43 != 41) [ 808.007103] FAT-fs (loop3): error, clusters badly computed (44 != 42) [ 808.013795] FAT-fs (loop3): error, clusters badly computed (45 != 43) [ 808.020586] FAT-fs (loop3): error, clusters badly computed (46 != 44) [ 808.027325] FAT-fs (loop3): error, clusters badly computed (47 != 45) [ 808.034348] FAT-fs (loop3): error, clusters badly computed (48 != 46) [ 808.041010] FAT-fs (loop3): error, clusters badly computed (49 != 47) [ 808.047799] FAT-fs (loop3): error, clusters badly computed (50 != 48) [ 808.054504] FAT-fs (loop3): error, clusters badly computed (51 != 49) [ 808.061220] FAT-fs (loop3): error, clusters badly computed (52 != 50) [ 808.067913] FAT-fs (loop3): error, clusters badly computed (53 != 51) [ 808.074641] FAT-fs (loop3): error, clusters badly computed (54 != 52) [ 808.081347] FAT-fs (loop3): error, clusters badly computed (55 != 53) [ 808.088082] FAT-fs (loop3): error, clusters badly computed (56 != 54) [ 808.094776] FAT-fs (loop3): error, clusters badly computed (57 != 55) [ 808.101544] FAT-fs (loop3): error, clusters badly computed (58 != 56) [ 808.108249] FAT-fs (loop3): error, clusters badly computed (59 != 57) 03:35:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:32 executing program 2: clone(0x0, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x6, 0x100000010) 03:35:32 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) poll(&(0x7f00000007c0)=[{r0}], 0x1, 0x0) 03:35:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") read(r0, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:35:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') poll(&(0x7f0000000140)=[{r4}, {r0}], 0x2, 0x0) [ 808.115057] FAT-fs (loop3): error, clusters badly computed (60 != 58) [ 808.121710] FAT-fs (loop3): error, clusters badly computed (61 != 59) [ 808.128798] FAT-fs (loop3): error, clusters badly computed (62 != 60) [ 808.135833] FAT-fs (loop3): error, clusters badly computed (63 != 61) [ 808.143285] FAT-fs (loop3): error, clusters badly computed (64 != 62) [ 808.150106] FAT-fs (loop3): error, clusters badly computed (65 != 63) [ 808.157109] FAT-fs (loop3): error, clusters badly computed (66 != 64) [ 808.163939] FAT-fs (loop3): error, clusters badly computed (67 != 65) [ 808.171760] FAT-fs (loop3): error, clusters badly computed (68 != 66) [ 808.182980] FAT-fs (loop3): error, clusters badly computed (69 != 67) [ 808.199679] FAT-fs (loop3): error, clusters badly computed (70 != 68) 03:35:32 executing program 2: r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x2, r0) 03:35:32 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c4"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 808.219499] FAT-fs (loop3): error, clusters badly computed (71 != 69) [ 808.232521] FAT-fs (loop3): error, clusters badly computed (72 != 70) [ 808.242933] FAT-fs (loop3): error, clusters badly computed (73 != 71) [ 808.249868] FAT-fs (loop3): error, clusters badly computed (74 != 72) [ 808.256879] FAT-fs (loop3): error, clusters badly computed (75 != 73) [ 808.263819] FAT-fs (loop3): error, clusters badly computed (76 != 74) [ 808.270833] FAT-fs (loop3): error, clusters badly computed (77 != 75) [ 808.277624] FAT-fs (loop3): error, clusters badly computed (78 != 76) [ 808.284401] FAT-fs (loop3): error, clusters badly computed (79 != 77) [ 808.291207] FAT-fs (loop3): error, clusters badly computed (80 != 78) [ 808.297914] FAT-fs (loop3): error, clusters badly computed (81 != 79) [ 808.304705] FAT-fs (loop3): error, clusters badly computed (82 != 80) [ 808.311424] FAT-fs (loop3): error, clusters badly computed (83 != 81) [ 808.318332] FAT-fs (loop3): error, clusters badly computed (84 != 82) [ 808.325030] FAT-fs (loop3): error, clusters badly computed (85 != 83) [ 808.357008] x86/PAT: syz-executor0:28291 map pfn RAM range req write-combining for [mem 0x1b3640000-0x1b3643fff], got write-back [ 808.401039] x86/PAT: syz-executor0:28293 map pfn RAM range req write-combining for [mem 0x1b3640000-0x1b3643fff], got write-back 03:35:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000180), &(0x7f0000000240)=""/41, 0x0, 0xfffffffc, 0x0, &(0x7f0000000280)}) 03:35:32 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) 03:35:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff314", 0x20) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a700)=[{{0x0, 0x0, &(0x7f000000a680)=[{&(0x7f000000a580)=""/200, 0xc8}], 0x1}}], 0x40000000000015f, 0x0, 0x0) 03:35:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") read(r0, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 809.373063] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1041) [ 809.422248] ion_buffer_destroy: buffer still mapped in the kernel 03:35:34 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0xffffffffffffffff) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0x68) 03:35:34 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c4"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000), 0x4) close(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) close(r1) 03:35:34 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") read(r0, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:35:34 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0xffffffffffffffff) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0x68) 03:35:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x40000001fffd) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2}) 03:35:34 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") read(r0, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:35:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000000)="0f01250f675c00f20f352e0f30dfa800300fc79e925f0f080f0665b1050f01cb", 0x20}], 0x1, 0x61, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:34 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c4"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000ec0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 03:35:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f757000361a6f74a1b774b8642f3dfdd313d92946ff0167415d8dc22791dcd496520c1c99f4b07d3b2a11090000000229210b73abdcd2986fc290ac9b6ace278586d39949a54fb276eb1fd3964b0cad27e417b33abb8d3b00e64e75e4dff47de27536dccdde5fc746b04faafcec347560a31b3a35a5f20bc949d75cbb763987", 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) fchown(r1, 0x0, 0x0) 03:35:35 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c4"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) 03:35:35 executing program 2: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x82) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x800) 03:35:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x509, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:35:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) 03:35:35 executing program 3: r0 = socket$unix(0x1, 0x104000000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) setrlimit(0x7, &(0x7f0000000080)) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)) 03:35:37 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0xffffffffffffffff) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0x68) 03:35:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) 03:35:37 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") read(r0, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:35:37 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0xffffffffffffffff) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0x68) 03:35:37 executing program 2: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x82) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x800) 03:35:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) pwrite64(r1, &(0x7f0000000200)="4ad2b41ae7c6f68f061dcf75058d", 0xe, 0x0) 03:35:37 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6={0x9, 0x6, "feeb47", 0x14, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @empty, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x3c) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:37 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") read(r0, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:35:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) 03:35:37 executing program 2: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x82) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x800) 03:35:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$intptr(0x200000002f, 0x1) [ 813.808178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 813.824286] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. 03:35:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=@dstopts={0x0, 0x2, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0xffffffff]}}]}, 0x20) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x20000001) [ 813.860945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 813.876950] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. 03:35:38 executing program 2: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x82) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x800) 03:35:38 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000003c0)="025cc83d6d345f8f762070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0x0, 0x1}, @empty, @loopback={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback={0x0, 0x1}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x9}) 03:35:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000440)=@fragment, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@fragment, 0x0) 03:35:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unshare(0x24020400) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x0, &(0x7f0000001500)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents64(r1, &(0x7f0000000100)=""/81, 0x4a) 03:35:40 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x98, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8901, &(0x7f0000000000)='\x00\x00\x00\x00\x00') 03:35:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) 03:35:40 executing program 1: r0 = memfd_create(&(0x7f0000000240)="000276d43857a72667ae19eae24522680b00000000000000000000", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) r3 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) sendfile(r3, r3, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ef17a8c5ae95ec86760de884e9740474a13eea165c0322901dc6bd36cde2c51d41b7f0b014f9f91eeb7c37c7340f476c8d753d000aa8faf8fb574dbcda6dc4d"}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 03:35:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000000)='|', 0x1) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1}, 0x18) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}) 03:35:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unshare(0x24020400) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x0, &(0x7f0000001500)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents64(r1, &(0x7f0000000100)=""/81, 0x4a) 03:35:41 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") read(r0, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:35:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unshare(0x24020400) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x0, &(0x7f0000001500)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents64(r1, &(0x7f0000000100)=""/81, 0x4a) 03:35:41 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r1, &(0x7f0000003480)=[{{&(0x7f0000000a40)=@hci={0x1f}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000000fc0)}}, {{&(0x7f0000001000)=@sco={0x1f}, 0x80, &(0x7f0000001240), 0x0, &(0x7f0000006e00)=[{0x10, 0x10d, 0x2000000}], 0x10}}], 0x2, 0x0) 03:35:41 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x10) 03:35:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, &(0x7f00000001c0)) 03:35:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unshare(0x24020400) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x0, &(0x7f0000001500)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents64(r1, &(0x7f0000000100)=""/81, 0x4a) 03:35:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unshare(0x24020400) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x0, &(0x7f0000001500)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents64(r1, &(0x7f0000000100)=""/81, 0x4a) 03:35:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x541b, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_stats={0x2}}) close(r2) close(r1) 03:35:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@xdp, &(0x7f00000002c0)=0x80) 03:35:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unshare(0x24020400) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x0, &(0x7f0000001500)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents64(r1, &(0x7f0000000100)=""/81, 0x4a) 03:35:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unshare(0x24020400) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x0, &(0x7f0000001500)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents64(r1, &(0x7f0000000100)=""/81, 0x4a) 03:35:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000080)={0x1d}, 0x10) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="bc160d20cebcbcdcd04ba273b5c6afc2606d450ee4c6d6c9", 0x18}], 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 03:35:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000a16fb8)=@ipmr_newroute={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20}}, 0x1c}, 0x1}, 0x0) 03:35:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@xdp, &(0x7f00000002c0)=0x80) 03:35:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-serpent-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x7ffff000}], 0x1, &(0x7f00000000c0)=""/87, 0x57}, 0x0) 03:35:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000002240)={0x1, [0x0]}, &(0x7f0000003a40)=0x8) unshare(0x24020400) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x11, &(0x7f0000000300)={r3}, &(0x7f0000000400)=0x8) 03:35:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0x800, 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1c, 0xf07}, 0x1c}, 0x1}, 0x0) 03:35:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x2) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 03:35:41 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f000068b000)='io\x00') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f000024affc), 0x7) 03:35:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@xdp, &(0x7f00000002c0)=0x80) 03:35:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x82, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) close(r3) dup3(r1, r2, 0x0) 03:35:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@xdp, &(0x7f00000002c0)=0x80) 03:35:42 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff88, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 03:35:42 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140)=0x3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000340), &(0x7f0000000380), 0x8) 03:35:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x2) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 03:35:42 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x6, &(0x7f0000000080), 0x5) 03:35:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = getpid() sched_setattr(r1, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000fb6000)=""/28, 0x3f0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000043cfff)=[{&(0x7f0000000000)="be", 0x1}], 0x1, &(0x7f0000000080)}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x20f}}], 0x30, 0x800}], 0x1, 0x0) 03:35:42 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 03:35:42 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000180)='./control/file0\x00') open$dir(&(0x7f00000000c0)='./control/file1\x00', 0xf0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@random={'user.', ')eth0\\%security\x00'}) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./control/file0\x00') close(r1) 03:35:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x2) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 03:35:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") chroot(&(0x7f00000003c0)='./file0\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000940)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="2e650f983df3cf0f01751a6a000f320fae29670f01ca0f01dfbaf80c66b8114eeb8266efbafc0cec0f01c8", 0x2b}], 0x1, 0x0, &(0x7f0000000080), 0x0) 03:35:42 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = open(&(0x7f0000000100)='./file1\x00', 0x8043, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 03:35:42 executing program 6: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{0x3, 0x0, 0x0, 0x0, 0xfff}]}, 0x58) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfa7) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="02e6a3516d345f8f762070") execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000040), 0x1000) 03:35:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x2) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 03:35:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x13c}, 0x1}, 0x0) 03:35:42 executing program 6: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{0x3, 0x0, 0x0, 0x0, 0xfff}]}, 0x58) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e328ca97fc1bef393ed92bbd3966ab727c614b63f86e62e402b95b272d8f04fbc4acaf6761e6f2086f3dc0955d9ef67e37b364fbeb3df109cdbb7c734526ef0d9c502ea69d87f9395fa9ead46d6c5657210a88d6129ed3dc482a99a4a58ab8cbfb6fcab4df741292e4c7f75968d30fee03bc6a8bb480b01de7e6b0ceea96bdea208f045276701de8729705b215e6a2e4f7222b67c1744d99f443c6391a8a322a871e41e521192894aa6c08405a9147b3c4aac89a792756dc005cc15c6f42bf14d8810e9020aed026f62cf90b3a8433a78846526a0cb82748175d01eac690d7fd7900c83a01449e70690ae90c5d0a92cd906b939d8770090dde379dc0d1c210a4fb422ec10deda6ab56a1754b0534ef9f7a93116269b9eeb9aa45e0aaae6fbc55630499d46863d1e887f9ee10e6e1a0ace563c84417b26129d23f9db3f920690fa2dfcea3eb0ec18f3635b722695ca501d8d9fff1f512d0da3d95bfa2e964256739b6533fad8b25f58b7e63ffb19549e23fd28d99de825e27b93ad7ebe74490e35f791a48eb153ac50434a2b68c7d94740dd7c8c8532e2b0bc32b99df25472fe431386f945aa05f6024507b84b78f9057a7e3951293a85e7af08f6c57670e9af0a39832e777253859a5d2a9a1e484314f8d3ac1246d5a8b5f10b8bc86b54ce9bd755523d90a7465b757b24255661caaffe3b6f4dd830116637d97e76652dd58f3c4e52aebeaf87658805e090a0c07de6dc25ff2755ad1c801b4e386dfc6f66bdf9872507a6b9817514d9e48275bb47af8b85475c9a109efb60ada2e785e0d2e336221bb788d5204fdd3bca644267681b5729a4d3187eec71cb663c5bb39131999acc78bcdcbe9655af4395a6b5150c60c5a412691ff43e9c3ec09b61664ad808793489f481651c78417c6d7281a8ee118dc99d8c432c082a61b5b56ad3e628f3248ea20f262f7d4b6c88e2608a9d926a4f6c31c368cb4093270135338ee43431108c4cb7bc36293f538dab0fc5bb9840b0d8c0ac9ec293b1efb8ac9cbcc4b45a69d272f04eba67415923a3fdac89a6e02e60a008fe24bcef6550a76ed1e0196d255c0b7519ee070592391706874e2fd07c4ebdb57e5f633fb8b27e7505d771397950a775076449759d8b15d87a7af90d2159e759467b4b681d000f8b07d08dc5a6378f622e41b2f36671125656e6973e05d3e9160c018b966161edff143061cfea74f5ff1a37e1247ba727cb6a41115e043ea57810a700e0b9ce4c18855022a8f66a051c82bdcc153596236a8ad0627895a445b9b2415dbe01dcc78a6261d9bb473e7674ac4b07ad148849d83f7ab3cc4d2f34fb9dcd37dbf09e364680b47db150533d2124b8731106dcf41605a4a03cac2b1aa94b1d41304cd372683e3955ea9fd21894c3010c69740ec9ce48427d4f5de27ef40539e41564860c0537d65f0823317b638412b196422f87fa03b559e5a3041acf347d18e2e7caf593eb5ebd34afafd5b61e88fe8d7760fd3a19ff7d2527c1d4fd9cd34c8cbd58ec6a1d2562fe4aa01a4a811953812d391be6e05a0e1e6cec82f4dd4267195531211091b6346f6e173a20ef8a87e0c446f12a3d76ef207f61da7df50ad891f4e99df3e1697866fb20beb0b65914fd50207c359faa67c96287ef19f6774031c08d35beefc22d0c8934afb6676538e39ee4b00dac7e196290677e43b066af5a047ca390f1e44dcc4b29a10061ca28fb7d3237d112f9614a7ff6a8dc64ba5f2836034db9ca281db030eab75969d68ea77b24ebeb9cb83de74fbc5a6a1130838e1252205787d5dec06b561cd0a9ca94c7fb9d893083e9e58527907cd7fc76733c33e489c7664588c2b0f3a731c069a097c72c0c06103806696ad8df3933b998c4390fb1be02daac0be7cb83c4b64970095171a3563c8015b1b8b1f1736e2516f00ac4293a4780630c3329dbf85574b138f97e9e467cad3b5e5d652ccc69f6810f3ef4276d68eb3c5d8fd2a19320737fee696623075498de7fdb34964c4bcc218f6d6fab74062d600df0e1ea0d5ba96aa6b2e2e39ca586f022d0724aabb7e2f000000003d44e1e4df3d78666988b919b1b012c381de21332520ae091b1b762bad2b9c94abd21359267b485133b9a20df94ce597dc88a3c90b354769479aac794808442af4e5d76737515b630f6a528dd98165c3a6fc23b922befa051aaade1a6956631d409f4f1ab35d864b1a1906f878a19280a9f6c067224edcbace25f1199fd6b49843a3f6612a64b836da23a40231cc302ddf9f0802a09fe56cf98fe9a5ee49f6d76eb2c8b8838e3241575861fcb692f82ce2cffa17606105de900656e67a903ff02799529d1dafe331b3b556883f8702c2e316cd610642f54c03e767d002d3755d0302cb787292ff58f17659f4d5ec889568bde143bdcfa83e6c75fc2b2cfd7d3f38542e9e65e4a1aa32a264fd3bfe136a7114b2d4ebd65b1f46b93643380049f1029775a8a2d72b991580acc500af325feea6798ff04ff939f09a2da62902204186d8ab74929e7f42d0bdee3bb237534405bcc66d903dc9409e16d5482d204b9ed3c441007ed4580a0c374d6dd13d79e02e6f3664c1b2c8141266bff97cd9d56d1c4b789c6a31fa52516c8ddc91512473520e26d4d525295fd8ed2bdde357ef35a65dfdf4085601b37795393624a72289dfac51210bfd9600c01fc095c0f4da94a246278642709b79fb96a15f62ec50ff512b1ab833ca3cd6c5ef4fe2ccd0831da211c08e2083fb3298677e676619eeaac1cc042693fdb1168ed4c7c9f4812e1c39e1c31107ef6c67c3c3c110bbc3e761a60227e3843c366e70d20a75f02a40894000c878ace90074514df13429cf627a674b255da65621905dd143c4bcd7a9eaa0507c7a6ffe6e9a0faa31d8115730590bde47ada199c22afe4eeca8df0a059189e7a0a5ab08a332c9582f86f840e4cc7df4f867202cde73258263fa986ed125b342c95cdf0903fbcdb473b9456170b1f6bf1483d2b29a41ecfde6d6e4f08e487f3aeb1e51318938ca2a7a055e481a9531ca171fb3035b1c5e55afa38c88c462282fc7047e9249b01ac71738365275848b63ad4ad41f2a6a9eecb040361784ba602800846193a3478c441dec0116fa6af180affcfe62bdab13612e05eff4c1820c6cb15cf05c5d8a8587b5c63f096fefd17d5bedad10eb34f824720ccefc6d1aa93ba0fab40ffbf99f4592676eea24c65b4afcf2ec249f0e61cebaa236045bb91ef3079f2d667d32c397efa5ae1307b7c618b1456c12a781943a49173dda100cd65dd68f9768ae397dad924343f5cc624c28a6f37576a63cbb8c7c0727e9ecff9b68864232e664f29d9a3e4cc6f3f4d14864aacacdc0cb2cd1b9acd843f396fb5b9dbb66a3f689a133a62152f56bffda38980e371a81d51e97059bef72284e9f72a825aae7ed5973ca95f40b0d6854acc280e00568f3d25e9388b746a65b16d9c093110bbf92cf03ff187bcf717bd62cc841925b8ad7a1ca1c616a464bda042647d5d79e31a4c0bb9f1cb730b96689fbb83114d3e6d009aeab91854cc700282f8591723582505613ba3b950e85c9930e7a0c28f0fa053a16b2d310cf3e34d973a9271b7f10b5d4ce6bda21840df549ee3381595795a0bc3ce7ce80ba9adf61a6f36b939c29b67e019ed11d9121bdf13e6bd51c02e9c9b2b3c8d7d83c52e77db6776eb468757c7c7937dd34c537e9bc9931895044f15fdd13c53796053b54b56d1048a741b81a73539ec8d46cf5ecbfaed5d14fd540e47cf4b9ec8318a313c9a36976c4430e3f223c807e256be8097764e251daebc2d37f33eab7a65aeeb22a1c359cbb7392ba4273108a9206f582bdb651e487d1cb16105e79bc03ac160f74e30017284293f47f15047e2ba61ef233636ed7db521f134c18bb389f45b9d9360fffd0b32923cefde1c84068bbe4e7ba0db3045d8f5ac07824b5444fb023ad849d4dc65bcfbf12e6389ecbf3582419e2ce3a49c1cb8740a996507847d2e0fe52a779b9080f1ed5a92c2cb94cdba848ef4ddaec9005a9f7b3ec1b480dbd8bd5cdec370a1baf6a57b3d67a2321d42f3f0b1dc4d93c6f0aac81d83355d13c64655039cbf5213fe9a073e4db8b50484aa7665defa582f058f6f483607526aafc8c556de8527ee11983da48570614290c198a6fdf2403404a35290f3b1ce6acad1af0db5780ec193788c77404331c5125bc72f6490755684bd6aed96f6b274e6d98794757858ba923c0811039b255fbe330914a01981cc432051cceb57726505006e08dd7396dcf5e2d7ba1c47eb97f4a22cc086e93596a70c92a14bb89d47ac7a4798911b21cd95ecc3c4e507e85e20cae8425686928c5150aecd113c749ca4d6cb36a0ce9ea5ee6a1cbf656bea389da6678fb41a7339108aa5ba6c7ce5c56244a8e5ce5d6d25bb24bbf112a984660942725142ec146fb965436ae85db0702e9dd2c7fa88c8d4a234b3c543fcf417d615b8d25de7aedb254d9de31ae5483ba254db7e0a6dd5ab35b4d5ac88241aca6d7f792547d064768edcbc043055467aacb37a2202f42671089cf01dd948d78bdc7af65ec70e11e9669b32165a8c4de7914ac8cac9b3957a5da2a833ef0480e82be2a4da143d81c3b2c474e18a65bcb8d9fb43bfcbccbf924add4fac1c6db2a0355419c4cdae20e5ac86bc3dfb2242fa3de6066596bd8a832753f02a42a06ec25b23d3a9e4e90c9fc855acb6d9884e8ef6f2bb50b532b9cf18091853d90acbcb99420f169898dbfbe2ab92c7a642d858c485a626b314d6334dcd6ce2d094e6e5c59c79e12c46e2fa6cb384b4abe2382e58c52778a4a4678e3332328ce5db89d3e65e12a593e7c7056370e0a8a3f2de3cecf74ca65fa27badd8456cd3cc3356b8d8ad20a14ff37ee3217f927475888eaa45ac413db623b921d35da02cb5fb4bebf5ea2b1c6410371a71ca694da1a0397243e9fe2b6beac4683e6a27e1787e8ae7eecf98717fce383fe0c381a29c1e1a10477428ac2c7edd4a8909a2fa19688754e68e80b4111e6d712ae1db41fc40726602c647db933878f294aa3c343cbcb5cb76a52659975bcfe64a46c880afa9252c2d38cada5c59cfd6276ccb1521b42a8a8717f646861650fcd82cb931d5954dec1d663d5688fdadec69eb79166e7348bb307ea1fe024b1988601e544618774bf38866e8228e63e36d420544afe6797814e21dba3f5102c532667588b92f723cea72b503f11fa0973c614da97e4f0b82825750206d30f55cd82ace1acf287519151635c2ebc60be4819ca5e59bc6e7e9c1965a0bfa92f98ea18f83dd2eca88b34674bebecd5127e58b1765d24f536a828769f2c5237909ddef5d76a5da4643ec8555b47ace35de60b2f4c66009c6a6d8779fb0a9607c90f56c17451dd34f6fd3241860b083a8378f661e2b0fa48ac3dc5ed108d51ee9b511ef9dc6c096b08a9447064f6fe01d3cc62d98f28aa7853091411ed212df07ee2d72aaac5e458adc3cf475dac7b21345b8abda17c8af329001a870d1b74835cb52c812a"], 0xfa7) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="02e6a3516d345f8f762070") execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000040), 0x1000) 03:35:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x40000002]}) 03:35:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_read_part_table(0x0, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="0be5a941a701000000000000009c9ba267486f9cc24554221e55a4cc302d2fd9a1ec1d7af1fb9a603f972b79a30000252fe11cf5d332dfd310d8e3b18a9bb7315745568225c3c4a0321e8517ca321b4033ccaa3e6406780b3f3751ca93c385f7ab309cd73f411d8526c86f2f41c0dd0d79a7639bd647f9b41d8c4fca3f1c1a4b0150fd42d2c3b9e10666e451f285a512ce8f7542e848c30119575f4f65831225f938238869ede9bb9e3c89d44fe80e3d9bdde7c5a5b81dbead77f6f884b3b42f9a57cd0df1978d7dd67244c821e8d797f980a187afc27fdca0a58d0a1733b6753eb4297913bd725e3263056efdd808a341170f2cca80826d79c706125f1622875ae92746cfe516a6afa447704edfe094bdde864ee5b055743393f19720ed497459804ce1a5dc7948a5279808b809e6b03939cc50be291824f18bd0614ddc8d59f2c5ef89fb8f3d28857ddad4157b44c6f63f047817c68a1e94e7386699994f6e33aecd057f39cc8f426f75e2aaeecec4a0d935892d69e7ae29cf50b458e44af73031cacd2106beea55c69fa4f828e1fdb93994b52d2fd76d29bb7b3275efe91b7de4a6e02553144aa913e105c3cad928b7ab1ff8db3574e5bf8fe12a76ce030c8112c7ec1ca381be36da1ebc40641321c9f20d6534d190f1154a88b00b2ad5396f7696e552736d493d19364ad5e290d4c88c5513f547d36b88a311a04873e2f5", 0x200}]) 03:35:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000540)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYBLOB], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x48, 0x0, &(0x7f00000004c0)="771f022090cf880a89a4b47a2bb361f53b8aa38dc5cc29ec6570f74b68120a03ef7f1a5028e3cafc9712294511f99a87d837dbc46b79ea2ff8f7824dee8d20fd4eca2b73130e67d1"}) [ 818.860898] Dev loop1 SGI disklabel: csum bad, label corrupted [ 818.867243] Dev loop1: unable to read RDB block 1 [ 818.872238] loop1: unable to read partition table [ 818.884697] loop1: partition table beyond EOD, truncated [ 818.890293] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 03:35:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x10000000011, r2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000002180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000002300), 0x0, &(0x7f0000002340)}}], 0x1, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1d0}) 03:35:43 executing program 0: r0 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000004000)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a702ca9c1a8d1dc1e4e29ed4d2927b5e8155ac02a25334d332f97653d9d90256b4da4ec6f2b44831a3b878ada2f3e5883f2f7c806fb61c1993cc4f19a22c61e4"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r2}, 0x10, &(0x7f000000eff0)={&(0x7f0000000040)={0x1, 0xfffffffffffffff9, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}, 0x1}, 0x0) 03:35:43 executing program 6: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{0x3, 0x0, 0x0, 0x0, 0xfff}]}, 0x58) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e328ca97fc1bef393ed92bbd3966ab727c614b63f86e62e402b95b272d8f04fbc4acaf6761e6f2086f3dc0955d9ef67e37b364fbeb3df109cdbb7c734526ef0d9c502ea69d87f9395fa9ead46d6c5657210a88d6129ed3dc482a99a4a58ab8cbfb6fcab4df741292e4c7f75968d30fee03bc6a8bb480b01de7e6b0ceea96bdea208f045276701de8729705b215e6a2e4f7222b67c1744d99f443c6391a8a322a871e41e521192894aa6c08405a9147b3c4aac89a792756dc005cc15c6f42bf14d8810e9020aed026f62cf90b3a8433a78846526a0cb82748175d01eac690d7fd7900c83a01449e70690ae90c5d0a92cd906b939d8770090dde379dc0d1c210a4fb422ec10deda6ab56a1754b0534ef9f7a93116269b9eeb9aa45e0aaae6fbc55630499d46863d1e887f9ee10e6e1a0ace563c84417b26129d23f9db3f920690fa2dfcea3eb0ec18f3635b722695ca501d8d9fff1f512d0da3d95bfa2e964256739b6533fad8b25f58b7e63ffb19549e23fd28d99de825e27b93ad7ebe74490e35f791a48eb153ac50434a2b68c7d94740dd7c8c8532e2b0bc32b99df25472fe431386f945aa05f6024507b84b78f9057a7e3951293a85e7af08f6c57670e9af0a39832e777253859a5d2a9a1e484314f8d3ac1246d5a8b5f10b8bc86b54ce9bd755523d90a7465b757b24255661caaffe3b6f4dd830116637d97e76652dd58f3c4e52aebeaf87658805e090a0c07de6dc25ff2755ad1c801b4e386dfc6f66bdf9872507a6b9817514d9e48275bb47af8b85475c9a109efb60ada2e785e0d2e336221bb788d5204fdd3bca644267681b5729a4d3187eec71cb663c5bb39131999acc78bcdcbe9655af4395a6b5150c60c5a412691ff43e9c3ec09b61664ad808793489f481651c78417c6d7281a8ee118dc99d8c432c082a61b5b56ad3e628f3248ea20f262f7d4b6c88e2608a9d926a4f6c31c368cb4093270135338ee43431108c4cb7bc36293f538dab0fc5bb9840b0d8c0ac9ec293b1efb8ac9cbcc4b45a69d272f04eba67415923a3fdac89a6e02e60a008fe24bcef6550a76ed1e0196d255c0b7519ee070592391706874e2fd07c4ebdb57e5f633fb8b27e7505d771397950a775076449759d8b15d87a7af90d2159e759467b4b681d000f8b07d08dc5a6378f622e41b2f36671125656e6973e05d3e9160c018b966161edff143061cfea74f5ff1a37e1247ba727cb6a41115e043ea57810a700e0b9ce4c18855022a8f66a051c82bdcc153596236a8ad0627895a445b9b2415dbe01dcc78a6261d9bb473e7674ac4b07ad148849d83f7ab3cc4d2f34fb9dcd37dbf09e364680b47db150533d2124b8731106dcf41605a4a03cac2b1aa94b1d41304cd372683e3955ea9fd21894c3010c69740ec9ce48427d4f5de27ef40539e41564860c0537d65f0823317b638412b196422f87fa03b559e5a3041acf347d18e2e7caf593eb5ebd34afafd5b61e88fe8d7760fd3a19ff7d2527c1d4fd9cd34c8cbd58ec6a1d2562fe4aa01a4a811953812d391be6e05a0e1e6cec82f4dd4267195531211091b6346f6e173a20ef8a87e0c446f12a3d76ef207f61da7df50ad891f4e99df3e1697866fb20beb0b65914fd50207c359faa67c96287ef19f6774031c08d35beefc22d0c8934afb6676538e39ee4b00dac7e196290677e43b066af5a047ca390f1e44dcc4b29a10061ca28fb7d3237d112f9614a7ff6a8dc64ba5f2836034db9ca281db030eab75969d68ea77b24ebeb9cb83de74fbc5a6a1130838e1252205787d5dec06b561cd0a9ca94c7fb9d893083e9e58527907cd7fc76733c33e489c7664588c2b0f3a731c069a097c72c0c06103806696ad8df3933b998c4390fb1be02daac0be7cb83c4b64970095171a3563c8015b1b8b1f1736e2516f00ac4293a4780630c3329dbf85574b138f97e9e467cad3b5e5d652ccc69f6810f3ef4276d68eb3c5d8fd2a19320737fee696623075498de7fdb34964c4bcc218f6d6fab74062d600df0e1ea0d5ba96aa6b2e2e39ca586f022d0724aabb7e2f000000003d44e1e4df3d78666988b919b1b012c381de21332520ae091b1b762bad2b9c94abd21359267b485133b9a20df94ce597dc88a3c90b354769479aac794808442af4e5d76737515b630f6a528dd98165c3a6fc23b922befa051aaade1a6956631d409f4f1ab35d864b1a1906f878a19280a9f6c067224edcbace25f1199fd6b49843a3f6612a64b836da23a40231cc302ddf9f0802a09fe56cf98fe9a5ee49f6d76eb2c8b8838e3241575861fcb692f82ce2cffa17606105de900656e67a903ff02799529d1dafe331b3b556883f8702c2e316cd610642f54c03e767d002d3755d0302cb787292ff58f17659f4d5ec889568bde143bdcfa83e6c75fc2b2cfd7d3f38542e9e65e4a1aa32a264fd3bfe136a7114b2d4ebd65b1f46b93643380049f1029775a8a2d72b991580acc500af325feea6798ff04ff939f09a2da62902204186d8ab74929e7f42d0bdee3bb237534405bcc66d903dc9409e16d5482d204b9ed3c441007ed4580a0c374d6dd13d79e02e6f3664c1b2c8141266bff97cd9d56d1c4b789c6a31fa52516c8ddc91512473520e26d4d525295fd8ed2bdde357ef35a65dfdf4085601b37795393624a72289dfac51210bfd9600c01fc095c0f4da94a246278642709b79fb96a15f62ec50ff512b1ab833ca3cd6c5ef4fe2ccd0831da211c08e2083fb3298677e676619eeaac1cc042693fdb1168ed4c7c9f4812e1c39e1c31107ef6c67c3c3c110bbc3e761a60227e3843c366e70d20a75f02a40894000c878ace90074514df13429cf627a674b255da65621905dd143c4bcd7a9eaa0507c7a6ffe6e9a0faa31d8115730590bde47ada199c22afe4eeca8df0a059189e7a0a5ab08a332c9582f86f840e4cc7df4f867202cde73258263fa986ed125b342c95cdf0903fbcdb473b9456170b1f6bf1483d2b29a41ecfde6d6e4f08e487f3aeb1e51318938ca2a7a055e481a9531ca171fb3035b1c5e55afa38c88c462282fc7047e9249b01ac71738365275848b63ad4ad41f2a6a9eecb040361784ba602800846193a3478c441dec0116fa6af180affcfe62bdab13612e05eff4c1820c6cb15cf05c5d8a8587b5c63f096fefd17d5bedad10eb34f824720ccefc6d1aa93ba0fab40ffbf99f4592676eea24c65b4afcf2ec249f0e61cebaa236045bb91ef3079f2d667d32c397efa5ae1307b7c618b1456c12a781943a49173dda100cd65dd68f9768ae397dad924343f5cc624c28a6f37576a63cbb8c7c0727e9ecff9b68864232e664f29d9a3e4cc6f3f4d14864aacacdc0cb2cd1b9acd843f396fb5b9dbb66a3f689a133a62152f56bffda38980e371a81d51e97059bef72284e9f72a825aae7ed5973ca95f40b0d6854acc280e00568f3d25e9388b746a65b16d9c093110bbf92cf03ff187bcf717bd62cc841925b8ad7a1ca1c616a464bda042647d5d79e31a4c0bb9f1cb730b96689fbb83114d3e6d009aeab91854cc700282f8591723582505613ba3b950e85c9930e7a0c28f0fa053a16b2d310cf3e34d973a9271b7f10b5d4ce6bda21840df549ee3381595795a0bc3ce7ce80ba9adf61a6f36b939c29b67e019ed11d9121bdf13e6bd51c02e9c9b2b3c8d7d83c52e77db6776eb468757c7c7937dd34c537e9bc9931895044f15fdd13c53796053b54b56d1048a741b81a73539ec8d46cf5ecbfaed5d14fd540e47cf4b9ec8318a313c9a36976c4430e3f223c807e256be8097764e251daebc2d37f33eab7a65aeeb22a1c359cbb7392ba4273108a9206f582bdb651e487d1cb16105e79bc03ac160f74e30017284293f47f15047e2ba61ef233636ed7db521f134c18bb389f45b9d9360fffd0b32923cefde1c84068bbe4e7ba0db3045d8f5ac07824b5444fb023ad849d4dc65bcfbf12e6389ecbf3582419e2ce3a49c1cb8740a996507847d2e0fe52a779b9080f1ed5a92c2cb94cdba848ef4ddaec9005a9f7b3ec1b480dbd8bd5cdec370a1baf6a57b3d67a2321d42f3f0b1dc4d93c6f0aac81d83355d13c64655039cbf5213fe9a073e4db8b50484aa7665defa582f058f6f483607526aafc8c556de8527ee11983da48570614290c198a6fdf2403404a35290f3b1ce6acad1af0db5780ec193788c77404331c5125bc72f6490755684bd6aed96f6b274e6d98794757858ba923c0811039b255fbe330914a01981cc432051cceb57726505006e08dd7396dcf5e2d7ba1c47eb97f4a22cc086e93596a70c92a14bb89d47ac7a4798911b21cd95ecc3c4e507e85e20cae8425686928c5150aecd113c749ca4d6cb36a0ce9ea5ee6a1cbf656bea389da6678fb41a7339108aa5ba6c7ce5c56244a8e5ce5d6d25bb24bbf112a984660942725142ec146fb965436ae85db0702e9dd2c7fa88c8d4a234b3c543fcf417d615b8d25de7aedb254d9de31ae5483ba254db7e0a6dd5ab35b4d5ac88241aca6d7f792547d064768edcbc043055467aacb37a2202f42671089cf01dd948d78bdc7af65ec70e11e9669b32165a8c4de7914ac8cac9b3957a5da2a833ef0480e82be2a4da143d81c3b2c474e18a65bcb8d9fb43bfcbccbf924add4fac1c6db2a0355419c4cdae20e5ac86bc3dfb2242fa3de6066596bd8a832753f02a42a06ec25b23d3a9e4e90c9fc855acb6d9884e8ef6f2bb50b532b9cf18091853d90acbcb99420f169898dbfbe2ab92c7a642d858c485a626b314d6334dcd6ce2d094e6e5c59c79e12c46e2fa6cb384b4abe2382e58c52778a4a4678e3332328ce5db89d3e65e12a593e7c7056370e0a8a3f2de3cecf74ca65fa27badd8456cd3cc3356b8d8ad20a14ff37ee3217f927475888eaa45ac413db623b921d35da02cb5fb4bebf5ea2b1c6410371a71ca694da1a0397243e9fe2b6beac4683e6a27e1787e8ae7eecf98717fce383fe0c381a29c1e1a10477428ac2c7edd4a8909a2fa19688754e68e80b4111e6d712ae1db41fc40726602c647db933878f294aa3c343cbcb5cb76a52659975bcfe64a46c880afa9252c2d38cada5c59cfd6276ccb1521b42a8a8717f646861650fcd82cb931d5954dec1d663d5688fdadec69eb79166e7348bb307ea1fe024b1988601e544618774bf38866e8228e63e36d420544afe6797814e21dba3f5102c532667588b92f723cea72b503f11fa0973c614da97e4f0b82825750206d30f55cd82ace1acf287519151635c2ebc60be4819ca5e59bc6e7e9c1965a0bfa92f98ea18f83dd2eca88b34674bebecd5127e58b1765d24f536a828769f2c5237909ddef5d76a5da4643ec8555b47ace35de60b2f4c66009c6a6d8779fb0a9607c90f56c17451dd34f6fd3241860b083a8378f661e2b0fa48ac3dc5ed108d51ee9b511ef9dc6c096b08a9447064f6fe01d3cc62d98f28aa7853091411ed212df07ee2d72aaac5e458adc3cf475dac7b21345b8abda17c8af329001a870d1b74835cb52c812a"], 0xfa7) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="02e6a3516d345f8f762070") execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000040), 0x1000) [ 818.921645] Dev loop1 SGI disklabel: csum bad, label corrupted [ 818.927938] Dev loop1: unable to read RDB block 1 [ 818.932887] loop1: unable to read partition table [ 818.938438] loop1: partition table beyond EOD, truncated [ 818.944117] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 819.024710] binder: 28628:28633 got reply transaction with no transaction stack [ 819.032441] binder: 28628:28633 transaction failed 29201/-71, size 0-0 line 2759 [ 819.040886] binder_alloc: binder_alloc_mmap_handler: 28628 20001000-20004000 already mapped failed -16 [ 819.052215] binder: BINDER_SET_CONTEXT_MGR already set [ 819.061485] binder: 28628:28633 ioctl 40046207 0 returned -16 [ 819.069286] binder_alloc: 28628: binder_alloc_buf, no vma 03:35:43 executing program 1: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x2}, 0x20) 03:35:43 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="025cc83d6d00008f762070") close(r0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x802, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x366, 0x0, 0x0, 0x4e) [ 819.075131] binder: 28628:28634 transaction failed 29189/-3, size 0-0 line 2967 [ 819.083932] binder: 28628:28633 got reply transaction with no transaction stack [ 819.091487] binder: 28628:28633 transaction failed 29201/-71, size 0-0 line 2759 [ 819.101182] binder: release 28628:28633 transaction 239 out, still active [ 819.108442] binder: undelivered TRANSACTION_COMPLETE [ 819.129576] binder: undelivered TRANSACTION_ERROR: 29201 [ 819.151532] binder: undelivered TRANSACTION_ERROR: 29189 [ 819.157212] binder: send failed reply for transaction 239, target dead 03:35:43 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000180)='./control/file0\x00') open$dir(&(0x7f00000000c0)='./control/file1\x00', 0xf0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@random={'user.', ')eth0\\%security\x00'}) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./control/file0\x00') close(r1) 03:35:43 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x88f5}}}, 0x0) 03:35:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4000000000000087) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) io_setup(0x101, &(0x7f00000000c0)=0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=@srh={0x0, 0x0, 0x4}, 0x8) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001ec0)}]) 03:35:43 executing program 0: r0 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x77359400}}, &(0x7f00000000c0)) 03:35:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000a40)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)="7465616d5f736c6176655f313a0300"}) 03:35:43 executing program 6: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{0x3, 0x0, 0x0, 0x0, 0xfff}]}, 0x58) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e328ca97fc1bef393ed92bbd3966ab727c614b63f86e62e402b95b272d8f04fbc4acaf6761e6f2086f3dc0955d9ef67e37b364fbeb3df109cdbb7c734526ef0d9c502ea69d87f9395fa9ead46d6c5657210a88d6129ed3dc482a99a4a58ab8cbfb6fcab4df741292e4c7f75968d30fee03bc6a8bb480b01de7e6b0ceea96bdea208f045276701de8729705b215e6a2e4f7222b67c1744d99f443c6391a8a322a871e41e521192894aa6c08405a9147b3c4aac89a792756dc005cc15c6f42bf14d8810e9020aed026f62cf90b3a8433a78846526a0cb82748175d01eac690d7fd7900c83a01449e70690ae90c5d0a92cd906b939d8770090dde379dc0d1c210a4fb422ec10deda6ab56a1754b0534ef9f7a93116269b9eeb9aa45e0aaae6fbc55630499d46863d1e887f9ee10e6e1a0ace563c84417b26129d23f9db3f920690fa2dfcea3eb0ec18f3635b722695ca501d8d9fff1f512d0da3d95bfa2e964256739b6533fad8b25f58b7e63ffb19549e23fd28d99de825e27b93ad7ebe74490e35f791a48eb153ac50434a2b68c7d94740dd7c8c8532e2b0bc32b99df25472fe431386f945aa05f6024507b84b78f9057a7e3951293a85e7af08f6c57670e9af0a39832e777253859a5d2a9a1e484314f8d3ac1246d5a8b5f10b8bc86b54ce9bd755523d90a7465b757b24255661caaffe3b6f4dd830116637d97e76652dd58f3c4e52aebeaf87658805e090a0c07de6dc25ff2755ad1c801b4e386dfc6f66bdf9872507a6b9817514d9e48275bb47af8b85475c9a109efb60ada2e785e0d2e336221bb788d5204fdd3bca644267681b5729a4d3187eec71cb663c5bb39131999acc78bcdcbe9655af4395a6b5150c60c5a412691ff43e9c3ec09b61664ad808793489f481651c78417c6d7281a8ee118dc99d8c432c082a61b5b56ad3e628f3248ea20f262f7d4b6c88e2608a9d926a4f6c31c368cb4093270135338ee43431108c4cb7bc36293f538dab0fc5bb9840b0d8c0ac9ec293b1efb8ac9cbcc4b45a69d272f04eba67415923a3fdac89a6e02e60a008fe24bcef6550a76ed1e0196d255c0b7519ee070592391706874e2fd07c4ebdb57e5f633fb8b27e7505d771397950a775076449759d8b15d87a7af90d2159e759467b4b681d000f8b07d08dc5a6378f622e41b2f36671125656e6973e05d3e9160c018b966161edff143061cfea74f5ff1a37e1247ba727cb6a41115e043ea57810a700e0b9ce4c18855022a8f66a051c82bdcc153596236a8ad0627895a445b9b2415dbe01dcc78a6261d9bb473e7674ac4b07ad148849d83f7ab3cc4d2f34fb9dcd37dbf09e364680b47db150533d2124b8731106dcf41605a4a03cac2b1aa94b1d41304cd372683e3955ea9fd21894c3010c69740ec9ce48427d4f5de27ef40539e41564860c0537d65f0823317b638412b196422f87fa03b559e5a3041acf347d18e2e7caf593eb5ebd34afafd5b61e88fe8d7760fd3a19ff7d2527c1d4fd9cd34c8cbd58ec6a1d2562fe4aa01a4a811953812d391be6e05a0e1e6cec82f4dd4267195531211091b6346f6e173a20ef8a87e0c446f12a3d76ef207f61da7df50ad891f4e99df3e1697866fb20beb0b65914fd50207c359faa67c96287ef19f6774031c08d35beefc22d0c8934afb6676538e39ee4b00dac7e196290677e43b066af5a047ca390f1e44dcc4b29a10061ca28fb7d3237d112f9614a7ff6a8dc64ba5f2836034db9ca281db030eab75969d68ea77b24ebeb9cb83de74fbc5a6a1130838e1252205787d5dec06b561cd0a9ca94c7fb9d893083e9e58527907cd7fc76733c33e489c7664588c2b0f3a731c069a097c72c0c06103806696ad8df3933b998c4390fb1be02daac0be7cb83c4b64970095171a3563c8015b1b8b1f1736e2516f00ac4293a4780630c3329dbf85574b138f97e9e467cad3b5e5d652ccc69f6810f3ef4276d68eb3c5d8fd2a19320737fee696623075498de7fdb34964c4bcc218f6d6fab74062d600df0e1ea0d5ba96aa6b2e2e39ca586f022d0724aabb7e2f000000003d44e1e4df3d78666988b919b1b012c381de21332520ae091b1b762bad2b9c94abd21359267b485133b9a20df94ce597dc88a3c90b354769479aac794808442af4e5d76737515b630f6a528dd98165c3a6fc23b922befa051aaade1a6956631d409f4f1ab35d864b1a1906f878a19280a9f6c067224edcbace25f1199fd6b49843a3f6612a64b836da23a40231cc302ddf9f0802a09fe56cf98fe9a5ee49f6d76eb2c8b8838e3241575861fcb692f82ce2cffa17606105de900656e67a903ff02799529d1dafe331b3b556883f8702c2e316cd610642f54c03e767d002d3755d0302cb787292ff58f17659f4d5ec889568bde143bdcfa83e6c75fc2b2cfd7d3f38542e9e65e4a1aa32a264fd3bfe136a7114b2d4ebd65b1f46b93643380049f1029775a8a2d72b991580acc500af325feea6798ff04ff939f09a2da62902204186d8ab74929e7f42d0bdee3bb237534405bcc66d903dc9409e16d5482d204b9ed3c441007ed4580a0c374d6dd13d79e02e6f3664c1b2c8141266bff97cd9d56d1c4b789c6a31fa52516c8ddc91512473520e26d4d525295fd8ed2bdde357ef35a65dfdf4085601b37795393624a72289dfac51210bfd9600c01fc095c0f4da94a246278642709b79fb96a15f62ec50ff512b1ab833ca3cd6c5ef4fe2ccd0831da211c08e2083fb3298677e676619eeaac1cc042693fdb1168ed4c7c9f4812e1c39e1c31107ef6c67c3c3c110bbc3e761a60227e3843c366e70d20a75f02a40894000c878ace90074514df13429cf627a674b255da65621905dd143c4bcd7a9eaa0507c7a6ffe6e9a0faa31d8115730590bde47ada199c22afe4eeca8df0a059189e7a0a5ab08a332c9582f86f840e4cc7df4f867202cde73258263fa986ed125b342c95cdf0903fbcdb473b9456170b1f6bf1483d2b29a41ecfde6d6e4f08e487f3aeb1e51318938ca2a7a055e481a9531ca171fb3035b1c5e55afa38c88c462282fc7047e9249b01ac71738365275848b63ad4ad41f2a6a9eecb040361784ba602800846193a3478c441dec0116fa6af180affcfe62bdab13612e05eff4c1820c6cb15cf05c5d8a8587b5c63f096fefd17d5bedad10eb34f824720ccefc6d1aa93ba0fab40ffbf99f4592676eea24c65b4afcf2ec249f0e61cebaa236045bb91ef3079f2d667d32c397efa5ae1307b7c618b1456c12a781943a49173dda100cd65dd68f9768ae397dad924343f5cc624c28a6f37576a63cbb8c7c0727e9ecff9b68864232e664f29d9a3e4cc6f3f4d14864aacacdc0cb2cd1b9acd843f396fb5b9dbb66a3f689a133a62152f56bffda38980e371a81d51e97059bef72284e9f72a825aae7ed5973ca95f40b0d6854acc280e00568f3d25e9388b746a65b16d9c093110bbf92cf03ff187bcf717bd62cc841925b8ad7a1ca1c616a464bda042647d5d79e31a4c0bb9f1cb730b96689fbb83114d3e6d009aeab91854cc700282f8591723582505613ba3b950e85c9930e7a0c28f0fa053a16b2d310cf3e34d973a9271b7f10b5d4ce6bda21840df549ee3381595795a0bc3ce7ce80ba9adf61a6f36b939c29b67e019ed11d9121bdf13e6bd51c02e9c9b2b3c8d7d83c52e77db6776eb468757c7c7937dd34c537e9bc9931895044f15fdd13c53796053b54b56d1048a741b81a73539ec8d46cf5ecbfaed5d14fd540e47cf4b9ec8318a313c9a36976c4430e3f223c807e256be8097764e251daebc2d37f33eab7a65aeeb22a1c359cbb7392ba4273108a9206f582bdb651e487d1cb16105e79bc03ac160f74e30017284293f47f15047e2ba61ef233636ed7db521f134c18bb389f45b9d9360fffd0b32923cefde1c84068bbe4e7ba0db3045d8f5ac07824b5444fb023ad849d4dc65bcfbf12e6389ecbf3582419e2ce3a49c1cb8740a996507847d2e0fe52a779b9080f1ed5a92c2cb94cdba848ef4ddaec9005a9f7b3ec1b480dbd8bd5cdec370a1baf6a57b3d67a2321d42f3f0b1dc4d93c6f0aac81d83355d13c64655039cbf5213fe9a073e4db8b50484aa7665defa582f058f6f483607526aafc8c556de8527ee11983da48570614290c198a6fdf2403404a35290f3b1ce6acad1af0db5780ec193788c77404331c5125bc72f6490755684bd6aed96f6b274e6d98794757858ba923c0811039b255fbe330914a01981cc432051cceb57726505006e08dd7396dcf5e2d7ba1c47eb97f4a22cc086e93596a70c92a14bb89d47ac7a4798911b21cd95ecc3c4e507e85e20cae8425686928c5150aecd113c749ca4d6cb36a0ce9ea5ee6a1cbf656bea389da6678fb41a7339108aa5ba6c7ce5c56244a8e5ce5d6d25bb24bbf112a984660942725142ec146fb965436ae85db0702e9dd2c7fa88c8d4a234b3c543fcf417d615b8d25de7aedb254d9de31ae5483ba254db7e0a6dd5ab35b4d5ac88241aca6d7f792547d064768edcbc043055467aacb37a2202f42671089cf01dd948d78bdc7af65ec70e11e9669b32165a8c4de7914ac8cac9b3957a5da2a833ef0480e82be2a4da143d81c3b2c474e18a65bcb8d9fb43bfcbccbf924add4fac1c6db2a0355419c4cdae20e5ac86bc3dfb2242fa3de6066596bd8a832753f02a42a06ec25b23d3a9e4e90c9fc855acb6d9884e8ef6f2bb50b532b9cf18091853d90acbcb99420f169898dbfbe2ab92c7a642d858c485a626b314d6334dcd6ce2d094e6e5c59c79e12c46e2fa6cb384b4abe2382e58c52778a4a4678e3332328ce5db89d3e65e12a593e7c7056370e0a8a3f2de3cecf74ca65fa27badd8456cd3cc3356b8d8ad20a14ff37ee3217f927475888eaa45ac413db623b921d35da02cb5fb4bebf5ea2b1c6410371a71ca694da1a0397243e9fe2b6beac4683e6a27e1787e8ae7eecf98717fce383fe0c381a29c1e1a10477428ac2c7edd4a8909a2fa19688754e68e80b4111e6d712ae1db41fc40726602c647db933878f294aa3c343cbcb5cb76a52659975bcfe64a46c880afa9252c2d38cada5c59cfd6276ccb1521b42a8a8717f646861650fcd82cb931d5954dec1d663d5688fdadec69eb79166e7348bb307ea1fe024b1988601e544618774bf38866e8228e63e36d420544afe6797814e21dba3f5102c532667588b92f723cea72b503f11fa0973c614da97e4f0b82825750206d30f55cd82ace1acf287519151635c2ebc60be4819ca5e59bc6e7e9c1965a0bfa92f98ea18f83dd2eca88b34674bebecd5127e58b1765d24f536a828769f2c5237909ddef5d76a5da4643ec8555b47ace35de60b2f4c66009c6a6d8779fb0a9607c90f56c17451dd34f6fd3241860b083a8378f661e2b0fa48ac3dc5ed108d51ee9b511ef9dc6c096b08a9447064f6fe01d3cc62d98f28aa7853091411ed212df07ee2d72aaac5e458adc3cf475dac7b21345b8abda17c8af329001a870d1b74835cb52c812a"], 0xfa7) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="02e6a3516d345f8f762070") execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000040), 0x1000) 03:35:43 executing program 2: r0 = socket(0x10000000a, 0x3, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffff9}) 03:35:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@multicast2=0xe0000002, @multicast1=0xe0000001, r3}, 0xc) 03:35:43 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91) 03:35:43 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x7, 0x4) 03:35:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) 03:35:43 executing program 5: r0 = socket$inet6(0xa, 0x1020000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b660800666174000204010a0200027400f8", 0x16}], 0x0, &(0x7f00000000c0)) [ 819.419709] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.426273] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.465458] device bridge0 left promiscuous mode 03:35:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @rand_addr}}}, 0xa0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) 03:35:43 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x4000000d, 0x0) 03:35:43 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x105, 0x38, 0x3e5, 0x24e, 0x100000001, 0x20, 0x2, 0x0, 0x2, 0x3}, [{0x60000000, 0xdfbb, 0x3, 0x100, 0x0, 0x21, 0x1, 0x4}, {0x6474e555, 0x2, 0x8000, 0x0, 0x1}]}, 0x78) 03:35:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) [ 819.811871] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.818425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.825147] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.831686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.838495] device bridge0 entered promiscuous mode [ 819.844472] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 819.853094] FAT-fs (loop5): count of clusters too big (4294966676) [ 819.859632] FAT-fs (loop5): Can't find a valid FAT filesystem [ 819.866323] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.872766] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.879828] device bridge0 left promiscuous mode [ 819.890655] FAT-fs (loop5): count of clusters too big (4294966676) [ 819.897080] FAT-fs (loop5): Can't find a valid FAT filesystem 03:35:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) 03:35:44 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000180)='./control/file0\x00') open$dir(&(0x7f00000000c0)='./control/file1\x00', 0xf0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@random={'user.', ')eth0\\%security\x00'}) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./control/file0\x00') close(r1) 03:35:44 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) 03:35:44 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0x1b0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2}, [@NDA_DST_MAC={0xc, 0x1, @link_local={0x1, 0x80, 0xc2}}]}, 0xfe35}, 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:35:44 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x105, 0x38, 0x3e5, 0x24e, 0x100000001, 0x20, 0x2, 0x0, 0x2, 0x3}, [{0x60000000, 0xdfbb, 0x3, 0x100, 0x0, 0x21, 0x1, 0x4}, {0x6474e555, 0x2, 0x8000, 0x0, 0x1}]}, 0x78) 03:35:44 executing program 5: r0 = socket$inet6(0xa, 0x1020000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b660800666174000204010a0200027400f8", 0x16}], 0x0, &(0x7f00000000c0)) 03:35:44 executing program 2: r0 = socket(0x10000000a, 0x3, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffff9}) 03:35:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) [ 820.358021] FAT-fs (loop5): count of clusters too big (4294966676) [ 820.361950] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.364468] FAT-fs (loop5): Can't find a valid FAT filesystem [ 820.370919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.383671] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.390165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.397243] device bridge0 entered promiscuous mode [ 820.428917] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:35:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0xb, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)={0x1, 0x1}) 03:35:44 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x105, 0x38, 0x3e5, 0x24e, 0x100000001, 0x20, 0x2, 0x0, 0x2, 0x3}, [{0x60000000, 0xdfbb, 0x3, 0x100, 0x0, 0x21, 0x1, 0x4}, {0x6474e555, 0x2, 0x8000, 0x0, 0x1}]}, 0x78) 03:35:44 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) 03:35:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x37, &(0x7f0000000040)={0x0, {}, 0x0, 0x1}, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 03:35:44 executing program 2: r0 = socket(0x10000000a, 0x3, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffff9}) 03:35:44 executing program 5: r0 = socket$inet6(0xa, 0x1020000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b660800666174000204010a0200027400f8", 0x16}], 0x0, &(0x7f00000000c0)) 03:35:44 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) 03:35:44 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x105, 0x38, 0x3e5, 0x24e, 0x100000001, 0x20, 0x2, 0x0, 0x2, 0x3}, [{0x60000000, 0xdfbb, 0x3, 0x100, 0x0, 0x21, 0x1, 0x4}, {0x6474e555, 0x2, 0x8000, 0x0, 0x1}]}, 0x78) 03:35:44 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) [ 820.613560] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.620082] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.627101] device bridge0 left promiscuous mode [ 820.780960] FAT-fs (loop5): count of clusters too big (4294966676) [ 820.787573] FAT-fs (loop5): Can't find a valid FAT filesystem [ 820.827540] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.833993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.840615] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.846973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.853701] device bridge0 entered promiscuous mode [ 820.859271] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:35:45 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000180)='./control/file0\x00') open$dir(&(0x7f00000000c0)='./control/file1\x00', 0xf0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@random={'user.', ')eth0\\%security\x00'}) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./control/file0\x00') close(r1) 03:35:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000200000000e6", 0x20) 03:35:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x3, 0x0, 0x0, 'bond_slave_1\x00', 'tunl0\x00', 'syz_tun\x00', 'ifb0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xd8, 0x138, 0x168, [@cluster={'cluster\x00', 0x10, {{0x0, 0x1531}}}, @cpu={'cpu\x00', 0x8}]}, [@common=@STANDARD={'\x00', 0x8}, @common=@redirect={'redirect\x00', 0x8}]}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x270) 03:35:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r3 = dup2(r2, r1) write$sndseq(r2, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x8, 0x0, 0x1000800003fd, @tick, {}, {}, @raw32}], 0x30) 03:35:45 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000000000)="1c", 0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r2, &(0x7f0000000100)="14", 0x1) 03:35:45 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f00000004c0)='./control\x00', 0x0) creat(&(0x7f0000000280)='./control/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./control\x00') 03:35:45 executing program 5: r0 = socket$inet6(0xa, 0x1020000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b660800666174000204010a0200027400f8", 0x16}], 0x0, &(0x7f00000000c0)) 03:35:45 executing program 2: r0 = socket(0x10000000a, 0x3, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffff9}) 03:35:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x82, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2}, 0x28) 03:35:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0)=[@cr4={0x1, 0xb987a233691e0619}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:45 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f00000004c0)='./control\x00', 0x0) creat(&(0x7f0000000280)='./control/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./control\x00') [ 821.466361] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.473017] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.477263] xt_cluster: node mask cannot exceed total number of nodes [ 821.484037] device bridge0 left promiscuous mode 03:35:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) write(r0, &(0x7f0000caf000), 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 821.667177] *** Guest State *** [ 821.670731] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 821.679608] CR4: actual=0x0000000000022040, shadow=0x0000000000020000, gh_mask=ffffffffffffe871 [ 821.688487] CR3 = 0x0000000000000000 [ 821.692252] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 821.698284] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 821.704344] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:35:45 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs(r1, &(0x7f0000000100)='fdinfo\x00') r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r3) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) [ 821.711046] CS: sel=0x0000, attr=0x0809b, limit=0x00000fff, base=0x0000000000000000 [ 821.719053] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 821.727073] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 821.735112] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 821.743147] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 821.751165] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 821.759188] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 821.767293] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 821.775337] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 821.777895] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.783358] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 821.783368] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 821.783382] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 821.789777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.797796] Interruptibility = 00000008 ActivityState = 00000000 [ 821.804511] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.811731] *** Host State *** [ 821.811746] RIP = 0xffffffff811f4694 RSP = 0xffff8801982d7350 [ 821.818320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.824485] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 821.824498] FSBase=00007ff2dc2ca700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 821.831212] device bridge0 entered promiscuous mode [ 821.834099] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 821.834112] CR0=0000000080050033 CR3=00000001b3048000 CR4=00000000001426e0 [ 821.834125] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 821.845966] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 821.846595] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 821.846599] *** Control State *** [ 821.846609] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 821.846616] EntryControls=0000d1ff ExitControls=0023efff [ 821.846627] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 821.846639] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 821.853771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 821.860870] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 821.860878] reason=80000021 qualification=0000000000000000 [ 821.860884] IDTVectoring: info=00000000 errcode=00000000 [ 821.860890] TSC Offset = 0xfffffe4504e7df70 [ 821.860898] EPT pointer = 0x00000001c61cf01e 03:35:46 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) 03:35:46 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f00000004c0)='./control\x00', 0x0) creat(&(0x7f0000000280)='./control/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./control\x00') 03:35:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) read$eventfd(r2, &(0x7f0000000080), 0x2f7) write$eventfd(r2, &(0x7f0000000040), 0x8) [ 821.969398] FAT-fs (loop5): count of clusters too big (4294966676) [ 821.975868] FAT-fs (loop5): Can't find a valid FAT filesystem 03:35:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000840)={[{@sunit={'sunit', 0x3d, 0xffff}, 0x2c}, {@swidth={'swidth', 0x3d, 0x1}, 0x2c}]}) 03:35:46 executing program 5: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x20, 0x0, 0x8000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r0, r1) tee(r3, 0xffffffffffffffff, 0x0, 0x0) 03:35:46 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/4096, 0x1000) 03:35:46 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f00000004c0)='./control\x00', 0x0) creat(&(0x7f0000000280)='./control/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./control\x00') 03:35:46 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000000000)="1c", 0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r2, &(0x7f0000000100)="14", 0x1) 03:35:46 executing program 4: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002800030014000200007064647030000000000000000000000800040000000000080001000000000014000100080009"], 0x2}, 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x36200}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0xffce, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x62, 0x2, @ipv4}]}]}, 0xffce}, 0x1}, 0x0) 03:35:46 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/4096, 0x1000) 03:35:46 executing program 7: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{@locktable={'locktable', 0x3d, 'trustedem1'}, 0x2c}, {@lockproto_nolock='lockproto=lock_nolock', 0x2c}]}) [ 822.597140] XFS (loop3): stripe width (1) must be a multiple of the stripe unit (65535) 03:35:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000840)={[{@sunit={'sunit', 0x3d, 0xffff}, 0x2c}, {@swidth={'swidth', 0x3d, 0x1}, 0x2c}]}) [ 822.638996] XFS (loop3): stripe width (1) must be a multiple of the stripe unit (65535) [ 822.660066] netlink: 65354 bytes leftover after parsing attributes in process `syz-executor4'. [ 822.669085] openvswitch: netlink: Flow key attribute not present in set flow. 03:35:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, "00000080000001000000007000"}) 03:35:46 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/4096, 0x1000) [ 822.689514] netlink: 65354 bytes leftover after parsing attributes in process `syz-executor4'. [ 822.698400] openvswitch: netlink: Flow key attribute not present in set flow. 03:35:46 executing program 7: eventfd2(0x0, 0x1000000000802) [ 822.752361] gfs2: fsid=trustedem1: Trying to join cluster "lock_nolock", "trustedem1" [ 822.760416] gfs2: fsid=trustedem1: Now mounting FS... [ 822.766228] gfs2: not a GFS2 filesystem [ 822.770259] gfs2: fsid=trustedem1: can't read superblock [ 822.775749] gfs2: fsid=trustedem1: can't read superblock: -22 [ 822.824179] XFS (loop3): stripe width (1) must be a multiple of the stripe unit (65535) 03:35:47 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="a29ab0893fde", [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x4, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)={0x0, 0x4, [0x0, 0x6b8]}) 03:35:47 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/4096, 0x1000) 03:35:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000840)={[{@sunit={'sunit', 0x3d, 0xffff}, 0x2c}, {@swidth={'swidth', 0x3d, 0x1}, 0x2c}]}) [ 823.029885] XFS (loop3): stripe width (1) must be a multiple of the stripe unit (65535) 03:35:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) read$eventfd(r2, &(0x7f0000000080), 0x2f7) write$eventfd(r2, &(0x7f0000000040), 0x8) 03:35:47 executing program 0: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$peek(0x21, r1, &(0x7f0000000040)) 03:35:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000001500)=ANY=[], 0x4cba) recvmmsg(r2, &(0x7f0000004200)=[{{&(0x7f0000002cc0)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/76, 0x4c}], 0x1, &(0x7f0000004100)=""/238, 0xee}}], 0x1, 0x0, &(0x7f0000004300)) 03:35:47 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', 'em0^posix_acl_access\x00'}, &(0x7f0000000100)='./cgroup.net/.yz0\x00', 0x12, 0x0) removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@random={'trusted.', 'em0^posix_acl_access\x00'}) 03:35:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7d0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 03:35:47 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f7570005938beee5af265f0532319f62bf274e5d91f442df1e353edf4bce1d61a3a6d705a3bccec9d3ca6", 0x200002, 0x0) 03:35:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000840)={[{@sunit={'sunit', 0x3d, 0xffff}, 0x2c}, {@swidth={'swidth', 0x3d, 0x1}, 0x2c}]}) 03:35:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), 0x0) 03:35:47 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000000000)="1c", 0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r2, &(0x7f0000000100)="14", 0x1) 03:35:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr, @multicast2=0xe0000002}, 0xc) listen(r3, 0x0) close(r3) dup3(r1, r2, 0x0) 03:35:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 03:35:47 executing program 7: r0 = socket$inet6(0xa, 0x2100000000000006, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 823.627840] XFS (loop3): stripe width (1) must be a multiple of the stripe unit (65535) [ 823.629647] IPVS: ftp: loaded support on port[0] = 21 03:35:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x4008240b, 0x80ffff) 03:35:47 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) recvfrom(r2, &(0x7f0000000040)=""/218, 0xda, 0x0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80) sendfile(r0, r1, &(0x7f0000000280), 0x2000000004) 03:35:47 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x98) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x40, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) 03:35:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x4008240b, 0x80ffff) 03:35:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) read$eventfd(r2, &(0x7f0000000080), 0x2f7) write$eventfd(r2, &(0x7f0000000040), 0x8) 03:35:48 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'bond_slave_1\x00', 0x1000}) 03:35:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000002c0)='GPL\x00', 0x80000001, 0xbb, &(0x7f0000000300)=""/187, 0x0, 0x0, [], 0x0, 0xf}, 0x48) 03:35:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x4008240b, 0x80ffff) 03:35:48 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000000000)="1c", 0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r2, &(0x7f0000000100)="14", 0x1) 03:35:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) 03:35:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x4008240b, 0x80ffff) [ 825.005169] device bridge_slave_1 left promiscuous mode [ 825.010691] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.020871] device bridge_slave_0 left promiscuous mode [ 825.026481] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.723058] team0 (unregistering): Port device team_slave_1 removed [ 825.732534] team0 (unregistering): Port device team_slave_0 removed [ 825.740957] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 825.753352] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 825.774826] bond0 (unregistering): Released all slaves [ 826.041640] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.048080] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.055170] device bridge_slave_0 entered promiscuous mode [ 826.087914] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.094337] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.101463] device bridge_slave_1 entered promiscuous mode [ 826.134446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 826.162033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 826.238417] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 826.269641] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 826.354222] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 826.362121] team0: Port device team_slave_0 added [ 826.384138] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 826.391260] team0: Port device team_slave_1 added [ 826.412387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 826.435693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 826.458963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 826.482736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 826.656673] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.663071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.669689] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.676041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.292025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.355237] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 827.418073] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 827.424245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 827.431612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 827.492964] 8021q: adding VLAN 0 to HW filter on device team0 03:35:52 executing program 0: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f"]) r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000000c0), 0x300, 0x0, &(0x7f0000000080)={0xa, 0x4305, 0xf, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 03:35:52 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$EVIOCGABS0(r1, 0x40044590, &(0x7f00000004c0)=""/240) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)) close(r0) 03:35:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:35:52 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'bond_slave_1\x00', 0x1000}) 03:35:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f691c0264192f42be07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r0) 03:35:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="025cc83d6d345f8f762070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x1, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x20000000000, 0x8) 03:35:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) read$eventfd(r2, &(0x7f0000000080), 0x2f7) write$eventfd(r2, &(0x7f0000000040), 0x8) 03:35:52 executing program 6: r0 = socket$inet6(0xa, 0x10000000001, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x2400000088, 0x0, &(0x7f00008b5000)={0x0, 0x989680}, &(0x7f0000000000), 0x0) 03:35:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$sndseq(0xffffffffffffffff, &(0x7f0000000300)=[{0x81, 0x80000001, 0x0, 0x0, @tick, {}, {}, @result}], 0x30) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 03:35:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="025cc83d6d345f8f762070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x1, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x20000000000, 0x8) 03:35:52 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'bond_slave_1\x00', 0x1000}) 03:35:52 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '}cpuset}[bdev\x00'}, &(0x7f0000000300)='lo\x00', 0x3, 0x0) dup2(r1, r2) [ 827.908282] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 03:35:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000580)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) 03:35:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}, 0x0, 0x7f}, &(0x7f00000000c0)=0x90) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 03:35:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="025cc83d6d345f8f762070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x1, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x20000000000, 0x8) 03:35:52 executing program 0: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000940)="130000001000ffdde2000200f60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefc6463d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000003400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc2b5bbc156c4c90fadd0c2a1976a0f57350aeb0775fa06fb0c8e3a2a298c6d2c5d75a6d01fbabcb", 0xf8) 03:35:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x1f, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 03:35:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="025cc83d6d345f8f762070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x1, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x20000000000, 0x8) 03:35:52 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'bond_slave_1\x00', 0x1000}) 03:35:52 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x922, &(0x7f0000000040)) 03:35:52 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000200)={{0x0, 0x0, 0x2f76, 0x3, 0x2}, 0x6e8a, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x3}) 03:35:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', 'bond_slave_0\x00', 'gre0\x00', 'bcsf0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xf8, 0x128, 0x178, [@cluster={'cluster\x00', 0x10}, @nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x280) 03:35:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x890c, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'erspan0\x00'}) close(r3) dup3(r1, r2, 0x0) 03:35:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/22, 0x16}], 0x1, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 03:35:53 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = dup(r0) getsockname$packet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x14) 03:35:53 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x922, &(0x7f0000000040)) 03:35:53 executing program 6: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) [ 828.952013] xt_nfacct: accounting object `syz0' does not exists 03:35:53 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '}cpuset}[bdev\x00'}, &(0x7f0000000300)='lo\x00', 0x3, 0x0) dup2(r1, r2) 03:35:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$minix(&(0x7f0000000140)='minix\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}], 0x2000, 0x0) 03:35:53 executing program 1: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x103f, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000180)='[[\x00'], &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') preadv(r0, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/85, 0x55}], 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:35:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)="39000000110009e369001b00810800000700fd3f16000000450001070000001419001a000400230007000f000200000400000083a8a5000200", 0x39}], 0x1) 03:35:53 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x922, &(0x7f0000000040)) 03:35:53 executing program 7: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 03:35:53 executing program 3: futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f0000b7dff0), &(0x7f0000000000), 0x0) 03:35:53 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x922, &(0x7f0000000040)) 03:35:53 executing program 6: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:35:53 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[@ANYBLOB="37000000000000009618710b9a4d93794993763f43850100799f2feb4d74504866122806a7ca69fa3464b4d2869cf1490900b9035574dd"], 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x5c) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 03:35:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x9}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000181, 0x0) 03:35:53 executing program 6: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:35:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000340)={0x3f, 0x0, 'client0\x00', 0x0, "c4d2764c0e0a4c2b", "e0eb291f8e8c25b18adff9b54c61375485c25b487e381029cbfe057ef2f42498"}) 03:35:54 executing program 0: unshare(0x8000000) msgget$private(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x28020400) 03:35:54 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000200)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 03:35:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x890c, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'erspan0\x00'}) close(r3) dup3(r1, r2, 0x0) 03:35:54 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '}cpuset}[bdev\x00'}, &(0x7f0000000300)='lo\x00', 0x3, 0x0) dup2(r1, r2) 03:35:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') write$eventfd(r0, &(0x7f0000000040), 0xffffff16) 03:35:54 executing program 6: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:35:54 executing program 1: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001440), 0x0, 0xfffffffffffffffd}]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r2, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001000)}]) 03:35:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, &(0x7f00000007c0)}) 03:35:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, &(0x7f0000000300)=0x3) 03:35:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x2c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000001180)=""/4096}, 0x18) 03:35:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000240)) ioctl$TIOCCONS(r1, 0x541d) 03:35:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x102, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f000079a000), 0x11c}]) 03:35:54 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=@known='system.posix_acl_access\x00') read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) [ 830.198244] binder: 29478:29484 sending u0000000000000000 node 245, cookie mismatch 0000000000000004 != 0000000000000000 [ 830.209525] binder: 29478:29484 transaction failed 29201/-22, size 24-8 line 3046 [ 830.232478] binder_alloc: binder_alloc_mmap_handler: 29478 20001000-20004000 already mapped failed -16 [ 830.247111] binder: BINDER_SET_CONTEXT_MGR already set [ 830.252682] binder_alloc: 29478: binder_alloc_buf, no vma [ 830.258414] binder: 29478:29489 transaction failed 29189/-3, size 24-8 line 2967 [ 830.266702] binder: 29478:29484 ioctl 40046207 0 returned -16 [ 830.274647] binder: release 29478:29484 transaction 244 out, still active [ 830.281709] binder: undelivered TRANSACTION_ERROR: 29201 03:35:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000046c0)=[{0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 03:35:54 executing program 4: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x30, &(0x7f0000000140)) [ 830.295765] binder: send failed reply for transaction 244, target dead 03:35:54 executing program 6: r0 = shmget(0x2, 0x4000, 0x220, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) 03:35:54 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x8) 03:35:54 executing program 0: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) [ 830.498272] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 830.524229] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 03:35:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x890c, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'erspan0\x00'}) close(r3) dup3(r1, r2, 0x0) 03:35:55 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '}cpuset}[bdev\x00'}, &(0x7f0000000300)='lo\x00', 0x3, 0x0) dup2(r1, r2) 03:35:55 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x6, 0x100000001, 0x12, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 03:35:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x1a2, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x4000000000001a2, 0x0) 03:35:55 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x8004510a, &(0x7f00000000c0)) 03:35:55 executing program 0: unshare(0x40000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) 03:35:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x200000000001, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c847f6a5327c26735884be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x1}, 0x48) 03:35:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000400)="290000001400090000000000000060eb0100100006a40eff00000000000019382ca45324dda97ed1b7", 0x29) 03:35:55 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7c, &(0x7f0000000100), 0x0) [ 831.381601] IPVS: ftp: loaded support on port[0] = 21 03:35:55 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x8) 03:35:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x200000000001, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c847f6a5327c26735884be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x1}, 0x48) 03:35:55 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffffa0}}) [ 831.455271] IPVS: ftp: loaded support on port[0] = 21 03:35:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x100000001}}], 0x0, 0x0, &(0x7f00000007c0)}) 03:35:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="44000000bda64c10630ed57f07a4a8d0bac571ca49197922c6dcc4bd1e152a050c86b2c4335b994c0e41d04c64fe6d4d747b64561e32f0a71f6a712e96e500000000000000000000"], &(0x7f00000002c0)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x1, 0x30}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x100000000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x9}, 0x8) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='erspan0\x00') r3 = memfd_create(&(0x7f0000000080)="d22a7bb47b4000", 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap$binder(&(0x7f00000dc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) getrandom(&(0x7f0000000180)=""/191, 0xbf, 0x2) 03:35:55 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8000000009}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1}, @enc_lim={0x4, 0x1}, @ra={0x5, 0x2}]}, 0x18) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000003b40)}, 0x0) 03:35:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x200000000001, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c847f6a5327c26735884be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x1}, 0x48) [ 831.660000] binder: 29585:29586 transaction failed 29201/-28, size 0-0 line 2967 [ 831.678137] binder_alloc: binder_alloc_mmap_handler: 29585 20001000-20004000 already mapped failed -16 [ 831.701386] binder: BINDER_SET_CONTEXT_MGR already set [ 831.712803] binder_alloc: 29585: binder_alloc_buf, no vma [ 831.718568] binder: 29585:29591 transaction failed 29189/-3, size 0-0 line 2967 [ 831.744642] binder: 29585:29586 ioctl 40046207 0 returned -16 [ 831.760992] binder: undelivered TRANSACTION_ERROR: 29201 [ 831.768354] binder: undelivered TRANSACTION_ERROR: 29189 03:35:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x890c, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'erspan0\x00'}) close(r3) dup3(r1, r2, 0x0) 03:35:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x200000000001, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c847f6a5327c26735884be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x1}, 0x48) 03:35:56 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffffa0}}) 03:35:56 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x8) 03:35:56 executing program 6: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="df"], 0x1) sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r1, 0x0, 0x7fffff29) 03:35:56 executing program 0: unshare(0x2000400) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r0, 0x50, &(0x7f00000002c0)}, 0x10) 03:35:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206020200a84309c026236925000b0000c90200f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 03:35:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 03:35:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x6, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x12, 0xfa00, @id_afonly={&(0x7f0000000180), r1, 0x1000000, 0x2, 0x4}}, 0xfffa) 03:35:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'vlan0\x00', 0xd803}) r1 = socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x10000000000000c5) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 03:35:56 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffffa0}}) [ 832.504484] netlink: 'syz-executor4': attribute type 11 has an invalid length. [ 832.541788] netlink: 'syz-executor4': attribute type 11 has an invalid length. 03:35:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) [ 832.604838] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop5 03:35:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="02e6a3516d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr, @multicast2=0xe0000002}, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x9, &(0x7f0000000040), 0x37e) close(r3) dup3(r1, r2, 0x0) [ 832.653828] BTRFS error (device loop5): superblock checksum mismatch [ 832.675627] BTRFS error (device loop5): open_ctree failed 03:35:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 03:35:56 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffffa0}}) 03:35:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) 03:35:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) 03:35:57 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) [ 832.940659] BTRFS error (device loop5): superblock checksum mismatch [ 832.952718] BTRFS error (device loop5): open_ctree failed 03:35:57 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x8) 03:35:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) 03:35:57 executing program 6: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="df"], 0x1) sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r1, 0x0, 0x7fffff29) 03:35:57 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) 03:35:57 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) 03:35:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 03:35:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) [ 833.527566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 833.535129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 833.558843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:35:57 executing program 2: prctl$intptr(0x4, 0x7d) 03:35:57 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) 03:35:57 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000005506000001ed00002f140000000000006f460000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:35:57 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000003c0)={[{@umask={'umask', 0x3d, 0x100000001}, 0x2c}]}) 03:35:57 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) dup3(r0, r1, 0x0) [ 833.595205] BTRFS error (device loop5): superblock checksum mismatch [ 833.616195] BTRFS error (device loop5): open_ctree failed 03:35:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 03:35:57 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000180), &(0x7f0000000140)=0xf) 03:35:57 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00000000c0)="2e2f66696c65302f66692b4530eb00", 0x0) 03:35:57 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffff8) shutdown(r0, 0x1) shutdown(r0, 0x0) [ 833.834461] hfs: umask requires a value [ 833.838633] hfs: unable to parse mount options [ 833.857124] hfs: umask requires a value [ 833.861441] hfs: unable to parse mount options [ 833.879443] BTRFS error (device loop5): superblock checksum mismatch [ 833.887524] BTRFS error (device loop5): open_ctree failed [ 834.012987] FAT-fs (loop7): error, invalid access to FAT (entry 0x000006c0) [ 834.020330] FAT-fs (loop7): Filesystem has been set read-only [ 834.031901] FAT-fs (loop7): error, invalid access to FAT (entry 0x000006c0) [ 834.043477] FAT-fs (loop7): error, invalid access to FAT (entry 0x000006c0) [ 834.051417] FAT-fs (loop7): error, invalid access to FAT (entry 0x000006c0) 03:35:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002d0007031dfffd946fa28300cee60a0009000000001d85680002000000000000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:35:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x15}}) [ 834.257324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 834.276414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 03:35:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(tnepres-generic)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000061c0)=[{{&(0x7f0000003700)=@ll, 0x80, &(0x7f0000003b40)=[{&(0x7f0000004ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000003bc0)=""/81, 0x51}}], 0x1, 0x0, &(0x7f0000006400)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2f7, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000015c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001340)=""/53, 0x35}, {&(0x7f0000001440)=""/190, 0x436}], 0x2, &(0x7f0000001580)=""/31, 0x1f}, 0x0) 03:35:58 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 03:35:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r2, 0x0) listen(r1, 0x0) 03:35:58 executing program 6: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="df"], 0x1) sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r1, 0x0, 0x7fffff29) 03:35:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xa, 0xff00}, [], {0x95}}, &(0x7f0000000000)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0xc992, 0x1a1, &(0x7f0000000340)=""/195}, 0x48) 03:35:58 executing program 4: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000040000000000020000027f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xb1, &(0x7f0000000200)=""/177}, 0x48) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000100)="03") 03:35:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r1) 03:35:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)) 03:35:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=@polexpire={0xcc, 0x1b, 0xa01, 0x0, 0x0, {{{@in=@rand_addr, @in6}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8}}]}, 0xcc}, 0x1}, 0x0) 03:35:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) 03:35:58 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 03:35:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="9a0028a800dfd8f22e260f01c9f36d66b9800000c00f326635000800000f30f3ab0f01df66b98f0b00000f32d18d9808262636c19d5e0d00", 0x38}], 0x1, 0x0, &(0x7f0000000040)=[@dstype0={0x6, 0xe}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:58 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1092, r0, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x1) fcntl$setstatus(r0, 0x4, 0x4000) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6={0x0, 0x6, "4b4c8f", 0x14, 0x0, 0x0, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x3c) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:58 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffff8) shutdown(r0, 0x1) shutdown(r0, 0x0) 03:35:58 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101082, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 03:35:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 03:35:59 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2401, 0x3) 03:35:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0xd) 03:35:59 executing program 4: syslog(0x3, &(0x7f0000000040)=""/254, 0x2000013e) 03:35:59 executing program 6: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="df"], 0x1) sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r1, 0x0, 0x7fffff29) 03:35:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="025cc83d6d345e8f762070") ioctl$TCSETS(r1, 0x5412, &(0x7f00000000c0)={0x16}) 03:35:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 03:35:59 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1092, r0, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x1) fcntl$setstatus(r0, 0x4, 0x4000) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6={0x0, 0x6, "4b4c8f", 0x14, 0x0, 0x0, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x3c) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="240000000d0a07031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b2fcbf4042d1", 0x4c}], 0x1}, 0x0) 03:35:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000080)=@dstopts, 0x8) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0) 03:35:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x31) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90, 0xffffffffffffffff}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 03:35:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) [ 835.687555] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 835.700681] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 03:35:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/28, 0x1c) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) shmat(0x0, &(0x7f000000b000/0x1000)=nil, 0x4000) 03:35:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 03:35:59 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffff8) shutdown(r0, 0x1) shutdown(r0, 0x0) 03:35:59 executing program 1: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f00000000c0)=""/1, &(0x7f0000000180)=0x1) 03:35:59 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1092, r0, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x1) fcntl$setstatus(r0, 0x4, 0x4000) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6={0x0, 0x6, "4b4c8f", 0x14, 0x0, 0x0, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x3c) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 03:36:00 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f0000000040), 0xa, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1) 03:36:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, &(0x7f0000000300)=@ipx, &(0x7f0000000600)=0xffffffffffffff30, 0x0) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) [ 836.045565] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000040), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x13, 0x0, 0x0, 'bond0\x00', 'team_slave_0\x00', 'teql0\x00', 'teql0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {{{0x3, 0x0, 0x0, 'ip6_vti0\x00', 'bridge0\x00', 'bond0\x00', 'veth1\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf0, 0x168, 0x198, [@connbytes={'connbytes\x00', 0x18}, @devgroup={'devgroup\x00', 0x18}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@ERROR={'ERROR\x00', 0x20, {"92105b43041b78a3dd166f2affd31254f7048dfb0df89ed9966bef7cd48f"}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x340) 03:36:00 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1092, r0, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x1) fcntl$setstatus(r0, 0x4, 0x4000) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6={0x0, 0x6, "4b4c8f", 0x14, 0x0, 0x0, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x3c) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:00 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) clock_gettime(0x0, &(0x7f00000029c0)) fallocate(r1, 0x0, 0x0, 0x5c0d) ioctl(r0, 0x1, &(0x7f0000000100)) 03:36:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x0, 0x989680}}) 03:36:00 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffff8) shutdown(r0, 0x1) shutdown(r0, 0x0) 03:36:00 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000100)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 03:36:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x0, 0x989680}}) 03:36:00 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) clock_gettime(0x0, &(0x7f00000029c0)) fallocate(r1, 0x0, 0x0, 0x5c0d) ioctl(r0, 0x1, &(0x7f0000000100)) [ 836.789624] xt_connbytes: cannot load conntrack support for proto=7 [ 836.796209] xt_connbytes: Forcing CT accounting to be enabled 03:36:01 executing program 5: syz_emit_ethernet(0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 03:36:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="2c16a837da4b22913190800a2892dc92043764926430b522b90166e43e0ec172cf75ab7ce36c9d71c066997aec50662e257288c300e3e83ecc6ab4ce42d7154f58c5820bfebd38fab307ecb8662c45bc", 0x50}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000003e40)={&(0x7f0000003e80)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000580)=""/95, 0x5f}], 0x2, &(0x7f0000590000)}, 0x0) 03:36:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5", 0x4) sendto(r2, &(0x7f0000000040)="bcaa197d32eac32b92fd21786ad75a2b9a81d61697dc9304cff909a5a818ed6a92e03ad9d2894bdc4c", 0x29, 0x0, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80) recvfrom(r2, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc={0x10}, 0x709000) 03:36:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x0, 0x989680}}) 03:36:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x64, &(0x7f0000000000), 0x4) close(r2) close(r1) 03:36:01 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="a29ab0893fde", [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)={0x0, 0x3, [0x0, 0xfffffffffffffffd]}) 03:36:01 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) clock_gettime(0x0, &(0x7f00000029c0)) fallocate(r1, 0x0, 0x0, 0x5c0d) ioctl(r0, 0x1, &(0x7f0000000100)) 03:36:01 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000200)=""/245, 0xf5) 03:36:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r1, &(0x7f0000000140)=""/187, 0xbb, 0x0, &(0x7f0000000280)=@ax25={0x3, {"65e40a94e65d9a"}}, 0x709000) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) 03:36:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x0, 0x989680}}) 03:36:01 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="a29ab0893fde", [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)={0x0, 0x3, [0x0, 0xfffffffffffffffd]}) 03:36:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) [ 837.073036] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x3 [ 837.090811] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x3 03:36:01 executing program 5: r0 = socket$inet6(0xa, 0x9000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r1, r2, &(0x7f0000000000), 0x80000003) 03:36:01 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000000140), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="f3f113b3", 0x4}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f6367726f75702e6370752f73827a30fe", 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:36:01 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) clock_gettime(0x0, &(0x7f00000029c0)) fallocate(r1, 0x0, 0x0, 0x5c0d) ioctl(r0, 0x1, &(0x7f0000000100)) 03:36:01 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="a29ab0893fde", [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)={0x0, 0x3, [0x0, 0xfffffffffffffffd]}) 03:36:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x8010aebc, &(0x7f0000000000)) 03:36:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd160-generic)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005fc0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)="91", 0x1}, {&(0x7f0000000740)='>', 0x1}], 0x2}], 0x1, 0x0) 03:36:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x125d, 0x907000) 03:36:01 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="a29ab0893fde", [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)={0x0, 0x3, [0x0, 0xfffffffffffffffd]}) 03:36:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x40086602, &(0x7f0000000000)=r2) fstat(r1, &(0x7f0000000180)) 03:36:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xbc}}) 03:36:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./control\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@creator={'creator', 0x3d, "9e002884"}, 0x2c}]}) 03:36:02 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x0) [ 837.907660] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x3 03:36:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000002640), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000300), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 03:36:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 03:36:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x80000000002, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@kern={0x10, 0x200000000000000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d0005000b0000000000c78b80082314e9030b9d566885b16732009b0700b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 03:36:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xbc}}) 03:36:02 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 838.003987] binder: 30020:30022 transaction failed 29189/-22, size 0-0 line 2852 [ 838.035080] hfs: creator requires a 4 character value [ 838.040433] hfs: unable to parse mount options [ 838.047376] binder: undelivered TRANSACTION_ERROR: 29189 03:36:02 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000000140), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="f3f113b3", 0x4}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f6367726f75702e6370752f73827a30fe", 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:36:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r3}) [ 838.057009] binder: 30020:30022 transaction failed 29189/-22, size 0-0 line 2852 [ 838.069002] hfs: creator requires a 4 character value [ 838.074275] hfs: unable to parse mount options [ 838.084522] binder: undelivered TRANSACTION_ERROR: 29189 03:36:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./control\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@creator={'creator', 0x3d, "9e002884"}, 0x2c}]}) 03:36:02 executing program 1: socket(0x26, 0x80005, 0x3) 03:36:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e000017000400000015080700000003db98200000000013abdd6d03009a946e99ec00000000000092c682730e590851d92abfdc873dd3531e60c02e2e5feb992c457e9791fd96101963c66c4bf360"], 0x58) 03:36:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xbc}}) 03:36:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f00000000c0)=0x0) io_getevents(r1, 0x1ffffffffffffff, 0x8000000000000af, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000400)="295ee1311f16f477671070") io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x730000}]) 03:36:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xbc}}) 03:36:02 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$bt_hci(r0, 0x0, 0xf, &(0x7f0000000b80)=""/199, &(0x7f0000000c80)=0xc7) 03:36:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e000017000400000015080700000003db98200000000013abdd6d03009a946e99ec00000000000092c682730e590851d92abfdc873dd3531e60c02e2e5feb992c457e9791fd96101963c66c4bf360"], 0x58) [ 838.358178] irq bypass consumer (token 000000007e12a389) registration fails: -16 03:36:02 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000000140), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="f3f113b3", 0x4}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f6367726f75702e6370752f73827a30fe", 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:36:02 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f013cbaa100b06eee0f017800baf80c66b8707e548066efbafc0cecf30f7edb66b8008000000f23c00f21f86635030007000f23f80f0f08b4f2f30f320f47330f30", 0x42}], 0x1, 0x0, &(0x7f00000002c0), 0x0) [ 838.428717] hfs: creator requires a 4 character value [ 838.434007] hfs: unable to parse mount options 03:36:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./control\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@creator={'creator', 0x3d, "9e002884"}, 0x2c}]}) 03:36:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x2e2}, 0x0) 03:36:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x1e, 0x5, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1e, 0x303}, 0x10) 03:36:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r3}) [ 838.641347] IPVS: ftp: loaded support on port[0] = 21 03:36:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e000017000400000015080700000003db98200000000013abdd6d03009a946e99ec00000000000092c682730e590851d92abfdc873dd3531e60c02e2e5feb992c457e9791fd96101963c66c4bf360"], 0x58) 03:36:02 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000000140), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="f3f113b3", 0x4}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f6367726f75702e6370752f73827a30fe", 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:36:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r3}) [ 838.743100] RDS: rds_bind could not find a transport for 172.20.20.187, load rds_tcp or rds_rdma? [ 838.768385] RDS: rds_bind could not find a transport for 172.20.20.187, load rds_tcp or rds_rdma? 03:36:02 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000005480)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000005440)='hugetlbfs\x00', 0x0, &(0x7f0000001d80)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./control\x00', 0x0) mknod(&(0x7f0000000140)='./control/file1\x00', 0x1000, 0x0) 03:36:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e000017000400000015080700000003db98200000000013abdd6d03009a946e99ec00000000000092c682730e590851d92abfdc873dd3531e60c02e2e5feb992c457e9791fd96101963c66c4bf360"], 0x58) 03:36:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r3}) [ 838.824030] hfs: creator requires a 4 character value [ 838.829339] hfs: unable to parse mount options [ 838.835525] irq bypass consumer (token 000000005c1a7285) registration fails: -16 [ 838.983653] irq bypass consumer (token 00000000aeb67642) registration fails: -16 [ 839.170992] irq bypass consumer (token 0000000093f1dd99) registration fails: -16 03:36:03 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000200)=""/4096) 03:36:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r3}) 03:36:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./control\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@creator={'creator', 0x3d, "9e002884"}, 0x2c}]}) 03:36:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r3}) 03:36:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xfc, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x20101, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 839.490073] device bridge_slave_1 left promiscuous mode [ 839.495683] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.508734] device bridge_slave_0 left promiscuous mode [ 839.514285] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.225433] team0 (unregistering): Port device team_slave_1 removed [ 840.234318] team0 (unregistering): Port device team_slave_0 removed [ 840.243338] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 840.262771] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 840.283400] bond0 (unregistering): Released all slaves [ 840.315988] hfs: creator requires a 4 character value [ 840.321369] hfs: unable to parse mount options [ 840.334734] irq bypass consumer (token 00000000c47a571b) registration fails: -16 [ 840.342570] irq bypass consumer (token 000000005fa2e913) registration fails: -16 [ 840.586668] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.593231] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.600262] device bridge_slave_0 entered promiscuous mode [ 840.633339] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.639806] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.647329] device bridge_slave_1 entered promiscuous mode [ 840.680902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 840.713287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 840.790145] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 840.821002] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 840.920723] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 840.927758] team0: Port device team_slave_0 added [ 840.948575] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 840.955717] team0: Port device team_slave_1 added [ 840.977277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 841.001052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 841.025208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 841.048921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 841.227992] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.234395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.241003] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.247618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.884660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.951263] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 842.016959] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 842.023142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 842.030595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 842.094761] 8021q: adding VLAN 0 to HW filter on device team0 03:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}, 0x1}, 0x0) 03:36:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)={0x0, 0x10}) 03:36:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x100000001}, 0x1c) 03:36:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 03:36:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r3}) 03:36:06 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000776c3b)={0x2, 0x1000004e22, @broadcast=0xffffffff}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x2000000000004e22, @broadcast=0xffffffff}, 0x10) 03:36:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f0000000280)) 03:36:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) 03:36:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x9, [@generic='\n']}]}, 0x1c}, 0x1}, 0x0) 03:36:06 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bbf, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev={0xfe, 0x80}, @in6=@ipv4={[], [0xff, 0xff], @rand_addr}}}]}, 0x50}, 0x1}, 0x0) 03:36:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r#'], 0x5) 03:36:06 executing program 7: r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x10, &(0x7f00000000c0), 0x69b) 03:36:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x46}}) close(r2) close(r1) 03:36:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto(r0, &(0x7f0000001540)="17", 0x1, 0x0, &(0x7f0000001a40)=@rc={0x1f}, 0x80) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='reno\x00', 0x5) shutdown(r0, 0x1) [ 842.578353] irq bypass consumer (token 000000006c397c36) registration fails: -16 03:36:06 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x8001) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r1) 03:36:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000480)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/109, 0x6d}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/40, 0x28}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/208, 0xd0}, {&(0x7f0000000ec0)=""/219, 0xdb}], 0x3, &(0x7f0000000000)=""/41, 0x29}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000000380)=""/205, 0xcd}}], 0x2, 0x0, &(0x7f00000000c0)={0x77359400}) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005640)=[{{&(0x7f0000001040)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000010c0)=""/238, 0xee}, {&(0x7f00000011c0)=""/115, 0x73}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000002440)=""/249, 0xf9}], 0x5, &(0x7f0000002540)=""/38, 0x26}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000004b80)=""/13, 0x1}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000005140)=""/118, 0x76}}, {{&(0x7f00000051c0)=@nl, 0x80, &(0x7f0000005580), 0x0, &(0x7f0000005600)}}], 0x4, 0x0, &(0x7f00000057c0)={0x0, r1+30000000}) [ 842.622179] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 842.632869] netlink: 'syz-executor3': attribute type 1 has an invalid length. 03:36:06 executing program 7: mlock2(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:36:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x7, 0x0, 0x0, {0x1}, [@generic="7b6c6e6604"]}, 0x1c}, 0x1}, 0x0) 03:36:06 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000465f8e)=""/114, 0x47) 03:36:06 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") poll(&(0x7f00000024c0)=[{r0}], 0x1, 0x5) 03:36:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000100)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 03:36:07 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl(r0, 0xc0884113, &(0x7f00000000c0)) 03:36:07 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 03:36:07 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="571d7d91290d61beff7145763f7a95674c9b61c6e58ba229941a083257dfdd9d4037ad6480bbf0fd", 0x28}], 0x1}, 0x0) 03:36:07 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x7, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f09660fd1c7c4e2858c344066b83a010f00d80f3566baf80cb84e8fe38cef66bafc0cec360f07b9640b00000f32660f78c500f88fe99091d8", 0x39}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:36:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xd}]}, 0x28}, 0x1}, 0x0) [ 842.926164] binder: BINDER_SET_CONTEXT_MGR already set [ 842.937120] binder: 30479:30482 ioctl 40046207 0 returned -16 [ 842.946879] binder: 30479:30481 unknown command 536907575 [ 842.953022] binder: 30479:30481 ioctl c0306201 20008fd0 returned -22 [ 842.959862] binder: 30479:30482 Release 1 refcount change on invalid ref 0 ret -22 03:36:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x2000000000002be, 0x6) 03:36:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xd}]}, 0x28}, 0x1}, 0x0) 03:36:07 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) clone(0x0, &(0x7f0000000000), &(0x7f0000001ffc), &(0x7f0000000080), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0x64) 03:36:07 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="02") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190600003fffffffda060200000003000000000000000d00140000050000000500e8ff", 0x29}], 0x1) 03:36:07 executing program 7: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f0000458000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x30) recvmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/148, 0x94}], 0x1, &(0x7f00000007c0)=""/4096, 0x1000}}, {{&(0x7f00000017c0)=@generic, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/240, 0xf0}], 0x1, &(0x7f0000001e40)=""/74, 0x4a}}], 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close(r1) 03:36:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xd}]}, 0x28}, 0x1}, 0x0) 03:36:07 executing program 4: r0 = semget$private(0x0, 0xa, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x1800}], 0x117, &(0x7f0000000140)) r1 = semget$private(0x0, 0x4, 0x0) semtimedop(r1, &(0x7f0000000040), 0x22, &(0x7f00000000c0)) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0x0, 0x1801}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) 03:36:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) dup2(r0, r2) 03:36:07 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)) sendmsg$key(r1, &(0x7f0000f56000)={0x1000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000fbffffff000200130002000000000000f8ffffff0005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a00000000000000ff0100000900000000000000000000010000000000000000"], 0x80}, 0x1}, 0x0) 03:36:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xd}]}, 0x28}, 0x1}, 0x0) 03:36:08 executing program 2: mmap(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x100010a, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)) 03:36:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510a, &(0x7f0000a07fff)) 03:36:08 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x10) listen(r1, 0x0) listen(r0, 0x0) 03:36:08 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x7, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f09660fd1c7c4e2858c344066b83a010f00d80f3566baf80cb84e8fe38cef66bafc0cec360f07b9640b00000f32660f78c500f88fe99091d8", 0x39}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:36:08 executing program 2: mmap(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x100010a, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)) 03:36:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x24}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0xffffff85, 0x7, 0x2, 0x1}], {0x95}}, &(0x7f0000f6bffb), 0x0, 0xfffffe21, &(0x7f00001a7f05)=""/251}, 0x18) 03:36:08 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x7, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f09660fd1c7c4e2858c344066b83a010f00d80f3566baf80cb84e8fe38cef66bafc0cec360f07b9640b00000f32660f78c500f88fe99091d8", 0x39}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:36:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510a, &(0x7f0000a07fff)) 03:36:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 03:36:08 executing program 2: mmap(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x100010a, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)) 03:36:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1001) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 03:36:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510a, &(0x7f0000a07fff)) 03:36:08 executing program 2: mmap(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x100010a, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)) [ 844.514339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:36:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-vsock\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000003f40)=&(0x7f0000003f80)) 03:36:08 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x5415, 0x0) 03:36:08 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') mkdir(&(0x7f0000000240)='./control/file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)='./control\x00') close(r0) 03:36:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000600)) 03:36:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510a, &(0x7f0000a07fff)) 03:36:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1001) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 03:36:09 executing program 1: r0 = socket(0xa, 0x802, 0x0) capset(&(0x7f00002d0ff8)={0x20071026}, &(0x7f0000000140)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x2}, 0x20) 03:36:09 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x7, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f09660fd1c7c4e2858c344066b83a010f00d80f3566baf80cb84e8fe38cef66bafc0cec360f07b9640b00000f32660f78c500f88fe99091d8", 0x39}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:36:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x2, 0x0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) 03:36:09 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x7, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f09660fd1c7c4e2858c344066b83a010f00d80f3566baf80cb84e8fe38cef66bafc0cec360f07b9640b00000f32660f78c500f88fe99091d8", 0x39}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:36:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000016000)=[{0x28, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x10) 03:36:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1001) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 03:36:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80004517, &(0x7f00000000c0)) 03:36:09 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 03:36:09 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) 03:36:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x380c0000) clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) keyctl$get_security(0xb, r1, &(0x7f0000000080)=""/84, 0x54) 03:36:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1001) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 03:36:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x5, 0x4) 03:36:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'si\v0\x00', @ifru_map={0x0, 0x0, 0x0, 0x0, 0x9}}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 03:36:09 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) 03:36:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="3cbf2743", 0x4) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) recvmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/165, 0xa5}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000004c00)=[{{&(0x7f0000003900)=@ax25, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/12, 0xc}}], 0x1, 0x0, &(0x7f0000004d40)={0x0, 0x1c9c380}) 03:36:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x380c0000) clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) keyctl$get_security(0xb, r1, &(0x7f0000000080)=""/84, 0x54) 03:36:09 executing program 0: unshare(0x2000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1, 0x4, 0x400000008004, 0x0, r0}, 0x2c) 03:36:09 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x7, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f09660fd1c7c4e2858c344066b83a010f00d80f3566baf80cb84e8fe38cef66bafc0cec360f07b9640b00000f32660f78c500f88fe99091d8", 0x39}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:36:09 executing program 3: r0 = memfd_create(&(0x7f0000000180)='rr\x00', 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 03:36:10 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x7, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f09660fd1c7c4e2858c344066b83a010f00d80f3566baf80cb84e8fe38cef66bafc0cec360f07b9640b00000f32660f78c500f88fe99091d8", 0x39}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:36:10 executing program 1: syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'ascii'}, 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) 03:36:10 executing program 3: r0 = memfd_create(&(0x7f0000000180)='rr\x00', 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 03:36:10 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) 03:36:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x380c0000) clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) keyctl$get_security(0xb, r1, &(0x7f0000000080)=""/84, 0x54) 03:36:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000200)) poll(&(0x7f0000000100)=[{r1}, {r1}, {r0}, {r1}], 0x4, 0x4) 03:36:10 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) 03:36:10 executing program 3: r0 = memfd_create(&(0x7f0000000180)='rr\x00', 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) [ 845.944249] hfs: can't find a HFS filesystem on dev loop1 03:36:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x5) 03:36:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000200)) poll(&(0x7f0000000100)=[{r1}, {r1}, {r0}, {r1}], 0x4, 0x4) 03:36:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x380c0000) clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) keyctl$get_security(0xb, r1, &(0x7f0000000080)=""/84, 0x54) 03:36:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000200)) poll(&(0x7f0000000100)=[{r1}, {r1}, {r0}, {r1}], 0x4, 0x4) 03:36:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000140)=0x10) close(r2) close(r1) 03:36:10 executing program 3: r0 = memfd_create(&(0x7f0000000180)='rr\x00', 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 03:36:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x0, 0x8000000000001, &(0x7f0000000400)=""/193, &(0x7f0000000280)=""/97, &(0x7f00000001c0)=""/127, 0x400000000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x1, 0x1, &(0x7f0000000040)=""/132, &(0x7f0000000300)=""/238, &(0x7f0000000240)}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 03:36:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) readv(r1, &(0x7f0000002540)=[{&(0x7f0000002500)=""/36, 0x24}], 0x1) 03:36:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) 03:36:11 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_stats={0x8}}) 03:36:11 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_flowlabel\x00') 03:36:11 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) pread64(r1, &(0x7f0000000140)=""/102, 0x66, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:36:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000200)) poll(&(0x7f0000000100)=[{r1}, {r1}, {r0}, {r1}], 0x4, 0x4) 03:36:11 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xd70b}, {}], 0x2) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f00000001c0)=""/22) 03:36:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) 03:36:11 executing program 5: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x35e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 03:36:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r1, 0x4, 0x46000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000658000/0x3000)=nil}) preadv(r1, &(0x7f0000000040), 0x10000000000000a6, 0x0) 03:36:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) 03:36:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r1, &(0x7f0000670000)=@generic={0x1e, "02fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) 03:36:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) 03:36:11 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {0x7}, [@IFLA_MASTER={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) 03:36:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r3, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x10}]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) tee(r4, r2, 0x8, 0x0) 03:36:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) flistxattr(r1, &(0x7f0000000040)=""/42, 0x2a) 03:36:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000b94ff8)={0x0, 0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) write(r1, &(0x7f0000ce6ffe)="da", 0x1) 03:36:11 executing program 1: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000025c0)=[{&(0x7f0000002440), 0x0, 0x401}], 0x0, &(0x7f00000026c0)={[{@suiddir='suiddir', 0x2c}, {@quota_off='quota=off', 0x2c}, {@errors_withdraw='errors=withdraw', 0x2c}, {@nobarrier='nobarrier', 0x2c}]}) 03:36:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r2 = dup2(r0, r0) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000002900)=ANY=[]], 0x8}, 0x1}, 0x8000) fcntl$setstatus(r2, 0x4, 0x2000) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 03:36:11 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) [ 847.740115] attempt to access beyond end of device [ 847.745166] loop1: rw=4096, want=136, limit=4 [ 847.749692] gfs2: error 10 reading superblock [ 847.759891] attempt to access beyond end of device [ 847.764930] loop1: rw=4096, want=136, limit=4 [ 847.769440] gfs2: error 10 reading superblock [ 847.849434] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 847.849434] The task syz-executor6 (30839) triggered the difference, watch for misbehavior. 03:36:12 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001240)=""/250, 0xfa}], 0x1) 03:36:12 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) accept4(r0, &(0x7f00000004c0)=@l2, &(0x7f0000000340)=0x80, 0x800) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 03:36:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ff8ffc)=0x8005, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 03:36:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r2 = dup2(r0, r0) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000002900)=ANY=[]], 0x8}, 0x1}, 0x8000) fcntl$setstatus(r2, 0x4, 0x2000) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 03:36:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x3}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x1}}]}, 0x2c}, 0x1}, 0x0) 03:36:12 executing program 3: r0 = socket(0x15, 0x80005, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt(r0, 0x1000200100000114, 0x2713, &(0x7f0000000080)=""/1, &(0x7f0000000280)=0x19) 03:36:12 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f000001d000)="2f0000001c000381ffffff000d0000000200000001001000000003c91300010000000000000000005867000000050b", 0x2f}], 0x1}, 0x0) 03:36:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r2 = dup2(r0, r0) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000002900)=ANY=[]], 0x8}, 0x1}, 0x8000) fcntl$setstatus(r2, 0x4, 0x2000) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 03:36:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00"}) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="f8f550e6", 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}}, &(0x7f0000000040)=0x100) dup2(r0, r1) sendto$inet6(r1, &(0x7f0000000040), 0x24, 0x0, &(0x7f0000000080)={0xa, 0x8847, 0x3, @dev={0xfe, 0x80}}, 0x1c) [ 848.079831] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 848.117834] netlink: 'syz-executor5': attribute type 21 has an invalid length. [ 848.132884] netlink: 'syz-executor5': attribute type 1 has an invalid length. 03:36:12 executing program 3: r0 = socket(0x15, 0x80005, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt(r0, 0x1000200100000114, 0x2713, &(0x7f0000000080)=""/1, &(0x7f0000000280)=0x19) 03:36:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1}, 0x0) 03:36:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x101, 0x7) 03:36:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1c}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffd5}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 03:36:12 executing program 7: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000058001f0014b2f407000904000200074708000100ffff20000700020a000000f1", 0x24) 03:36:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/250) 03:36:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x10000fe) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 03:36:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r2 = dup2(r0, r0) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000002900)=ANY=[]], 0x8}, 0x1}, 0x8000) fcntl$setstatus(r2, 0x4, 0x2000) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 03:36:12 executing program 3: r0 = socket(0x15, 0x80005, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt(r0, 0x1000200100000114, 0x2713, &(0x7f0000000080)=""/1, &(0x7f0000000280)=0x19) 03:36:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x101, 0x7) 03:36:12 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x3fff6, 0x0) utime(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000080)={0x0, 0xffff7ffffffffb16}) fsync(r0) 03:36:12 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x100000000000000, &(0x7f000000df36)="12"}) 03:36:12 executing program 5: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f}]}, &(0x7f0000f91ffc)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0xd, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@ldst={0x3, 0x0, 0xb, 0x1, 0x0, 0xa4}], {0x95}}, &(0x7f00005fc000)='GPL\x00', 0x800a, 0x1000, &(0x7f000062b000)=""/4096}, 0x25) 03:36:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x101, 0x7) 03:36:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 03:36:12 executing program 3: r0 = socket(0x15, 0x80005, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt(r0, 0x1000200100000114, 0x2713, &(0x7f0000000080)=""/1, &(0x7f0000000280)=0x19) 03:36:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x6fdf) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mincore(&(0x7f0000003000/0x4000)=nil, 0x4000, &(0x7f0000000280)=""/216) 03:36:13 executing program 2: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66206baa68754a30000000002000000000000000000000000000000000000000000c00195c1e2d4f32ebdbed8285538dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x4008800) [ 848.898208] binder: 30930:30935 ERROR: BC_REGISTER_LOOPER called without request [ 848.906690] binder: send failed reply for transaction 258 to 30930:30935 [ 848.914390] binder: 30930:30935 ioctl c0306201 2000dfd0 returned -14 [ 848.928275] binder_alloc: binder_alloc_mmap_handler: 30930 20000000-20002000 already mapped failed -16 [ 848.945361] binder: BINDER_SET_CONTEXT_MGR already set [ 848.967220] binder: 30930:30935 ioctl 40046207 0 returned -16 [ 848.980198] binder: 30930:30938 ERROR: BC_REGISTER_LOOPER called without request 03:36:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$sndseq(r1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0x30) 03:36:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x29, 0x82d, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 03:36:13 executing program 1: getpgrp(0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x2b) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40505330, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:36:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x101, 0x7) 03:36:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x0, 0xff3f}, 0xc) 03:36:13 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000240)=[{0x2, 0xb}], 0x1, &(0x7f0000000040)) [ 849.001024] binder_alloc: 30930: binder_alloc_buf, no vma [ 849.006707] binder: 30930:30935 transaction failed 29189/-3, size 0-0 line 2967 03:36:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa}, 0x1c) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) 03:36:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 03:36:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:36:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) io_setup(0xff, &(0x7f00000000c0)=0x0) io_submit(r2, 0x2, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)}]) [ 849.128764] binder: undelivered TRANSACTION_ERROR: 29189 [ 849.137707] binder: undelivered TRANSACTION_COMPLETE [ 849.142944] binder: undelivered TRANSACTION_ERROR: 29201 03:36:13 executing program 6: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000d9bffc), 0x4) 03:36:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x0, 0xff3f}, 0xc) 03:36:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 03:36:13 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x425, 0x0, 0x0, {0xd}}, 0x14}, 0x1}, 0x0) 03:36:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0xd, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f00000000c0)='user.^\x00') dup2(r0, r1) 03:36:13 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000001440)=[{&(0x7f0000000280)=""/4096, 0x608e}, {&(0x7f0000000080)=""/186, 0xba}, {&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000001280)=""/223, 0xdf}, {&(0x7f0000001680)=""/176, 0xb0}], 0x5, &(0x7f00000014c0)=""/136, 0x88}, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000001380)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002a00), 0x0, &(0x7f0000000140)=""/29, 0x1d}}], 0x1, 0x0, 0x0) 03:36:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x0, 0xff3f}, 0xc) 03:36:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000d11000), &(0x7f0000000000)=0x4) [ 849.417326] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 849.438402] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 849.480028] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 849.489458] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 849.497685] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 849.505514] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 849.513105] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 849.522281] netlink: 'syz-executor6': attribute type 29 has an invalid length. 03:36:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) close(r0) 03:36:14 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) write$FUSE_LK(r0, &(0x7f00000013c0)={0x28}, 0x28) 03:36:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x0, 0xff3f}, 0xc) 03:36:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) truncate(&(0x7f0000000100)='./file0\x00', 0x0) [ 850.232697] binder_alloc: binder_alloc_mmap_handler: 31035 20001000-20004000 already mapped failed -16 03:36:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x32, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x88a8ffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]}) 03:36:14 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0x8010) 03:36:14 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000624000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) 03:36:14 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) 03:36:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = fcntl$dupfd(r0, 0x0, r0) recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000240)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x2ef, &(0x7f00000006c0), 0x225, &(0x7f0000000000)=""/22, 0x16}, 0x2000) 03:36:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 03:36:14 executing program 1: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0) close(r0) 03:36:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4, 0x2}}}, @IFLA_ADDRESS={0xa, 0x1}]}, 0x44}, 0x1}, 0x0) 03:36:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x7, &(0x7f0000000000), 0x4) close(r2) close(r1) 03:36:14 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0x8010) 03:36:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") dup(0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 03:36:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x1) 03:36:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x5, 0xffac) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000101000)={@random="cd390c081bf2", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0) [ 850.378856] tls_set_device_offload_rx: netdev lo with no TLS offload [ 850.403440] tls_set_device_offload_rx: netdev lo with no TLS offload 03:36:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000080)={r2}, &(0x7f0000000140), 0x8) r3 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) r4 = inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) inotify_rm_watch(r1, r4) 03:36:14 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0x8010) 03:36:14 executing program 7: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) [ 850.563076] binder: 31081:31088 ioctl 40046205 0 returned -22 03:36:14 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="324bc917fef4", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 03:36:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x1c}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 03:36:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 850.607337] binder: 31081:31094 ioctl 40046205 0 returned -22 03:36:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x40082406, &(0x7f0000000040)={r0}) close(r1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:36:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x40, 0x2, &(0x7f00000015c0)=[{&(0x7f0000000200)="dd9352faf2d17f4a193bdf1a639c07a932d8b99a10787df735f483b5835295d24f8f1b1e0b146e6a1911c56a5aa1699e2b47b6455aaed7d044eba45a2a54bdd0086626db5a1bf1c33267", 0x4a, 0x10000}, {&(0x7f0000000300)="e89abd9e2c624e14e4a6152e0cab6748a1d8a5bea6ac7962ddb43c4140e12d77e081dccd59fc701dc2cd2dffc1deb123408dc48bd123a19b385eb6d01e3d5b05a432bbf7c012fae8cb488742157ff56b97455ba927eb42cf434c4331d13e24b56ff0fa99433474c985dec8cd1c526b80006461cb78b55ed930001dbea23df1243353ad31abc75fa23d07854a43e602", 0x8f, 0x5ee}], 0x0, &(0x7f0000001680)={[{@show_sys_files_no='show_sys_files=no', 0x2c}, {@nls={'nls', 0x3d, 'macinuit'}, 0x2c}, {@nls={'nls', 0x3d, 'cp865'}, 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@utf8='utf8', 0x2c}]}) socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) 03:36:14 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0x8010) [ 850.869439] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 850.889644] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 850.909857] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 850.929719] ntfs: (device loop3): parse_options(): Unrecognized mount option . 03:36:15 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x80000000) 03:36:15 executing program 0: poll(&(0x7f0000000040)=[{}, {}, {}, {}], 0x2324, 0x0) 03:36:15 executing program 1: socketpair$unix(0x1, 0x10000000000002, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000180), 0x4924924924925a6, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/14, 0xe, 0x0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) 03:36:15 executing program 6: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000740)='\x00', 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r4, r3}, &(0x7f0000000280)=""/132, 0x2c9, 0x0) 03:36:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg(r3, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)='"', 0x1}], 0x1}}, {{&(0x7f0000002400)=@nl=@unspec, 0x80, &(0x7f0000002500)=[{&(0x7f0000002480)='F', 0x1}], 0x1, &(0x7f0000002540)}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e1, &(0x7f00000000c0)={r0}) 03:36:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000400)=0x6b65a878, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) [ 851.627420] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:36:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)}) 03:36:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@usrjquota='usrjquota=', 0x2c}, {@nolazytime='nolazytime', 0x2c}]}) 03:36:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0xa000003ff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:36:15 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000019007f5300fe01b2a4a280930a600000ffa8433591000000390001000000000000d1000019000500fe800000000000d21338d54400136ef75afb83de448daa7227c440b8220000060cec4fab91d4000000", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 03:36:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:36:15 executing program 7: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000003c0)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000400)}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/148, 0x94) prctl$intptr(0x24, 0x7fffffff) 03:36:15 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000040)=""/40, &(0x7f0000001000)=0x1af) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:36:15 executing program 6: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @random="6f7e6256f32e", [], {@ipv6={0x86dd, {0x0, 0x6, "6d570e", 0x14, 0xff, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000080)) [ 851.815537] binder: 31173:31180 got transaction with too large buffer [ 851.846992] xprt_adjust_timeout: rq_timeout = 0! 03:36:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) symlink(&(0x7f0000000100)='./file0/file1\x00', &(0x7f00000001c0)='./file0/file0/file0\x00') 03:36:16 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 03:36:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 851.861151] binder: 31173:31180 transaction failed 29201/-22, size 88-96 line 3126 [ 851.877752] binder_alloc: binder_alloc_mmap_handler: 31173 20001000-20004000 already mapped failed -16 [ 851.891600] xprt_adjust_timeout: rq_timeout = 0! [ 851.897528] binder: BINDER_SET_CONTEXT_MGR already set [ 851.913041] binder: 31173:31180 ioctl 40046207 0 returned -16 [ 851.920748] binder_alloc: 31173: binder_alloc_buf, no vma [ 851.921339] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 851.926498] binder: 31173:31190 transaction failed 29189/-3, size 88-96 line 2967 [ 851.935396] EXT4-fs (loop4): group descriptors corrupted! [ 851.950435] binder: undelivered TRANSACTION_ERROR: 29201 [ 851.958407] binder: undelivered TRANSACTION_ERROR: 29189 [ 851.980807] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 851.989909] EXT4-fs (loop4): group descriptors corrupted! 03:36:16 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) fcntl$notify(r0, 0x406, 0x100000000000284) 03:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0xa01, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@remote={0xfe, 0x80, [], 0xbb}}, {@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x2b}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc7539(ctr(serpent),sha384-ssse3)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 03:36:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) 03:36:16 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x8000, 0x10000) fallocate(r0, 0x0, 0x0, 0x8000006) 03:36:16 executing program 4: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000434ff8)) 03:36:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) unshare(0x400) ioctl$int_in(r1, 0x800000c004500a, &(0x7f00006e1000)) 03:36:16 executing program 3: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x21, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) 03:36:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:36:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0235356a0b1dad45822070") prlimit64(0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)) socket$can_bcm(0x1d, 0x2, 0x2) 03:36:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000ac0)=0x80, 0x0) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 03:36:16 executing program 6: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)={0x0, 0x4, [0x0, 0x8cb]}) 03:36:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:36:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:36:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x3c}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x3, 0x0, 0x8}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) 03:36:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fdatasync(r1) 03:36:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt(r1, 0x0, 0xce, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0xcb) 03:36:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f00000002c0)={0x1c, 0x28, 0x10000000000005, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic='\v@']}]}, 0x1c}, 0x1}, 0x0) 03:36:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0) 03:36:17 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)) r1 = dup2(r0, r0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f0000000000)=""/53, 0x35, &(0x7f0000000040)=""/82}}, 0x68) socket$inet6(0xa, 0x0, 0x0) close(r1) 03:36:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fdatasync(r1) 03:36:17 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000a80)='/dev/usbmon#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 03:36:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f80762070") r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)="000000800000800000") ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) 03:36:17 executing program 7: fanotify_mark(0xffffffffffffffff, 0x2, 0x10, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 03:36:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0x40317, 0x0, 0x0, {0x1}, [@nested={0xc, 0x3, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 03:36:17 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x28, 0x4}, 0x28) [ 853.056063] x86/PAT: syz-executor0:31290 map pfn RAM range req write-combining for [mem 0x16bc80000-0x16bc83fff], got write-back [ 853.088328] x86/PAT: syz-executor0:31292 map pfn RAM range req write-combining for [mem 0x16bc80000-0x16bc83fff], got write-back [ 853.199360] netlink: 'syz-executor6': attribute type 3 has an invalid length. [ 853.212909] netlink: 'syz-executor6': attribute type 3 has an invalid length. 03:36:18 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000a80)='/dev/usbmon#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 03:36:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fdatasync(r1) 03:36:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x4, 0x7, @loopback={0x0, 0x1}}]}}}]}, 0x4c}, 0x1}, 0x0) 03:36:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}], 0x98}], 0x1, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 03:36:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d56ec5f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 03:36:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:18 executing program 7: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x4) 03:36:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000367fe4)=""/91, 0xa9) 03:36:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x2271, &(0x7f0000000000)) 03:36:18 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000a80)='/dev/usbmon#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 03:36:18 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6={0x0, 0x6, "feeb47", 0x14, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @empty, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x3c) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fdatasync(r1) 03:36:18 executing program 0: semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0x8001}], 0x1, &(0x7f0000000200)={0x77359400}) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 03:36:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000367fe4)=""/91, 0xa9) 03:36:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x800000001}, &(0x7f0000000080)=0x10) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(digest_null-generic,cbc-serpent-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x19) 03:36:18 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000a80)='/dev/usbmon#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 03:36:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 03:36:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000367fe4)=""/91, 0xa9) 03:36:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:36:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000000c0)={@loopback}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'bond_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) fchdir(0xffffffffffffffff) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000300)=0x1e) creat(&(0x7f00000007c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)) unlink(&(0x7f0000000080)='./file0\x00') ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:36:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x200000000000003a, &(0x7f0000002000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 03:36:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic="99"]}]}, 0x1c}, 0x1}, 0x0) 03:36:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x800) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x2) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r0, &(0x7f0000000000)={r2, r0}) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000000c0)) ioctl$TCXONC(r4, 0x540a, 0x0) 03:36:18 executing program 2: r0 = socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) listen(r0, 0x830) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x58d2b83c, 0x4) 03:36:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000367fe4)=""/91, 0xa9) 03:36:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x81204101, &(0x7f0000001f64)) 03:36:18 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0xfffffffffffffc00}, 0x8) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:36:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='coredump_filter\x00') r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) sendfile(r2, r3, &(0x7f00000000c0), 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x7, 0x2000000000000d7) 03:36:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000000c0)={@loopback}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'bond_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) fchdir(0xffffffffffffffff) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000300)=0x1e) creat(&(0x7f00000007c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)) unlink(&(0x7f0000000080)='./file0\x00') ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:36:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x3, 0x2) getsockopt(r1, 0x0, 0xcf, &(0x7f00000002c0)=""/203, &(0x7f0000000000)=0x27b) 03:36:19 executing program 5: futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000fd3ff0), &(0x7f0000000ffc), 0x80000000) 03:36:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r0, 0x0) 03:36:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x70}, 0x2c) close(r1) 03:36:19 executing program 7: getgroups(0x2, &(0x7f0000000040)=[0x0, 0xffffffffffffffff]) setregid(r0, r0) 03:36:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)}]) 03:36:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x40045532, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)) 03:36:19 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "587aaac111ac22a935cc561d5a1876f9d964fe3616bd"}, 0x21) 03:36:19 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:20 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write$eventfd(r0, &(0x7f0000000000), 0x8) 03:36:20 executing program 4: ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x80000001, @uid}]}, 0x1c}, 0x1}, 0x0) 03:36:20 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x8) fcntl$setlease(r1, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:36:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000000c0)={@loopback}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'bond_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) fchdir(0xffffffffffffffff) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000300)=0x1e) creat(&(0x7f00000007c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)) unlink(&(0x7f0000000080)='./file0\x00') ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:36:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r1, 0x705, 0x0, 0x0, {0xb}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/153, 0x99}, 0x0) 03:36:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x40045532, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)) 03:36:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x40045532, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)) 03:36:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f0000000000)="3798b23629cadd4dbd9e28ca6e7696ae", 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") read(r1, &(0x7f0000000bc0)=""/93, 0x20000bfd) 03:36:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x40045532, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)) 03:36:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x40045532, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)) [ 855.911621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 855.927630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 03:36:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x30, &(0x7f0000000100), &(0x7f0000013000)=0x4) close(r2) close(r1) 03:36:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000000100)=""/248) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000280)=0x6e) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000002b00)="74086e750000000065d15c318ca065519cad00008c00000000", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) 03:36:20 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setresgid(0x0, r2, 0x0) 03:36:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x40045532, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)) 03:36:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x40045532, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)) 03:36:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000003b40)={&(0x7f0000000f80)=@llc={0x1a}, 0x80, &(0x7f0000002540), 0x0, &(0x7f00000025c0)=[{0x10}], 0x10, 0x400c044}, 0x20000000) 03:36:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0x26e, &(0x7f00000bfff0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x2}, 0x20) 03:36:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) sendmmsg$alg(r2, &(0x7f00000013c0), 0x17c, 0x7fffef35) 03:36:21 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000180)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) 03:36:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000000c0)={@loopback}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'bond_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) fchdir(0xffffffffffffffff) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000300)=0x1e) creat(&(0x7f00000007c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)) unlink(&(0x7f0000000080)='./file0\x00') ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:36:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c}) 03:36:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:36:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x2000000000000001}, 0x14}, 0x1}, 0x0) 03:36:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0x0, 0x4}}) 03:36:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x8b]}) 03:36:21 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x8, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) 03:36:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") setpriority(0x2, 0x0, 0x0) 03:36:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)="6d61705f66696c657300fae64997ae35e056cf22504e41431b2bbe560aea2d2a0d9b5aa85cfdbbc8af4bbbe9e8e948d97dd7ef390dacf3ba59d8361ebe408a58bf8fc6a1cb60b5fc6d4ca7c25cc756b65025bcd70d0eff52515defb3cbae32fdb50fa74b22707bd933c7d248baf01628033fb935442a29b34cba35a986be2641bfcaf3012b7cdf7c620c81185594b58835b3eb122ed9fa00") fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 03:36:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:36:21 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/236, 0xec}], 0x1, 0x0) [ 857.094951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 857.114566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 03:36:21 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) close(r0) 03:36:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x2c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000002740)={&(0x7f0000000240)=ANY=[]}, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x78}}], 0x4000000000002ed, 0x0) 03:36:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1}, &(0x7f0000000200)=0x10) 03:36:21 executing program 2: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)) prctl$intptr(0x200000002f, 0x2) 03:36:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x7, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x48) [ 857.286980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 03:36:21 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x6612, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}) 03:36:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:36:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0f090f01c96766c7442400ca4000006766c74424022814269e6766c744240600000000670f01142466660f3808cd0f2202660f13479b0f01c90f019f1495b836010f00d036f3ab", 0x47}], 0x1, 0x0, &(0x7f0000000240), 0x0) 03:36:21 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r1, 0x0, r0, 0x0) 03:36:21 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="25af4c79dc434a0d7c5fca710208", 0xe}], 0x1, &(0x7f0000000140)}, 0x0) 03:36:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40002, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000bb928fbd0065751ede823b45a90f876e6d9523be20c5c6fa095309bb8144150ad4b2921ea4e8fa062041c421ed425291540dc38b518cdf625ff179ae62096413"], 0x55) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)) 03:36:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") syz_open_procfs(0x0, &(0x7f0000000200)='net/hci\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_flowlabel\x00') 03:36:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) close(r1) 03:36:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:36:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="10b6201cf65058b178c687e6b92bf73760b58d4b8d557b1ee324252080565b22b16266748c45c0e213eb5d2ff010281897c36eb68ce1bcc487f4fdb56ed579ec7e", 0x41) [ 857.463716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 03:36:21 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) unshare(0x40600) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)}, 0x0) 03:36:21 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) symlinkat(&(0x7f0000008ff8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00') r2 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000f00)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001000)=0xe8) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[]) 03:36:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000000)={0xfffffffd}) 03:36:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c4c379146600006543a02d0000000000000064670f01cab8010000000f01d946d8f1e1b066ba400066edb9f60800000f32f2400f0964460f35", 0x39}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:36:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) close(r1) [ 857.630645] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 03:36:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x80000000, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(r1, 0x0, 0x0) keyctl$session_to_parent(0x12) 03:36:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001900)="64621e4f65345b315561c915741bdd63cd", 0x11}], 0x1, &(0x7f0000000840)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@ethernet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/170, 0xffffff04}], 0x1, &(0x7f0000000240)=""/148, 0xfffffffffffffe78}, 0x0) 03:36:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) msgsnd(r1, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgrcv(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 03:36:21 executing program 7: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip6_tables_targets\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) [ 857.740179] 9pnet_virtio: no channels available for device ./file0 03:36:22 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 03:36:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000000)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) 03:36:22 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000976000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x6, 0x200000003a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}}}}}, &(0x7f0000a95fe8)) 03:36:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 03:36:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) close(r1) [ 857.862421] FAT-fs (loop7): bogus number of reserved sectors [ 857.870009] FAT-fs (loop7): Can't find a valid FAT filesystem [ 857.915744] FAT-fs (loop7): bogus number of reserved sectors [ 857.921643] FAT-fs (loop7): Can't find a valid FAT filesystem 03:36:22 executing program 7: r0 = socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86, {0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001b00)="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", 0xff0}], 0x1}, 0x0) 03:36:22 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000019007f5300fe01b2a4a280930a600000ffa8433591000000390002000000000000d1000019000500fe800000000000d21338d54400136ef75afb83de448daa7227c440b8220000060cec4fab91d4000000", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 03:36:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000002c0)="b7", 0x1, 0x8000, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) connect(r0, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0x18, 0x11a, 0x1, '}'}], 0x18}}], 0x1, 0x0) connect(r0, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x80) write$binfmt_elf32(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) [ 858.036930] ================================================================== [ 858.044359] BUG: KASAN: slab-out-of-bounds in pdu_read+0x90/0xd0 [ 858.050501] Read of size 12141 at addr ffff8801c12903ad by task syz-executor0/31735 [ 858.058273] [ 858.059894] CPU: 0 PID: 31735 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 858.068373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.077720] Call Trace: [ 858.080318] dump_stack+0x1c9/0x2b4 [ 858.083931] ? dump_stack_print_info.cold.2+0x52/0x52 [ 858.089101] ? printk+0xa7/0xcf [ 858.092385] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 858.097137] ? pdu_read+0x90/0xd0 [ 858.100573] print_address_description+0x6c/0x20b [ 858.105397] ? pdu_read+0x90/0xd0 [ 858.108831] kasan_report.cold.7+0x242/0x30d [ 858.113227] check_memory_region+0x13e/0x1b0 [ 858.117622] memcpy+0x23/0x50 [ 858.120710] pdu_read+0x90/0xd0 [ 858.123982] p9pdu_readf+0x579/0x2170 [ 858.127772] ? p9pdu_writef+0xe0/0xe0 [ 858.131564] ? ksys_dup3+0x690/0x690 [ 858.135264] ? check_same_owner+0x340/0x340 [ 858.139570] ? p9_fd_poll+0x2b0/0x2b0 [ 858.143355] ? kasan_kmalloc+0xc4/0xe0 [ 858.147240] ? p9_fd_show_options+0x1c0/0x1c0 [ 858.151722] p9_client_create+0x6d0/0x1537 [ 858.155938] ? p9_client_read+0xbb0/0xbb0 [ 858.160071] ? lock_acquire+0x1e4/0x540 [ 858.164043] ? fs_reclaim_acquire+0x20/0x20 [ 858.168352] ? lock_release+0xa30/0xa30 [ 858.172312] ? __lockdep_init_map+0x105/0x590 [ 858.176803] ? kasan_check_write+0x14/0x20 [ 858.181029] ? __init_rwsem+0x1cc/0x2a0 [ 858.185003] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 858.190016] ? __kmalloc_track_caller+0x311/0x760 [ 858.194849] ? save_stack+0xa9/0xd0 [ 858.198458] ? save_stack+0x43/0xd0 [ 858.202073] ? kasan_kmalloc+0xc4/0xe0 [ 858.205940] ? memcpy+0x45/0x50 [ 858.209203] v9fs_session_init+0x21a/0x1a80 [ 858.213509] ? rcu_note_context_switch+0x730/0x730 [ 858.218418] ? legacy_parse_monolithic+0xde/0x1e0 [ 858.223244] ? v9fs_show_options+0x7e0/0x7e0 [ 858.227633] ? lock_release+0xa30/0xa30 [ 858.231587] ? check_same_owner+0x340/0x340 [ 858.235890] ? lock_downgrade+0x8f0/0x8f0 [ 858.240027] ? kasan_unpoison_shadow+0x35/0x50 [ 858.244588] ? kasan_kmalloc+0xc4/0xe0 [ 858.248472] ? kmem_cache_alloc_trace+0x318/0x780 [ 858.253299] ? kasan_unpoison_shadow+0x35/0x50 [ 858.257878] ? kasan_kmalloc+0xc4/0xe0 [ 858.261755] v9fs_mount+0x7c/0x900 [ 858.265281] ? v9fs_drop_inode+0x150/0x150 [ 858.269504] legacy_get_tree+0x131/0x460 [ 858.273562] vfs_get_tree+0x1cb/0x5c0 [ 858.277360] do_mount+0x6f2/0x1e20 [ 858.280880] ? check_same_owner+0x340/0x340 [ 858.285181] ? lock_release+0xa30/0xa30 [ 858.289140] ? copy_mount_string+0x40/0x40 [ 858.293354] ? kasan_kmalloc+0xc4/0xe0 [ 858.297226] ? kmem_cache_alloc_trace+0x318/0x780 [ 858.302050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 858.307567] ? _copy_from_user+0xdf/0x150 [ 858.311697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 858.317223] ? copy_mount_options+0x285/0x380 [ 858.321705] ksys_mount+0x12d/0x140 [ 858.325318] __x64_sys_mount+0xbe/0x150 [ 858.329277] do_syscall_64+0x1b9/0x820 [ 858.333156] ? syscall_return_slowpath+0x5e0/0x5e0 [ 858.338076] ? syscall_return_slowpath+0x31d/0x5e0 [ 858.342987] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 858.347984] ? prepare_exit_to_usermode+0x291/0x3b0 [ 858.352983] ? perf_trace_sys_enter+0xb10/0xb10 [ 858.357639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 858.362471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.367644] RIP: 0033:0x455ab9 [ 858.370810] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 858.389938] RSP: 002b:00007f87185c5c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 858.397632] RAX: ffffffffffffffda RBX: 00007f87185c66d4 RCX: 0000000000455ab9 [ 858.404891] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 858.412140] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 858.419405] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 858.426656] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000000 [ 858.433909] [ 858.435528] Allocated by task 31735: [ 858.439225] save_stack+0x43/0xd0 [ 858.442833] kasan_kmalloc+0xc4/0xe0 [ 858.446528] __kmalloc+0x14e/0x760 [ 858.450058] p9_fcall_alloc+0x1e/0x90 [ 858.453848] p9_client_prepare_req.part.8+0x132/0xa00 [ 858.459027] p9_client_rpc+0x242/0x1330 [ 858.462988] p9_client_create+0xca4/0x1537 [ 858.467204] v9fs_session_init+0x21a/0x1a80 [ 858.471519] v9fs_mount+0x7c/0x900 [ 858.475041] legacy_get_tree+0x131/0x460 [ 858.479092] vfs_get_tree+0x1cb/0x5c0 [ 858.482877] do_mount+0x6f2/0x1e20 [ 858.486395] ksys_mount+0x12d/0x140 [ 858.490000] __x64_sys_mount+0xbe/0x150 [ 858.493953] do_syscall_64+0x1b9/0x820 [ 858.497826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.502997] [ 858.504603] Freed by task 30409: [ 858.507951] save_stack+0x43/0xd0 [ 858.511381] __kasan_slab_free+0x11a/0x170 [ 858.515606] kasan_slab_free+0xe/0x10 [ 858.519395] kfree+0xd9/0x260 [ 858.522481] skb_free_head+0x99/0xc0 [ 858.526172] skb_release_data+0x6a4/0x880 [ 858.530315] skb_release_all+0x4a/0x60 [ 858.534186] consume_skb+0x193/0x560 [ 858.537887] skb_free_datagram+0x1a/0xf0 [ 858.541932] netlink_recvmsg+0x70f/0x1490 [ 858.546068] sock_recvmsg+0xd0/0x110 [ 858.549760] ___sys_recvmsg+0x2b6/0x680 [ 858.553737] __sys_recvmsg+0x11a/0x290 [ 858.557618] __x64_sys_recvmsg+0x78/0xb0 [ 858.561660] do_syscall_64+0x1b9/0x820 [ 858.565539] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.570706] [ 858.572323] The buggy address belongs to the object at ffff8801c1290380 [ 858.572323] which belongs to the cache kmalloc-16384 of size 16384 [ 858.585320] The buggy address is located 45 bytes inside of [ 858.585320] 16384-byte region [ffff8801c1290380, ffff8801c1294380) [ 858.597258] The buggy address belongs to the page: [ 858.602168] page:ffffea000704a400 count:1 mapcount:0 mapping:ffff8801da802200 index:0x0 compound_mapcount: 0 [ 858.612550] flags: 0x2fffc0000010200(slab|head) [ 858.617201] raw: 02fffc0000010200 ffffea0006572208 ffffea0006f48a08 ffff8801da802200 [ 858.625060] raw: 0000000000000000 ffff8801c1290380 0000000100000001 0000000000000000 [ 858.632925] page dumped because: kasan: bad access detected [ 858.638619] [ 858.640224] Memory state around the buggy address: [ 858.645143] ffff8801c1292280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 858.652490] ffff8801c1292300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 858.659828] >ffff8801c1292380: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 858.667162] ^ [ 858.671552] ffff8801c1292400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 858.678888] ffff8801c1292480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 03:36:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) close(r1) 03:36:22 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5}, 0x30) [ 858.686224] ================================================================== [ 858.694005] Kernel panic - not syncing: panic_on_warn set ... [ 858.694005] [ 858.701393] CPU: 0 PID: 31735 Comm: syz-executor0 Tainted: G B 4.18.0-rc5-next-20180720+ #12 [ 858.711268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.720608] Call Trace: [ 858.723185] dump_stack+0x1c9/0x2b4 [ 858.726797] ? dump_stack_print_info.cold.2+0x52/0x52 [ 858.731975] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 858.736889] panic+0x238/0x4e7 [ 858.740062] ? add_taint.cold.5+0x16/0x16 [ 858.744194] ? do_raw_spin_unlock+0xa7/0x2f0 [ 858.748584] ? pdu_read+0x90/0xd0 [ 858.752021] kasan_end_report+0x47/0x4f [ 858.755973] kasan_report.cold.7+0x76/0x30d [ 858.760299] check_memory_region+0x13e/0x1b0 [ 858.764694] memcpy+0x23/0x50 [ 858.767790] pdu_read+0x90/0xd0 [ 858.771056] p9pdu_readf+0x579/0x2170 [ 858.774839] ? p9pdu_writef+0xe0/0xe0 [ 858.778621] ? ksys_dup3+0x690/0x690 [ 858.782318] ? check_same_owner+0x340/0x340 [ 858.786631] ? p9_fd_poll+0x2b0/0x2b0 [ 858.790423] ? kasan_kmalloc+0xc4/0xe0 [ 858.794312] ? p9_fd_show_options+0x1c0/0x1c0 [ 858.798792] p9_client_create+0x6d0/0x1537 [ 858.803010] ? p9_client_read+0xbb0/0xbb0 [ 858.807139] ? lock_acquire+0x1e4/0x540 [ 858.811097] ? fs_reclaim_acquire+0x20/0x20 [ 858.815402] ? lock_release+0xa30/0xa30 [ 858.819355] ? __lockdep_init_map+0x105/0x590 [ 858.823839] ? kasan_check_write+0x14/0x20 [ 858.828055] ? __init_rwsem+0x1cc/0x2a0 [ 858.832013] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 858.837015] ? __kmalloc_track_caller+0x311/0x760 [ 858.841836] ? save_stack+0xa9/0xd0 [ 858.845443] ? save_stack+0x43/0xd0 [ 858.849048] ? kasan_kmalloc+0xc4/0xe0 [ 858.852914] ? memcpy+0x45/0x50 [ 858.856179] v9fs_session_init+0x21a/0x1a80 [ 858.860482] ? rcu_note_context_switch+0x730/0x730 [ 858.865405] ? legacy_parse_monolithic+0xde/0x1e0 [ 858.870229] ? v9fs_show_options+0x7e0/0x7e0 [ 858.874618] ? lock_release+0xa30/0xa30 [ 858.878574] ? check_same_owner+0x340/0x340 [ 858.882875] ? lock_downgrade+0x8f0/0x8f0 [ 858.887013] ? kasan_unpoison_shadow+0x35/0x50 [ 858.891574] ? kasan_kmalloc+0xc4/0xe0 [ 858.895453] ? kmem_cache_alloc_trace+0x318/0x780 [ 858.900277] ? kasan_unpoison_shadow+0x35/0x50 [ 858.904848] ? kasan_kmalloc+0xc4/0xe0 [ 858.908716] v9fs_mount+0x7c/0x900 [ 858.912238] ? v9fs_drop_inode+0x150/0x150 [ 858.916560] legacy_get_tree+0x131/0x460 [ 858.920626] vfs_get_tree+0x1cb/0x5c0 [ 858.924407] do_mount+0x6f2/0x1e20 [ 858.927926] ? check_same_owner+0x340/0x340 [ 858.932224] ? lock_release+0xa30/0xa30 [ 858.936178] ? copy_mount_string+0x40/0x40 [ 858.940392] ? kasan_kmalloc+0xc4/0xe0 [ 858.944261] ? kmem_cache_alloc_trace+0x318/0x780 [ 858.949088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 858.954625] ? _copy_from_user+0xdf/0x150 [ 858.958760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 858.964291] ? copy_mount_options+0x285/0x380 [ 858.968773] ksys_mount+0x12d/0x140 [ 858.972404] __x64_sys_mount+0xbe/0x150 [ 858.976369] do_syscall_64+0x1b9/0x820 [ 858.980239] ? syscall_return_slowpath+0x5e0/0x5e0 [ 858.985153] ? syscall_return_slowpath+0x31d/0x5e0 [ 858.990062] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 858.995058] ? prepare_exit_to_usermode+0x291/0x3b0 [ 859.000062] ? perf_trace_sys_enter+0xb10/0xb10 [ 859.004717] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 859.009557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 859.014735] RIP: 0033:0x455ab9 [ 859.017901] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 859.037029] RSP: 002b:00007f87185c5c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 859.044726] RAX: ffffffffffffffda RBX: 00007f87185c66d4 RCX: 0000000000455ab9 [ 859.051978] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 859.059235] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 859.066494] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 859.073754] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000000 [ 859.081553] Dumping ftrace buffer: [ 859.085083] --------------------------------- [ 859.089574] syz-exec-32694 0...2 430342271us : 0: }D [ 859.089588] syz-exec-32694 0...2 430342278us : 0: }D [ 859.094848] syz-exec-32694 0...2 430342281us : 0: }D [ 859.100106] syz-exec-32694 0...2 430342284us : 0: }D [ 859.105366] syz-exec-32694 0...2 430342286us : 0: }D [ 859.110626] syz-exec-32694 0...2 430342288us : 0: }D [ 859.115887] syz-exec-32694 0...2 430342291us : 0: }D [ 859.121150] syz-exec-32694 0...2 430342294us : 0: }D [ 859.126421] syz-exec-32694 0...2 430342296us : 0: }D [ 859.131681] syz-exec-32694 0...2 430342299us : 0: }D [ 859.136944] syz-exec-32694 0...2 430342301us : 0: }D [ 859.142217] syz-exec-32694 0...2 430342304us : 0: }D [ 859.147486] syz-exec-32694 0.N.2 430342832us : 0: }D [ 859.152747] syz-exec-32694 0...2 430345404us : 0: }D [ 859.158016] syz-exec-32694 0...2 430345408us : 0: }D [ 859.163285] syz-exec-32694 0...2 430345410us : 0: }D [ 859.168545] syz-exec-32694 0...2 430345414us : 0: }D [ 859.173819] syz-exec-32694 0...2 430345416us : 0: }D [ 859.179078] syz-exec-32694 0...2 430345419us : 0: }D [ 859.184340] syz-exec-32694 0...2 430345421us : 0: }D [ 859.189621] syz-exec-32694 0...2 430345424us : 0: }D [ 859.194879] syz-exec-32694 0...2 430345427us : 0: }D [ 859.200151] syz-exec-32694 0...2 430345429us : 0: }D [ 859.205420] syz-exec-32694 0...2 430345432us : 0: }D [ 859.211998] syz-exec-32694 0...2 430345435us : 0: }D [ 859.217744] syz-exec-32694 0...2 430345437us : 0: }D [ 859.223007] syz-exec-32694 0...2 430345440us : 0: }D [ 859.228263] syz-exec-32694 0...2 430345443us : 0: }D [ 859.233522] syz-exec-32694 0...2 430345445us : 0: }D [ 859.238780] syz-exec-32694 0...2 430345447us : 0: }D [ 859.244039] syz-exec-32694 0...2 430345450us : 0: }D [ 859.249296] syz-exec-32694 0...2 430345453us : 0: }D [ 859.254555] syz-exec-32694 0...2 430345455us : 0: }D [ 859.259811] syz-exec-32694 0...2 430345458us : 0: }D [ 859.265069] syz-exec-32694 0...2 430345460us : 0: }D [ 859.270324] syz-exec-32694 0...2 430345463us : 0: }D [ 859.275594] syz-exec-32694 0...2 430345465us : 0: }D [ 859.280852] syz-exec-32694 0...2 430345467us : 0: }D [ 859.286108] syz-exec-32694 0...2 430345469us : 0: }D [ 859.291375] syz-exec-32694 0...2 430345471us : 0: }D [ 859.296632] syz-exec-32694 0...2 430345473us : 0: }D [ 859.301892] syz-exec-32694 0...2 430345476us : 0: }D [ 859.307151] syz-exec-32694 0...2 430345478us : 0: }D [ 859.312421] syz-exec-32694 0...2 430345480us : 0: }D [ 859.317678] syz-exec-32694 0...2 430345482us : 0: }D [ 859.322935] syz-exec-32694 0...2 430345484us : 0: }D [ 859.328199] syz-exec-32694 0...2 430345487us : 0: }D [ 859.333457] syz-exec-32694 0...2 430345489us : 0: }D [ 859.338714] syz-exec-32694 0...2 430345491us : 0: }D [ 859.343972] syz-exec-32694 0...2 430345494us : 0: }D [ 859.349230] syz-exec-32694 0...2 430345496us : 0: }D [ 859.354490] syz-exec-32694 0...2 430345498us : 0: }D [ 859.359755] syz-exec-32694 0...2 430345500us : 0: }D [ 859.365012] syz-exec-32694 0...2 430345503us : 0: }D [ 859.370281] syz-exec-32694 0...2 430345505us : 0: }D [ 859.375633] syz-exec-32694 0...2 430345508us : 0: }D [ 859.380891] syz-exec-32694 0...2 430345510us : 0: }D [ 859.386157] syz-exec-32694 0...2 430345513us : 0: }D [ 859.391415] syz-exec-32694 0...2 430345515us : 0: }D [ 859.396676] syz-exec-32694 0...2 430345518us : 0: }D [ 859.401934] syz-exec-32694 0...2 430345520us : 0: }D [ 859.407203] syz-exec-32694 0...2 430345523us : 0: }D [ 859.412470] syz-exec-32694 0...2 430345525us : 0: }D [ 859.417727] syz-exec-32694 0...2 430345528us : 0: }D [ 859.422996] syz-exec-32694 0...2 430345531us : 0: }D [ 859.428253] syz-exec-32694 0...2 430345533us : 0: }D [ 859.433510] syz-exec-32694 0...2 430345536us : 0: }D [ 859.438770] syz-exec-32694 0...2 430345538us : 0: }D [ 859.444028] syz-exec-32694 0...2 430345541us : 0: }D [ 859.449293] syz-exec-32694 0...2 430345543us : 0: }D [ 859.454551] syz-exec-32694 0...2 430345545us : 0: }D [ 859.459810] syz-exec-32694 0...2 430345548us : 0: }D [ 859.465066] syz-exec-32694 0...2 430345550us : 0: }D [ 859.470324] syz-exec-32694 0...2 430345553us : 0: }D [ 859.475591] syz-exec-32694 0...2 430345555us : 0: }D [ 859.480850] syz-exec-32694 0...2 430345558us : 0: }D [ 859.486112] syz-exec-32694 0...2 430345560us : 0: }D [ 859.491367] syz-exec-32694 0...2 430345563us : 0: }D [ 859.496623] syz-exec-32694 0...2 430345565us : 0: }D [ 859.501888] syz-exec-32694 0...2 430345568us : 0: }D [ 859.507234] syz-exec-32694 0...2 430345570us : 0: }D [ 859.512490] syz-exec-32694 0...2 430345572us : 0: }D [ 859.517754] syz-exec-32694 0...2 430345575us : 0: }D [ 859.523021] syz-exec-32694 0...2 430345577us : 0: }D [ 859.528280] syz-exec-32694 0...2 430345579us : 0: }D [ 859.533545] syz-exec-32694 0...2 430345581us : 0: }D [ 859.538899] syz-exec-32694 0...2 430345583us : 0: }D [ 859.544158] syz-exec-32694 0...2 430345585us : 0: }D [ 859.549423] syz-exec-32694 0...2 430345587us : 0: }D [ 859.554693] syz-exec-32694 0...2 430345589us : 0: }D [ 859.559952] syz-exec-32694 0...2 430345592us : 0: }D [ 859.565216] syz-exec-32694 0...2 430345594us : 0: }D [ 859.570478] syz-exec-32694 0...2 430345596us : 0: }D [ 859.575739] syz-exec-32694 0...2 430345598us : 0: }D [ 859.581000] syz-exec-32694 0...2 430345601us : 0: }D [ 859.586262] syz-exec-32694 0...2 430345603us : 0: }D [ 859.591519] syz-exec-32694 0...2 430345605us : 0: }D [ 859.596787] syz-exec-32694 0...2 430345608us : 0: }D [ 859.602048] syz-exec-32694 0...2 430345610us : 0: }D [ 859.607308] syz-exec-32694 0...2 430345613us : 0: }D [ 859.612572] syz-exec-32694 0...2 430345615us : 0: }D [ 859.617830] syz-exec-32694 0...2 430345617us : 0: }D [ 859.623102] syz-exec-32694 0...2 430345620us : 0: }D [ 859.628363] syz-exec-32694 0...2 430345622us : 0: }D [ 859.633626] syz-exec-32694 0...2 430345624us : 0: }D [ 859.638885] syz-exec-32694 0...2 430345626us : 0: }D [ 859.644158] syz-exec-32694 0...2 430345629us : 0: }D [ 859.649420] syz-exec-32694 0...2 430345631us : 0: }D [ 859.654680] syz-exec-32694 0...2 430345634us : 0: }D [ 859.659950] syz-exec-32694 0...2 430345636us : 0: }D [ 859.665214] syz-exec-32694 0...2 430345639us : 0: }D [ 859.670918] syz-exec-32694 0...2 430345641us : 0: }D [ 859.676180] syz-exec-32694 0...2 430345644us : 0: }D [ 859.681453] syz-exec-32694 0...2 430345647us : 0: }D [ 859.686714] syz-exec-32694 0...2 430345649us : 0: }D [ 859.691982] syz-exec-32694 0...2 430345652us : 0: }D [ 859.697243] syz-exec-32694 0...2 430345654us : 0: }D [ 859.702504] syz-exec-32694 0...2 430345657us : 0: }D [ 859.707773] syz-exec-32694 0...2 430345659us : 0: }D [ 859.713032] syz-exec-32694 0...2 430345662us : 0: }D [ 859.718294] syz-exec-32694 0...2 430345664us : 0: }D [ 859.723577] syz-exec-32694 0...2 430345667us : 0: }D [ 859.728844] syz-exec-32694 0...2 430345669us : 0: }D [ 859.734114] syz-exec-32694 0...2 430345672us : 0: }D [ 859.739372] syz-exec-32694 0...2 430345675us : 0: }D [ 859.744640] syz-exec-32694 0...2 430345677us : 0: }D [ 859.749906] syz-exec-32694 0...2 430345680us : 0: }D [ 859.755190] syz-exec-32694 0...2 430345682us : 0: }D [ 859.760452] syz-exec-32694 0...2 430345685us : 0: }D [ 859.765710] syz-exec-32694 0...2 430345688us : 0: }D [ 859.770971] syz-exec-32694 0...2 430345690us : 0: }D [ 859.776230] syz-exec-32694 0...2 430345693us : 0: }D [ 859.781491] syz-exec-32694 0...2 430345695us : 0: }D [ 859.786752] syz-exec-32694 0...2 430345698us : 0: }D [ 859.792011] syz-exec-32694 0...2 430345700us : 0: }D [ 859.797275] syz-exec-32694 0...2 430345702us : 0: }D [ 859.802533] syz-exec-32694 0...2 430345705us : 0: }D [ 859.807793] syz-exec-32694 0...2 430345707us : 0: }D [ 859.813061] syz-exec-32694 0...2 430345710us : 0: }D [ 859.818332] syz-exec-32694 0...2 430345712us : 0: }D [ 859.823603] syz-exec-32694 0...2 430345715us : 0: }D [ 859.828871] syz-exec-32694 0...2 430345717us : 0: }D [ 859.834139] syz-exec-32694 0...2 430345720us : 0: }D [ 859.839398] syz-exec-32694 0...2 430345722us : 0: }D [ 859.844665] syz-exec-32694 0...2 430345725us : 0: }D [ 859.849923] syz-exec-32694 0...2 430345727us : 0: }D [ 859.855183] syz-exec-32694 0...2 430345730us : 0: }D [ 859.860454] syz-exec-32694 0...2 430345732us : 0: }D [ 859.865715] syz-exec-32694 0...2 430345735us : 0: }D [ 859.870982] syz-exec-32694 0...2 430345737us : 0: }D [ 859.876248] syz-exec-32694 0...2 430345740us : 0: }D [ 859.881507] syz-exec-32694 0...2 430345742us : 0: }D [ 859.886854] syz-exec-32694 0...2 430345745us : 0: }D [ 859.892125] syz-exec-32694 0...2 430345748us : 0: }D [ 859.897383] syz-exec-32694 0...2 430345750us : 0: }D [ 859.902641] syz-exec-32694 0...2 430345752us : 0: }D [ 859.907899] syz-exec-32694 0...2 430345755us : 0: }D [ 859.913157] syz-exec-32694 0...2 430345757us : 0: }D [ 859.918422] syz-exec-32694 0...2 430345759us : 0: }D [ 859.923681] syz-exec-32694 0...2 430345761us : 0: }D [ 859.928942] syz-exec-32694 0...2 430345763us : 0: }D [ 859.934200] syz-exec-32694 0...2 430345765us : 0: }D [ 859.939465] syz-exec-32694 0...2 430345768us : 0: }D [ 859.944724] syz-exec-32694 0...2 430345770us : 0: }D [ 859.949985] syz-exec-32694 0...2 430345772us : 0: }D [ 859.955252] syz-exec-32694 0...2 430345774us : 0: }D [ 859.960512] syz-exec-32694 0...2 430345777us : 0: }D [ 859.965773] syz-exec-32694 0...2 430345779us : 0: }D [ 859.971041] syz-exec-32694 0...2 430345781us : 0: }D [ 859.976313] syz-exec-32694 0...2 430345785us : 0: }D [ 859.981573] syz-exec-32694 0...2 430345788us : 0: }D [ 859.986833] syz-exec-32694 0...2 430345790us : 0: }D [ 859.992098] syz-exec-32694 0...2 430345793us : 0: }D [ 859.997358] syz-exec-32694 0...2 430345795us : 0: }D [ 860.002616] syz-exec-32694 0...2 430345797us : 0: }D [ 860.007875] syz-exec-32694 0...2 430345799us : 0: }D [ 860.013137] syz-exec-32694 0...2 430345801us : 0: }D [ 860.018401] syz-exec-32694 0...2 430345804us : 0: }D [ 860.023662] syz-exec-32694 0...2 430345806us : 0: }D [ 860.028927] syz-exec-32694 0...2 430345809us : 0: }D [ 860.034188] syz-exec-32694 0...2 430345811us : 0: }D [ 860.039449] syz-exec-32694 0...2 430345813us : 0: }D [ 860.044708] syz-exec-32694 0...2 430345815us : 0: }D [ 860.049970] syz-exec-32694 0...2 430345818us : 0: }D [ 860.055231] syz-exec-32694 0...2 430345820us : 0: }D [ 860.060499] syz-exec-32694 0...2 430345822us : 0: }D [ 860.065766] syz-exec-32694 0...2 430345825us : 0: }D [ 860.071029] syz-exec-32694 0...2 430345827us : 0: }D [ 860.076295] syz-exec-32694 0...2 430345829us : 0: }D [ 860.081571] syz-exec-32694 0...2 430345832us : 0: }D [ 860.086835] syz-exec-32694 0...2 430345834us : 0: }D [ 860.092703] syz-exec-32694 0...2 430345837us : 0: }D [ 860.097979] syz-exec-32694 0...2 430345839us : 0: }D [ 860.103241] syz-exec-32694 0...2 430345841us : 0: }D [ 860.108520] syz-exec-32694 0...2 430345844us : 0: }D [ 860.113782] syz-exec-32694 0...2 430345846us : 0: }D [ 860.119050] syz-exec-32694 0...2 430345848us : 0: }D [ 860.124313] syz-exec-32694 0...2 430345850us : 0: }D [ 860.129576] syz-exec-32694 0...2 430345853us : 0: }D [ 860.134848] syz-exec-32694 0...2 430345855us : 0: }D [ 860.140456] syz-exec-32694 0...2 430345858us : 0: }D [ 860.147193] syz-exec-32694 0...2 430345860us : 0: }D [ 860.152458] syz-exec-32694 0...2 430345862us : 0: }D [ 860.157734] syz-exec-32694 0...2 430345865us : 0: }D [ 860.163087] syz-exec-32694 0...2 430345867us : 0: }D [ 860.168362] syz-exec-32694 0...2 430345869us : 0: }D [ 860.173729] syz-exec-32694 0...2 430345871us : 0: }D [ 860.178995] syz-exec-32694 0...2 430345874us : 0: }D [ 860.184262] syz-exec-32694 0...2 430345876us : 0: }D [ 860.189527] syz-exec-32694 0...2 430345878us : 0: }D [ 860.194797] syz-exec-32694 0...2 430345881us : 0: }D [ 860.200085] syz-exec-32694 0...2 430345883us : 0: }D [ 860.205356] syz-exec-32694 0...2 430345885us : 0: }D [ 860.210621] syz-exec-32694 0...2 430345887us : 0: }D [ 860.215984] syz-exec-32694 0...2 430345890us : 0: }D [ 860.221262] syz-exec-32694 0...2 430345892us : 0: }D [ 860.226525] syz-exec-32694 0...2 430345894us : 0: }D [ 860.231798] syz-exec-32694 0...2 430345897us : 0: }D [ 860.237061] syz-exec-32694 0...2 430345899us : 0: }D [ 860.242319] syz-exec-32694 0...2 430345901us : 0: }D [ 860.247589] syz-exec-32694 0...2 430345903us : 0: }D [ 860.252860] syz-exec-32694 0...2 430345905us : 0: }D [ 860.258134] syz-exec-32694 0...2 430345908us : 0: }D [ 860.263405] syz-exec-32694 0...2 430345910us : 0: }D [ 860.269125] syz-exec-32694 0...2 430345912us : 0: }D [ 860.274385] syz-exec-32694 0...2 430345915us : 0: }D [ 860.279644] syz-exec-32694 0...2 430345917us : 0: }D [ 860.284905] syz-exec-32694 0...2 430345919us : 0: }D [ 860.290166] syz-exec-32694 0...2 430345922us : 0: }D [ 860.295426] syz-exec-32694 0...2 430345924us : 0: }D [ 860.300696] syz-exec-32694 0...2 430345926us : 0: }D [ 860.305956] syz-exec-32694 0...2 430345929us : 0: }D [ 860.311225] syz-exec-32694 0...2 430345931us : 0: }D [ 860.316500] syz-exec-32694 0...2 430345933us : 0: }D [ 860.321771] syz-exec-32694 0...2 430345936us : 0: }D [ 860.327034] syz-exec-32694 0...2 430345938us : 0: }D [ 860.332303] syz-exec-32694 0...2 430345940us : 0: }D [ 860.337565] syz-exec-32694 0...2 430345942us : 0: }D [ 860.342824] syz-exec-32694 0...2 430345945us : 0: }D [ 860.348082] syz-exec-32694 0...2 430345947us : 0: }D [ 860.353341] syz-exec-32694 0...2 430345949us : 0: }D [ 860.358602] syz-exec-32694 0...2 430345952us : 0: }D [ 860.363870] syz-exec-32694 0...2 430345954us : 0: }D [ 860.369143] syz-exec-32694 0...2 430345957us : 0: }D [ 860.374500] syz-exec-32694 0...2 430345959us : 0: }D [ 860.392191] syz-exec-32694 0...2 430345961us : 0: }D [ 860.397462] syz-exec-32694 0...2 430345963us : 0: }D [ 860.402723] syz-exec-32694 0...2 430345966us : 0: }D [ 860.407984] syz-exec-32694 0...2 430345968us : 0: }D [ 860.413255] syz-exec-32694 0...2 430345970us : 0: }D [ 860.418589] syz-exec-32694 0...2 430345973us : 0: }D [ 860.423848] syz-exec-32694 0...2 430345975us : 0: }D [ 860.429107] syz-exec-32694 0...2 430345977us : 0: }D [ 860.434366] syz-exec-32694 0...2 430345980us : 0: }D [ 860.439627] syz-exec-32694 0...2 430345982us : 0: }D [ 860.444887] syz-exec-32694 0...2 430345984us : 0: }D [ 860.450148] syz-exec-32694 0...2 430345986us : 0: }D [ 860.455408] syz-exec-32694 0...2 430345989us : 0: }D [ 860.460667] syz-exec-32694 0...2 430345991us : 0: }D [ 860.465927] syz-exec-32694 0...2 430345993us : 0: }D [ 860.471195] syz-exec-32694 0...2 430345996us : 0: }D [ 860.476453] syz-exec-32694 0...2 430345998us : 0: }D [ 860.481713] syz-exec-32694 0...2 430346000us : 0: }D [ 860.486971] syz-exec-32694 0...2 430346003us : 0: }D [ 860.492238] syz-exec-32694 0...2 430346005us : 0: }D [ 860.497500] syz-exec-32694 0...2 430346008us : 0: }D [ 860.502759] syz-exec-32694 0...2 430346010us : 0: }D [ 860.508034] syz-exec-32694 0...2 430346012us : 0: }D [ 860.513296] syz-exec-32694 0...2 430346014us : 0: }D [ 860.518556] syz-exec-32694 0...2 430346017us : 0: }D [ 860.523818] syz-exec-32694 0...2 430346019us : 0: }D [ 860.529092] syz-exec-32694 0...2 430346021us : 0: }D [ 860.534358] syz-exec-32694 0...2 430346024us : 0: }D [ 860.539617] syz-exec-32694 0...2 430346026us : 0: }D [ 860.544880] syz-exec-32694 0...2 430346028us : 0: }D [ 860.550144] syz-exec-32694 0...2 430346031us : 0: }D [ 860.555406] syz-exec-32694 0...2 430346033us : 0: }D [ 860.560668] syz-exec-32694 0...2 430346035us : 0: }D [ 860.565938] syz-exec-32694 0...2 430346037us : 0: }D [ 860.571210] syz-exec-32694 0...2 430346040us : 0: }D [ 860.576576] syz-exec-32694 0...2 430346042us : 0: }D [ 860.581837] syz-exec-32694 0...2 430346044us : 0: }D [ 860.587096] syz-exec-32694 0...2 430346047us : 0: }D [ 860.592364] syz-exec-32694 0...2 430346049us : 0: }D [ 860.597623] syz-exec-32694 0...2 430346051us : 0: }D [ 860.602883] syz-exec-32694 0...2 430346054us : 0: }D [ 860.608148] syz-exec-32694 0...2 430346056us : 0: }D [ 860.613418] syz-exec-32694 0...2 430346058us : 0: }D [ 860.618694] syz-exec-32694 0...2 430346060us : 0: }D [ 860.623956] syz-exec-32694 0...2 430346062us : 0: }D [ 860.629229] syz-exec-32694 0...2 430346064us : 0: }D [ 860.635197] syz-exec-32694 0...2 430346066us : 0: }D [ 860.640464] syz-exec-32694 0...2 430346068us : 0: }D [ 860.645726] syz-exec-32694 0...2 430346070us : 0: }D [ 860.650987] syz-exec-32694 0...2 430346072us : 0: }D [ 860.656248] syz-exec-32694 0...2 430346074us : 0: }D [ 860.661510] syz-exec-32694 0...2 430346075us : 0: }D [ 860.666782] syz-exec-32694 0...2 430346077us : 0: }D [ 860.672052] syz-exec-32694 0...2 430346079us : 0: }D [ 860.677314] syz-exec-32694 0...2 430346080us : 0: }D [ 860.682585] syz-exec-32694 0...2 430346082us : 0: }D [ 860.687844] syz-exec-32694 0...2 430346083us : 0: }D [ 860.693115] syz-exec-32694 0...2 430346084us : 0: }D [ 860.698376] syz-exec-32694 0...2 430346086us : 0: }D [ 860.703638] syz-exec-32694 0...2 430346087us : 0: }D [ 860.708898] syz-exec-32694 0...2 430346088us : 0: }D [ 860.714158] syz-exec-32694 0...2 430346090us : 0: }D [ 860.719427] syz-exec-32694 0...2 430346091us : 0: }D [ 860.724689] syz-exec-32694 0...2 430346092us : 0: }D [ 860.729949] syz-exec-32694 0...2 430346093us : 0: }D [ 860.735211] syz-exec-32694 0...2 430346095us : 0: }D [ 860.740470] syz-exec-32694 0...2 430346096us : 0: }D [ 860.745732] syz-exec-32694 0...2 430346097us : 0: }D [ 860.750998] syz-exec-32694 0...2 430346099us : 0: }D [ 860.756257] syz-exec-32694 0...2 430346100us : 0: }D [ 860.761517] syz-exec-32694 0...2 430346101us : 0: }D [ 860.766778] syz-exec-32694 0...2 430346103us : 0: }D [ 860.772040] syz-exec-32694 0...2 430346104us : 0: }D [ 860.777301] syz-exec-32694 0...2 430346105us : 0: }D [ 860.782573] syz-exec-32694 0...2 430346106us : 0: }D [ 860.787833] syz-exec-32694 0...2 430346108us : 0: }D [ 860.793093] syz-exec-32694 0...2 430346109us : 0: }D [ 860.798354] syz-exec-32694 0...2 430346110us : 0: }D [ 860.803615] syz-exec-32694 0...2 430346112us : 0: }D [ 860.808875] syz-exec-32694 0...2 430346113us : 0: }D [ 860.814136] syz-exec-32694 0...2 430346114us : 0: }D [ 860.819397] syz-exec-32694 0...2 430346115us : 0: }D [ 860.824657] syz-exec-32694 0...2 430346117us : 0: }D [ 860.830260] syz-exec-32694 0...2 430346118us : 0: }D [ 860.835525] syz-exec-32694 0...2 430346119us : 0: }D [ 860.840887] syz-exec-32694 0...2 430346121us : 0: }D [ 860.846930] syz-exec-32694 0...2 430346122us : 0: }D [ 860.852190] syz-exec-32694 0...2 430346123us : 0: }D [ 860.857467] syz-exec-32694 0...2 430346125us : 0: }D [ 860.862731] syz-exec-32694 0...2 430346126us : 0: }D [ 860.867995] syz-exec-32694 0...2 430346127us : 0: }D [ 860.873266] syz-exec-32694 0...2 430346129us : 0: }D [ 860.879569] syz-exec-32694 0...2 430346130us : 0: }D [ 860.884828] syz-exec-32694 0...2 430346131us : 0: }D [ 860.890089] syz-exec-32694 0...2 430346134us : 0: }D [ 860.895356] syz-exec-32694 0...2 430346135us : 0: }D [ 860.900615] syz-exec-32694 0...2 430346136us : 0: }D [ 860.905875] syz-exec-32694 0...2 430346138us : 0: }D [ 860.911135] syz-exec-32694 0...2 430346139us : 0: }D [ 860.916395] syz-exec-32694 0...2 430346141us : 0: }D [ 860.921654] syz-exec-32694 0...2 430346142us : 0: }D [ 860.926915] syz-exec-32694 0...2 430346143us : 0: }D [ 860.932175] syz-exec-32694 0...2 430346145us : 0: }D [ 860.937454] syz-exec-32694 0...2 430346146us : 0: }D [ 860.942715] syz-exec-32694 0...2 430346147us : 0: }D [ 860.947977] syz-exec-32694 0...2 430346148us : 0: }D [ 860.953235] syz-exec-32694 0...2 430346150us : 0: }D [ 860.958494] syz-exec-32694 0...2 430346151us : 0: }D [ 860.963752] syz-exec-32694 0...2 430346153us : 0: }D [ 860.969026] syz-exec-32694 0...2 430346154us : 0: }D [ 860.974284] syz-exec-32694 0...2 430346155us : 0: }D [ 860.979541] syz-exec-32694 0...2 430346156us : 0: }D [ 860.984799] syz-exec-32694 0...2 430346158us : 0: }D [ 860.990055] syz-exec-32694 0...2 430346159us : 0: }D [ 860.995313] syz-exec-32694 0...2 430346160us : 0: }D [ 861.000569] syz-exec-32694 0...2 430346162us : 0: }D [ 861.005828] syz-exec-32694 0...2 430346163us : 0: }D [ 861.011172] syz-exec-32694 0...2 430346164us : 0: }D [ 861.016452] syz-exec-32694 0...2 430346166us : 0: }D [ 861.021715] syz-exec-32694 0...2 430346167us : 0: }D [ 861.026975] syz-exec-32694 0...2 430346168us : 0: }D [ 861.032231] syz-exec-32694 0...2 430346170us : 0: }D [ 861.037490] syz-exec-32694 0...2 430346171us : 0: }D [ 861.042748] syz-exec-32694 0...2 430346172us : 0: }D [ 861.048032] syz-exec-32694 0...2 430346174us : 0: }D [ 861.053303] syz-exec-32694 0...2 430346175us : 0: }D [ 861.058563] syz-exec-32694 0...2 430346176us : 0: }D [ 861.063820] syz-exec-32694 0...2 430346177us : 0: }D [ 861.069079] syz-exec-32694 0...2 430346179us : 0: }D [ 861.074347] syz-exec-32694 0...2 430346180us : 0: }D [ 861.079608] syz-exec-32694 0...2 430346181us : 0: }D [ 861.084868] syz-exec-32694 0...2 430346183us : 0: }D [ 861.090134] syz-exec-32694 0...2 430346184us : 0: }D [ 861.095405] syz-exec-32694 0...2 430346185us : 0: }D [ 861.100663] syz-exec-32694 0...2 430346186us : 0: }D [ 861.105920] syz-exec-32694 0...2 430346188us : 0: }D [ 861.111179] syz-exec-32694 0...2 430346189us : 0: }D [ 861.116448] syz-exec-32694 0...2 430346190us : 0: }D [ 861.121708] syz-exec-32694 0...2 430346192us : 0: }D [ 861.126969] syz-exec-32694 0...2 430346193us : 0: }D [ 861.132227] syz-exec-32694 0...2 430346194us : 0: }D [ 861.137486] syz-exec-32694 0...2 430346195us : 0: }D [ 861.142746] syz-exec-32694 0...2 430346197us : 0: }D [ 861.148006] syz-exec-32694 0...2 430346198us : 0: }D [ 861.153266] syz-exec-32694 0...2 430346199us : 0: }D [ 861.158526] syz-exec-32694 0...2 430346201us : 0: }D [ 861.163785] syz-exec-32694 0...2 430346202us : 0: }D [ 861.169044] syz-exec-32694 0...2 430346203us : 0: }D [ 861.174302] syz-exec-32694 0...2 430346205us : 0: }D [ 861.179560] syz-exec-32694 0...2 430346206us : 0: }D [ 861.184826] syz-exec-32694 0...2 430346207us : 0: }D [ 861.190085] syz-exec-32694 0...2 430346209us : 0: }D [ 861.195342] syz-exec-32694 0...2 430346210us : 0: }D [ 861.200603] syz-exec-32694 0...2 430346211us : 0: }D [ 861.206132] syz-exec-32694 0...2 430346212us : 0: }D [ 861.211401] syz-exec-32694 0...2 430346214us : 0: }D [ 861.217117] syz-exec-32694 0...2 430346215us : 0: }D [ 861.222378] syz-exec-32694 0...2 430346216us : 0: }D [ 861.227636] syz-exec-32694 0...2 430346218us : 0: }D [ 861.232894] syz-exec-32694 0...2 430346219us : 0: }D [ 861.238162] syz-exec-32694 0...2 430346220us : 0: }D [ 861.243428] syz-exec-32694 0...2 430346221us : 0: }D [ 861.248687] syz-exec-32694 0...2 430346223us : 0: }D [ 861.253951] syz-exec-32694 0...2 430346224us : 0: }D [ 861.259211] syz-exec-32694 0...2 430346226us : 0: }D [ 861.264479] syz-exec-32694 0...2 430346227us : 0: }D [ 861.269736] syz-exec-32694 0...2 430346228us : 0: }D [ 861.274995] syz-exec-32694 0...2 430346229us : 0: }D [ 861.280254] syz-exec-32694 0...2 430346231us : 0: }D [ 861.285513] syz-exec-32694 0...2 430346232us : 0: }D [ 861.290771] syz-exec-32694 0...2 430346233us : 0: }D [ 861.296029] syz-exec-32694 0...2 430346235us : 0: }D [ 861.301293] syz-exec-32694 0...2 430346236us : 0: }D [ 861.306560] syz-exec-32694 0...2 430346237us : 0: }D [ 861.311819] syz-exec-32694 0...2 430346239us : 0: }D [ 861.317078] syz-exec-32694 0...2 430346240us : 0: }D [ 861.322343] syz-exec-32694 0...2 430346241us : 0: }D [ 861.327608] syz-exec-32694 0...2 430346242us : 0: }D [ 861.332868] syz-exec-32694 0...2 430346244us : 0: }D [ 861.338127] syz-exec-32694 0...2 430346245us : 0: }D [ 861.343386] syz-exec-32694 0...2 430346246us : 0: }D [ 861.348653] syz-exec-32694 0...2 430346248us : 0: }D [ 861.353911] syz-exec-32694 0...2 430346249us : 0: }D [ 861.359171] syz-exec-32694 0...2 430346250us : 0: }D [ 861.364442] syz-exec-32694 0...2 430346252us : 0: }D [ 861.369715] syz-exec-32694 0...2 430346253us : 0: }D [ 861.374974] syz-exec-32694 0...2 430346254us : 0: }D [ 861.380234] syz-exec-32694 0...2 430346256us : 0: }D [ 861.385492] syz-exec-32694 0...2 430346257us : 0: }D [ 861.390838] syz-exec-32694 0...2 430346258us : 0: }D [ 861.396097] syz-exec-32694 0...2 430346260us : 0: }D [ 861.401353] syz-exec-32694 0...2 430346261us : 0: }D [ 861.406620] syz-exec-32694 0...2 430346262us : 0: }D [ 861.411880] syz-exec-32694 0...2 430346264us : 0: }D [ 861.417145] syz-exec-32694 0...2 430346265us : 0: }D [ 861.422407] syz-exec-32694 0...2 430346266us : 0: }D [ 861.427672] syz-exec-32694 0...2 430346268us : 0: }D [ 861.432933] syz-exec-32694 0...2 430346269us : 0: }D [ 861.438197] syz-exec-32694 0...2 430346270us : 0: }D [ 861.443455] syz-exec-32694 0...2 430346272us : 0: }D [ 861.448714] syz-exec-32694 0...2 430346273us : 0: }D [ 861.453974] syz-exec-32694 0...2 430346274us : 0: }D [ 861.459234] syz-exec-32694 0...2 430346276us : 0: }D [ 861.464585] syz-exec-32694 0...2 430346277us : 0: }D [ 861.469847] syz-exec-32694 0...2 430346278us : 0: }D [ 861.475108] syz-exec-32694 0...2 430346279us : 0: }D [ 861.480385] syz-exec-32694 0...2 430346281us : 0: }D [ 861.485645] syz-exec-32694 0...2 430346282us : 0: }D [ 861.490914] syz-exec-32694 0...2 430346283us : 0: }D [ 861.496179] syz-exec-32694 0...2 430346285us : 0: }D [ 861.501440] syz-exec-32694 0...2 430346286us : 0: }D [ 861.506702] syz-exec-32694 0...2 430346287us : 0: }D [ 861.511973] syz-exec-32694 0...2 430346288us : 0: }D [ 861.517233] syz-exec-32694 0...2 430346290us : 0: }D [ 861.522495] syz-exec-32694 0...2 430346291us : 0: }D [ 861.527756] syz-exec-32694 0...2 430346292us : 0: }D [ 861.533015] syz-exec-32694 0...2 430346294us : 0: }D [ 861.538274] syz-exec-32694 0...2 430346295us : 0: }D [ 861.543534] syz-exec-32694 0...2 430346296us : 0: }D [ 861.548794] syz-exec-32694 0...2 430346298us : 0: }D [ 861.554063] syz-exec-32694 0...2 430346299us : 0: }D [ 861.559327] syz-exec-32694 0...2 430346300us : 0: }D [ 861.564591] syz-exec-32694 0...2 430346301us : 0: }D [ 861.569852] syz-exec-32694 0...2 430346303us : 0: }D [ 861.575127] syz-exec-32694 0...2 430346304us : 0: }D [ 861.580388] syz-exec-32694 0...2 430346305us : 0: }D [ 861.585648] syz-exec-32694 0...2 430346340us : 0: }D [ 861.591776] syz-exec-32694 0...2 430346344us : 0: }D [ 861.597050] syz-exec-32694 0...2 430346346us : 0: }D [ 861.602311] syz-exec-32694 0...2 430346348us : 0: }D [ 861.607579] syz-exec-32694 0...2 430346350us : 0: }D [ 861.612850] syz-exec-32694 0...2 430346354us : 0: }D [ 861.618120] syz-exec-32694 0...2 430346356us : 0: }D [ 861.623392] syz-exec-32694 0...2 430346358us : 0: }D [ 861.628666] syz-exec-32694 0...2 430346361us : 0: }D [ 861.633929] syz-exec-32694 0...2 430346363us : 0: }D [ 861.639189] syz-exec-32694 0...2 430346365us : 0: }D [ 861.644451] syz-exec-32694 0...2 430346368us : 0: }D [ 861.649734] syz-exec-32694 0...2 430346370us : 0: }D [ 861.655007] syz-exec-32694 0...2 430346373us : 0: }D [ 861.660271] syz-exec-32694 0...2 430346375us : 0: }D [ 861.665622] syz-exec-32694 0...2 430346377us : 0: }D [ 861.670886] syz-exec-32694 0...2 430346379us : 0: }D [ 861.676150] syz-exec-32694 0...2 430346380us : 0: }D [ 861.681431] syz-exec-32694 0...2 430346381us : 0: }D [ 861.686696] syz-exec-32694 0...2 430346383us : 0: }D [ 861.691967] syz-exec-32694 0...2 430346385us : 0: }D [ 861.697236] syz-exec-32694 0...2 430346386us : 0: }D [ 861.702498] syz-exec-32694 0...2 430346387us : 0: }D [ 861.707759] syz-exec-32694 0...2 430346389us : 0: }D [ 861.713018] syz-exec-32694 0...2 430346391us : 0: }D [ 861.718281] syz-exec-32694 0...2 430346392us : 0: }D [ 861.723544] syz-exec-32694 0...2 430346393us : 0: }D [ 861.728805] syz-exec-32694 0...2 430346396us : 0: }D [ 861.734076] syz-exec-32694 0...2 430346397us : 0: }D [ 861.739336] syz-exec-32694 0...2 430346398us : 0: }D [ 861.744599] syz-exec-32694 0...2 430346400us : 0: }D [ 861.749858] syz-exec-32694 0...2 430346402us : 0: }D [ 861.755117] syz-exec-32694 0...2 430346403us : 0: }D [ 861.760397] syz-exec-32694 0...2 430346404us : 0: }D [ 861.765759] syz-exec-32694 0...2 430346406us : 0: }D [ 861.771040] syz-exec-32694 0...2 430346408us : 0: }D [ 861.776300] syz-exec-32694 0...2 430346409us : 0: }D [ 861.781559] syz-exec-32694 0...2 430346410us : 0: }D [ 861.786839] syz-exec-32694 0...2 430346413us : 0: }D [ 861.792098] syz-exec-32694 0...2 430346414us : 0: }D [ 861.797366] syz-exec-32694 0...2 430346416us : 0: }D [ 861.802628] syz-exec-32694 0...2 430346417us : 0: }D [ 861.807904] syz-exec-32694 0...2 430346420us : 0: }D [ 861.813177] syz-exec-32694 0...2 430346421us : 0: }D [ 861.818458] syz-exec-32694 0...2 430346422us : 0: }D [ 861.823723] syz-exec-32694 0...2 430346424us : 0: }D [ 861.828982] syz-exec-32694 0...2 430346425us : 0: }D [ 861.834252] syz-exec-32694 0...2 430346427us : 0: }D [ 861.839522] syz-exec-32694 0...2 430346428us : 0: }D [ 861.844784] syz-exec-32694 0...2 430346431us : 0: }D [ 861.850062] syz-exec-32694 0...2 430346432us : 0: }D [ 861.855334] syz-exec-32694 0...2 430346433us : 0: }D [ 861.860611] syz-exec-32694 0...2 430346434us : 0: }D [ 861.865886] syz-exec-32694 0...2 430346437us : 0: }D [ 861.871154] syz-exec-32694 0...2 430346438us : 0: }D [ 861.876421] syz-exec-32694 0...2 430346439us : 0: }D [ 861.881700] syz-exec-32694 0...2 430346441us : 0: }D [ 861.886960] syz-exec-32694 0...2 430346442us : 0: }D [ 861.892222] syz-exec-32694 0...2 430346443us : 0: }D [ 861.897485] syz-exec-32694 0...2 430346445us : 0: }D [ 861.903182] syz-exec-32694 0...2 430346446us : 0: }D [ 861.908442] syz-exec-32694 0...2 430346447us : 0: }D [ 861.913704] syz-exec-32694 0...2 430346449us : 0: }D [ 861.918973] syz-exec-32694 0...2 430346450us : 0: }D [ 861.924246] syz-exec-32694 0...2 430346451us : 0: }D [ 861.929524] syz-exec-32694 0...2 430346453us : 0: }D [ 861.934782] syz-exec-32694 0...2 430346454us : 0: }D [ 861.940042] syz-exec-32694 0...2 430346455us : 0: }D [ 861.945304] syz-exec-32694 0...2 430346457us : 0: }D [ 861.950566] syz-exec-32694 0...2 430346458us : 0: }D [ 861.955828] syz-exec-32694 0...2 430346459us : 0: }D [ 861.961087] syz-exec-32694 0...2 430346460us : 0: }D [ 861.966361] syz-exec-32694 0...2 430346462us : 0: }D [ 861.971622] syz-exec-32694 0...2 430346463us : 0: }D [ 861.976883] syz-exec-32694 0...2 430346464us : 0: }D [ 861.982151] syz-exec-32694 0...2 430346466us : 0: }D [ 861.987506] syz-exec-32694 0...2 430346467us : 0: }D [ 861.992766] syz-exec-32694 0...2 430346468us : 0: }D [ 861.998028] syz-exec-32694 0...2 430346469us : 0: }D [ 862.004071] syz-exec-32694 0...2 430346471us : 0: }D [ 862.009349] syz-exec-32694 0...2 430346472us : 0: }D [ 862.014612] syz-exec-32694 0...2 430346473us : 0: }D [ 862.020494] syz-exec-32694 0...2 430346475us : 0: }D [ 862.025754] syz-exec-32694 0...2 430346476us : 0: }D [ 862.031024] syz-exec-32694 0...2 430346478us : 0: }D [ 862.036297] syz-exec-32694 0...2 430346480us : 0: }D [ 862.041558] syz-exec-32694 0...2 430346482us : 0: }D [ 862.046994] syz-exec-32694 0...2 430346484us : 0: }D [ 862.052256] syz-exec-32694 0...2 430346486us : 0: }D [ 862.057518] syz-exec-32694 0...2 430346489us : 0: }D [ 862.062781] syz-exec-32694 0...2 430346491us : 0: }D [ 862.068041] syz-exec-32694 0...2 430346493us : 0: }D [ 862.073301] syz-exec-32694 0...2 430346496us : 0: }D [ 862.078563] syz-exec-312 0...2 432288797us : 0: }D [ 862.083823] syz-exec-312 0...2 432288804us : 0: }D [ 862.089092] syz-exec-312 0...2 432288807us : 0: }D [ 862.094364] syz-exec-312 0...2 432288809us : 0: }D [ 862.103193] syz-exec-312 0...2 432288811us : 0: }D [ 862.108455] syz-exec-312 0...2 432288814us : 0: }D [ 862.113729] syz-exec-312 0...2 432288816us : 0: }D [ 862.119001] syz-exec-312 0...2 432288818us : 0: }D [ 862.124264] syz-exec-312 0...2 432288821us : 0: }D [ 862.129526] syz-exec-312 0...2 432288824us : 0: }D [ 862.134788] syz-exec-312 0...2 432288826us : 0: }D [ 862.140146] syz-exec-312 0...2 432288828us : 0: }D [ 862.145406] syz-exec-312 0...2 432288831us : 0: }D [ 862.152229] syz-exec-312 0...2 432288833us : 0: }D [ 862.157499] syz-exec-312 0...2 432288836us : 0: }D [ 862.162758] syz-exec-312 0...2 432288838us : 0: }D [ 862.168028] syz-exec-312 0...2 432288841us : 0: }D [ 862.173297] syz-exec-312 0...2 432288843us : 0: }D [ 862.178558] syz-exec-312 0...2 432288846us : 0: }D [ 862.183817] syz-exec-312 0...2 432288849us : 0: }D [ 862.189076] syz-exec-312 0...2 432288851us : 0: }D [ 862.194342] syz-exec-312 0...2 432288854us : 0: }D [ 862.199602] syz-exec-312 0...2 432288856us : 0: }D [ 862.204880] syz-exec-312 0...2 432288859us : 0: }D [ 862.210142] syz-exec-312 0...2 432288862us : 0: }D [ 862.215405] syz-exec-312 0...2 432288864us : 0: }D [ 862.220665] syz-exec-312 0...2 432288867us : 0: }D [ 862.225926] syz-exec-312 0...2 432288869us : 0: }D [ 862.231195] syz-exec-312 0...2 432288872us : 0: }D [ 862.236457] syz-exec-312 0...2 432288875us : 0: }D [ 862.241715] syz-exec-312 0...2 432288877us : 0: }D [ 862.246983] syz-exec-312 0...2 432288880us : 0: }D [ 862.252243] syz-exec-312 0...2 432288883us : 0: }D [ 862.257504] syz-exec-312 0...2 432288885us : 0: }D [ 862.262765] syz-exec-312 0...2 432288888us : 0: }D [ 862.268026] syz-exec-312 0...2 432288890us : 0: }D [ 862.273286] syz-exec-312 0...2 432288893us : 0: }D [ 862.278546] syz-exec-312 0...2 432288896us : 0: }D [ 862.283804] syz-exec-312 0...2 432288898us : 0: }D [ 862.289065] syz-exec-312 0...2 432288901us : 0: }D [ 862.294328] syz-exec-312 0...2 432288904us : 0: }D [ 862.300543] syz-exec-312 0...2 432288906us : 0: }D [ 862.305816] syz-exec-312 0.N.2 432288937us : 0: }D [ 862.311088] syz-exec-312 0...2 432288964us : 0: }D [ 862.316347] syz-exec-312 0...2 432288968us : 0: }D [ 862.321608] syz-exec-312 0...2 432288970us : 0: }D [ 862.326871] syz-exec-312 0...2 432288973us : 0: }D [ 862.332130] syz-exec-312 0...2 432288976us : 0: }D [ 862.337390] syz-exec-312 0...2 432288978us : 0: }D [ 862.342650] syz-exec-312 0...2 432288981us : 0: }D [ 862.347911] syz-exec-312 0...2 432288984us : 0: }D [ 862.353169] syz-exec-312 0...2 432288987us : 0: }D [ 862.358429] syz-exec-312 0...2 432288989us : 0: }D [ 862.363698] syz-exec-312 0...2 432288992us : 0: }D [ 862.368985] syz-exec-312 0...2 432288995us : 0: }D [ 862.374258] syz-exec-312 0...2 432288998us : 0: }D [ 862.379519] syz-exec-312 0...2 432289000us : 0: }D [ 862.384778] syz-exec-312 0...2 432289003us : 0: }D [ 862.390124] syz-exec-312 0...2 432289006us : 0: }D [ 862.395385] syz-exec-312 0...2 432289008us : 0: }D [ 862.400645] syz-exec-312 0...2 432289011us : 0: }D [ 862.405906] syz-exec-312 0...2 432289014us : 0: }D [ 862.411168] syz-exec-312 0...2 432289017us : 0: }D [ 862.416428] syz-exec-312 0...2 432289019us : 0: }D [ 862.421704] syz-exec-312 0...2 432289022us : 0: }D [ 862.426964] syz-exec-312 0...2 432289025us : 0: }D [ 862.432236] syz-exec-312 0...2 432289027us : 0: }D [ 862.437506] syz-exec-312 0...2 432289030us : 0: }D [ 862.442771] syz-exec-312 0...2 432289032us : 0: }D [ 862.448039] syz-exec-312 0...2 432289035us : 0: }D [ 862.453302] syz-exec-312 0...2 432289038us : 0: }D [ 862.458565] syz-exec-312 0...2 432289040us : 0: }D [ 862.463826] syz-exec-312 0...2 432289043us : 0: }D [ 862.469090] syz-exec-312 0...2 432289045us : 0: }D [ 862.474351] syz-exec-312 0...2 432289048us : 0: }D [ 862.479623] syz-exec-312 0...2 432289050us : 0: }D [ 862.484890] syz-exec-312 0...2 432289053us : 0: }D [ 862.490151] syz-exec-312 0...2 432289056us : 0: }D [ 862.495410] syz-exec-312 0...2 432289058us : 0: }D [ 862.500683] syz-exec-312 0...2 432289060us : 0: }D [ 862.505956] syz-exec-312 0...2 432289063us : 0: }D [ 862.511218] syz-exec-312 0...2 432289065us : 0: }D [ 862.516478] syz-exec-312 0...2 432289068us : 0: }D [ 862.521740] syz-exec-312 0...2 432289070us : 0: }D [ 862.527012] syz-exec-312 0...2 432289072us : 0: }D [ 862.532271] syz-exec-312 0...2 432289074us : 0: }D [ 862.537530] syz-exec-312 0...2 432289076us : 0: }D [ 862.542790] syz-exec-312 0...2 432289079us : 0: }D [ 862.548052] syz-exec-312 0...2 432289081us : 0: }D [ 862.553323] syz-exec-312 0...2 432289083us : 0: }D [ 862.558585] syz-exec-312 0...2 432289086us : 0: }D [ 862.563848] syz-exec-312 0...2 432289089us : 0: }D [ 862.569108] syz-exec-312 0...2 432289091us : 0: }D [ 862.574369] syz-exec-312 0...2 432289094us : 0: }D [ 862.579628] syz-exec-312 0...2 432289096us : 0: }D [ 862.584888] syz-exec-312 0...2 432289099us : 0: }D [ 862.590159] syz-exec-312 0...2 432289101us : 0: }D [ 862.595420] syz-exec-312 0...2 432289104us : 0: }D [ 862.600690] syz-exec-312 0...2 432289107us : 0: }D [ 862.605949] syz-exec-312 0...2 432289109us : 0: }D [ 862.611218] syz-exec-312 0...2 432289112us : 0: }D [ 862.616479] syz-exec-312 0...2 432289115us : 0: }D [ 862.621739] syz-exec-312 0...2 432289117us : 0: }D [ 862.627000] syz-exec-312 0...2 432289120us : 0: }D [ 862.632272] syz-exec-312 0...2 432289122us : 0: }D [ 862.637535] syz-exec-312 0...2 432289125us : 0: }D [ 862.643069] syz-exec-312 0...2 432289127us : 0: }D [ 862.648331] syz-exec-312 0...2 432289129us : 0: }D [ 862.653591] syz-exec-312 0...2 432289132us : 0: }D [ 862.659290] syz-exec-312 0...2 432289135us : 0: }D [ 862.664551] syz-exec-312 0...2 432289137us : 0: }D [ 862.669812] syz-exec-312 0...2 432289147us : 0: }D [ 862.675093] syz-exec-312 0...2 432289150us : 0: }D [ 862.680364] syz-exec-312 0...2 432289153us : 0: }D [ 862.685639] syz-exec-312 0...2 432289157us : 0: }D [ 862.690899] syz-exec-312 0...2 432289160us : 0: }D [ 862.696170] syz-exec-312 0...2 432289163us : 0: }D [ 862.701432] syz-exec-312 0...2 432289166us : 0: }D [ 862.706701] syz-exec-312 0...2 432289168us : 0: }D [ 862.711971] syz-exec-312 0...2 432289171us : 0: }D [ 862.717406] syz-exec-312 0...2 432289174us : 0: }D [ 862.722667] syz-exec-312 0...2 432289176us : 0: }D [ 862.727929] syz-exec-312 0...2 432289179us : 0: }D [ 862.733189] syz-exec-312 0...2 432289182us : 0: }D [ 862.738450] syz-exec-312 0...2 432289185us : 0: }D [ 862.743713] syz-exec-312 0...2 432289187us : 0: }D [ 862.748983] syz-exec-312 0...2 432289189us : 0: }D [ 862.754243] syz-exec-312 0...2 432289193us : 0: }D [ 862.759507] syz-exec-312 0...2 432289195us : 0: }D [ 862.764769] syz-exec-312 0...2 432289197us : 0: }D [ 862.770034] syz-exec-312 0...2 432289200us : 0: }D [ 862.775303] syz-exec-312 0...2 432289203us : 0: }D [ 862.780564] syz-exec-312 0...2 432289205us : 0: }D [ 862.785831] syz-exec-312 0...2 432289207us : 0: }D [ 862.791093] syz-exec-312 0...2 432289209us : 0: }D [ 862.796377] syz-exec-312 0...2 432289212us : 0: }D [ 862.801636] syz-exec-312 0...2 432289214us : 0: }D [ 862.806900] syz-exec-312 0...2 432289216us : 0: }D [ 862.812161] syz-exec-312 0...2 432289219us : 0: }D [ 862.817433] syz-exec-312 0...2 432289221us : 0: }D [ 862.822692] syz-exec-312 0...2 432289223us : 0: }D [ 862.827951] syz-exec-312 0...2 432289226us : 0: }D [ 862.833212] syz-exec-312 0...2 432289228us : 0: }D [ 862.838473] syz-exec-312 0...2 432289231us : 0: }D [ 862.843734] syz-exec-312 0...2 432289233us : 0: }D [ 862.849005] syz-exec-312 0...2 432289235us : 0: }D [ 862.854266] syz-exec-312 0...2 432289238us : 0: }D [ 862.859532] syz-exec-312 0...2 432289240us : 0: }D [ 862.864796] syz-exec-312 0...2 432289242us : 0: }D [ 862.870060] syz-exec-312 0...2 432289244us : 0: }D [ 862.875333] syz-exec-312 0...2 432289247us : 0: }D [ 862.880594] syz-exec-312 0...2 432289249us : 0: }D [ 862.885852] syz-exec-312 0...2 432289251us : 0: }D [ 862.891114] syz-exec-312 0...2 432289253us : 0: }D [ 862.896375] syz-exec-312 0...2 432289256us : 0: }D [ 862.901637] syz-exec-312 0...2 432289258us : 0: }D [ 862.906914] syz-exec-312 0...2 432289260us : 0: }D [ 862.912177] syz-exec-312 0...2 432289262us : 0: }D [ 862.917439] syz-exec-312 0...2 432289264us : 0: }D [ 862.922699] syz-exec-312 0...2 432289266us : 0: }D [ 862.927964] syz-exec-312 0...2 432289269us : 0: }D [ 862.933240] syz-exec-312 0...2 432289271us : 0: }D [ 862.938510] syz-exec-312 0...2 432289273us : 0: }D [ 862.943791] syz-exec-312 0...2 432289275us : 0: }D [ 862.949058] syz-exec-312 0...2 432289278us : 0: }D [ 862.954321] syz-exec-312 0...2 432289280us : 0: }D [ 862.959580] syz-exec-312 0...2 432289282us : 0: }D [ 862.964841] syz-exec-312 0...2 432289284us : 0: }D [ 862.970101] syz-exec-312 0...2 432289287us : 0: }D [ 862.975365] syz-exec-312 0...2 432289289us : 0: }D [ 862.980625] syz-exec-312 0...2 432289291us : 0: }D [ 862.985886] syz-exec-312 0...2 432289293us : 0: }D [ 862.991148] syz-exec-312 0...2 432289295us : 0: }D [ 862.996421] syz-exec-312 0...2 432289297us : 0: }D [ 863.001683] syz-exec-312 0...2 432289300us : 0: }D [ 863.006956] syz-exec-312 0...2 432289302us : 0: }D [ 863.012217] syz-exec-312 0.N.2 432289628us : 0: }D [ 863.017498] syz-exec-312 0...2 432289665us : 0: }D [ 863.022759] syz-exec-312 0...2 432289668us : 0: }D [ 863.028019] syz-exec-312 0...2 432289671us : 0: }D [ 863.033284] syz-exec-312 0...2 432289673us : 0: }D [ 863.038546] syz-exec-312 0...2 432289675us : 0: }D [ 863.043827] syz-exec-312 0...2 432289679us : 0: }D [ 863.049088] syz-exec-312 0...2 432289682us : 0: }D [ 863.054354] syz-exec-312 0...2 432289685us : 0: }D [ 863.059625] syz-exec-312 0...2 432289703us : 0: }D [ 863.064891] syz-exec-312 0...2 432289708us : 0: }D [ 863.070164] syz-exec-312 0...2 432289710us : 0: }D [ 863.075427] syz-exec-312 0...2 432289713us : 0: }D [ 863.080690] syz-exec-312 0...2 432289716us : 0: }D [ 863.085963] syz-exec-312 0...2 432289719us : 0: }D [ 863.091238] syz-exec-312 0...2 432289721us : 0: }D [ 863.096501] syz-exec-312 0...2 432289724us : 0: }D [ 863.101761] syz-exec-312 0...2 432289727us : 0: }D [ 863.107022] syz-exec-312 0...2 432289730us : 0: }D [ 863.112293] syz-exec-312 0...2 432289732us : 0: }D [ 863.117552] syz-exec-312 0...2 432289735us : 0: }D [ 863.122812] syz-exec-312 0...2 432289738us : 0: }D [ 863.128072] syz-exec-312 0...2 432289741us : 0: }D [ 863.133331] syz-exec-312 0...2 432289744us : 0: }D [ 863.138589] syz-exec-312 0...2 432289746us : 0: }D [ 863.143861] syz-exec-312 0...2 432289749us : 0: }D [ 863.149123] syz-exec-312 0...2 432289752us : 0: }D [ 863.154382] syz-exec-312 0...2 432289755us : 0: }D [ 863.159642] syz-exec-312 0...2 432289758us : 0: }D [ 863.164903] syz-exec-312 0...2 432289761us : 0: }D [ 863.170163] syz-exec-312 0...2 432289763us : 0: }D [ 863.175425] syz-exec-312 0...2 432289766us : 0: }D [ 863.180684] syz-exec-312 0...2 432289769us : 0: }D [ 863.185944] syz-exec-312 0...2 432289772us : 0: }D [ 863.191203] syz-exec-312 0...2 432289775us : 0: }D [ 863.196474] syz-exec-312 0...2 432289777us : 0: }D [ 863.201732] syz-exec-312 0...2 432289781us : 0: }D [ 863.207004] syz-exec-312 0...2 432289783us : 0: }D [ 863.212265] syz-exec-312 0...2 432289785us : 0: }D [ 863.218110] syz-exec-312 0...2 432289788us : 0: }D [ 863.223374] syz-exec-312 0...2 432289791us : 0: }D [ 863.228647] syz-exec-312 0...2 432289793us : 0: }D [ 863.233906] syz-exec-312 0...2 432289796us : 0: }D [ 863.239169] syz-exec-312 0...2 432289799us : 0: }D [ 863.244428] syz-exec-312 0...2 432289801us : 0: }D [ 863.249688] syz-exec-312 0...2 432289804us : 0: }D [ 863.254949] syz-exec-312 0...2 432289807us : 0: }D [ 863.260209] syz-exec-312 0...2 432289809us : 0: }D [ 863.265479] syz-exec-312 0...2 432289812us : 0: }D [ 863.270748] syz-exec-312 0...2 432289814us : 0: }D [ 863.276009] syz-exec-312 0...2 432289817us : 0: }D [ 863.281268] syz-exec-312 0...2 432289820us : 0: }D [ 863.286528] syz-exec-312 0...2 432289822us : 0: }D [ 863.291790] syz-exec-312 0...2 432289825us : 0: }D [ 863.297053] syz-exec-312 0...2 432289827us : 0: }D [ 863.302316] syz-exec-312 0...2 432289830us : 0: }D [ 863.307576] syz-exec-312 0...2 432289832us : 0: }D [ 863.312839] syz-exec-312 0...2 432289835us : 0: }D [ 863.318097] syz-exec-312 0...2 432289837us : 0: }D [ 863.323364] syz-exec-312 0...2 432289840us : 0: }D [ 863.328624] syz-exec-312 0...2 432289843us : 0: }D [ 863.333886] syz-exec-312 0...2 432289845us : 0: }D [ 863.339158] syz-exec-312 0...2 432289848us : 0: }D [ 863.344418] syz-exec-312 0...2 432289850us : 0: }D [ 863.349677] syz-exec-312 0...2 432289853us : 0: }D [ 863.354938] syz-exec-312 0...2 432289855us : 0: }D [ 863.360209] syz-exec-312 0...2 432289858us : 0: }D [ 863.365469] syz-exec-312 0...2 432289860us : 0: }D [ 863.370730] syz-exec-312 0...2 432289863us : 0: }D [ 863.376001] syz-exec-312 0...2 432289866us : 0: }D [ 863.381274] syz-exec-312 0...2 432289868us : 0: }D [ 863.386535] syz-exec-312 0...2 432289871us : 0: }D [ 863.391795] syz-exec-312 0...2 432289873us : 0: }D [ 863.397057] syz-exec-312 0...2 432289875us : 0: }D [ 863.402316] syz-exec-312 0...2 432289878us : 0: }D [ 863.407577] syz-exec-312 0...2 432289880us : 0: }D [ 863.412838] syz-exec-312 0...2 432289883us : 0: }D [ 863.418099] syz-exec-312 0...2 432289886us : 0: }D [ 863.423368] syz-exec-312 0...2 432289888us : 0: }D [ 863.428627] syz-exec-312 0...2 432289891us : 0: }D [ 863.433889] syz-exec-312 0...2 432289894us : 0: }D [ 863.439149] syz-exec-312 0...2 432289897us : 0: }D [ 863.444417] syz-exec-312 0...2 432289899us : 0: }D [ 863.449679] syz-exec-312 0...2 432289901us : 0: }D [ 863.454940] syz-exec-312 0...2 432289904us : 0: }D [ 863.460209] syz-exec-312 0...2 432289907us : 0: }D [ 863.465470] syz-exec-312 0...2 432289909us : 0: }D [ 863.470732] syz-exec-312 0...2 432289912us : 0: }D [ 863.475995] syz-exec-312 0...2 432289915us : 0: }D [ 863.481261] syz-exec-312 0...2 432289917us : 0: }D [ 863.486521] syz-exec-312 0...2 432289920us : 0: }D [ 863.491781] syz-exec-312 0...2 432289922us : 0: }D [ 863.497041] syz-exec-312 0...2 432289925us : 0: }D [ 863.502301] syz-exec-312 0...2 432289927us : 0: }D [ 863.507574] syz-exec-312 0...2 432289930us : 0: }D [ 863.512836] syz-exec-312 0...2 432289932us : 0: }D [ 863.518096] syz-exec-312 0...2 432289934us : 0: }D [ 863.523359] syz-exec-312 0...2 432289937us : 0: }D [ 863.528623] syz-exec-312 0...2 432289939us : 0: }D [ 863.533905] syz-exec-312 0...2 432289942us : 0: }D [ 863.539167] syz-exec-312 0...2 432289944us : 0: }D [ 863.544428] syz-exec-312 0...2 432289947us : 0: }D [ 863.549688] syz-exec-312 0...2 432289950us : 0: }D [ 863.554959] syz-exec-312 0...2 432289953us : 0: }D [ 863.560238] syz-exec-312 0...2 432289955us : 0: }D [ 863.565497] syz-exec-312 0...2 432289958us : 0: }D [ 863.570760] syz-exec-312 0...2 432289961us : 0: }D [ 863.576022] syz-exec-312 0...2 432289963us : 0: }D [ 863.581288] syz-exec-312 0...2 432289968us : 0: }D [ 863.586562] syz-exec-312 0...2 432289970us : 0: }D [ 863.591822] syz-exec-312 0...2 432289973us : 0: }D [ 863.597080] syz-exec-312 0...2 432289976us : 0: }D [ 863.602339] syz-exec-312 0...2 432289978us : 0: }D [ 863.607600] syz-exec-312 0...2 432289981us : 0: }D [ 863.612861] syz-exec-312 0...2 432289984us : 0: }D [ 863.618121] syz-exec-312 0...2 432289986us : 0: }D [ 863.623393] syz-exec-312 0...2 432289989us : 0: }D [ 863.628914] syz-exec-312 0...2 432289992us : 0: }D [ 863.634178] syz-exec-312 0...2 432289994us : 0: }D [ 863.639445] syz-exec-312 0...2 432289997us : 0: }D [ 863.644714] syz-exec-312 0...2 432289999us : 0: }D [ 863.649982] syz-exec-312 0...2 432290002us : 0: }D [ 863.655253] syz-exec-312 0...2 432290005us : 0: }D [ 863.660514] syz-exec-312 0...2 432290058us : 0: }D [ 863.665776] syz-exec-312 0...2 432290062us : 0: }D [ 863.671036] syz-exec-312 0...2 432290065us : 0: }D [ 863.676296] syz-exec-312 0...2 432290068us : 0: }D [ 863.681556] syz-exec-312 0...2 432290070us : 0: }D [ 863.686817] syz-exec-312 0...2 432290074us : 0: }D [ 863.692079] syz-exec-312 0...2 432290076us : 0: }D [ 863.697338] syz-exec-312 0...2 432290079us : 0: }D [ 863.702610] syz-exec-312 0...2 432290081us : 0: }D [ 863.707873] syz-exec-312 0...2 432290084us : 0: }D [ 863.713138] syz-exec-312 0...2 432290087us : 0: }D [ 863.718399] syz-exec-312 0...2 432290090us : 0: }D [ 863.723661] syz-exec-312 0...2 432290093us : 0: }D [ 863.728923] syz-exec-312 0...2 432290096us : 0: }D [ 863.734184] syz-exec-312 0...2 432290099us : 0: }D [ 863.739449] syz-exec-312 0...2 432290101us : 0: }D [ 863.744893] syz-exec-312 0...2 432290105us : 0: }D [ 863.750153] syz-exec-312 0...2 432290107us : 0: }D [ 863.755414] syz-exec-312 0...2 432290110us : 0: }D [ 863.760676] syz-exec-312 0...2 432290113us : 0: }D [ 863.765937] syz-exec-312 0...2 432290117us : 0: }D [ 863.771210] syz-exec-312 0...2 432290119us : 0: }D [ 863.776472] syz-exec-312 0...2 432290122us : 0: }D [ 863.781737] syz-exec-312 0...2 432290125us : 0: }D [ 863.786998] syz-exec-312 0...2 432290129us : 0: }D [ 863.792260] syz-exec-312 0...2 432290131us : 0: }D [ 863.797520] syz-exec-312 0...2 432290134us : 0: }D [ 863.802780] syz-exec-312 0...2 432290137us : 0: }D [ 863.808041] syz-exec-312 0...2 432290147us : 0: }D [ 863.813302] syz-exec-312 0...2 432290150us : 0: }D [ 863.818564] syz-exec-312 0...2 432290152us : 0: }D [ 863.823828] syz-exec-312 0...2 432290156us : 0: }D [ 863.829092] syz-exec-312 0...2 432290159us : 0: }D [ 863.834353] syz-exec-312 0...2 432290161us : 0: }D [ 863.839614] syz-exec-312 0...2 432290164us : 0: }D [ 863.845049] syz-exec-312 0...2 432290167us : 0: }D [ 863.850310] syz-exec-312 0...2 432290170us : 0: }D [ 863.855571] syz-exec-312 0...2 432290172us : 0: }D [ 863.860833] syz-exec-312 0...2 432290175us : 0: }D [ 863.866100] syz-exec-312 0...2 432290179us : 0: }D [ 863.871376] syz-exec-312 0...2 432290181us : 0: }D [ 863.876648] syz-exec-312 0...2 432290184us : 0: }D [ 863.881911] syz-exec-312 0...2 432290187us : 0: }D [ 863.887172] syz-exec-312 0...2 432290190us : 0: }D [ 863.892518] syz-exec-312 0...2 432290193us : 0: }D [ 863.897780] syz-exec-312 0...2 432290195us : 0: }D [ 863.903043] syz-exec-312 0...2 432290199us : 0: }D [ 863.908314] syz-exec-312 0...2 432290202us : 0: }D [ 863.913578] syz-exec-312 0...2 432290205us : 0: }D [ 863.918850] syz-exec-312 0...2 432290208us : 0: }D [ 863.924113] syz-exec-312 0...2 432290211us : 0: }D [ 863.929372] syz-exec-312 0...2 432290214us : 0: }D [ 863.934635] syz-exec-312 0...2 432290216us : 0: }D [ 863.939897] syz-exec-312 0...2 432290220us : 0: }D [ 863.945161] syz-exec-312 0...2 432290222us : 0: }D [ 863.950424] syz-exec-312 0...2 432290225us : 0: }D [ 863.955684] syz-exec-312 0...2 432290228us : 0: }D [ 863.960946] syz-exec-312 0...2 432290231us : 0: }D [ 863.966222] syz-exec-312 0...2 432290234us : 0: }D [ 863.971484] syz-exec-312 0...2 432290236us : 0: }D [ 863.976758] syz-exec-312 0...2 432290239us : 0: }D [ 863.982021] syz-exec-312 0...2 432290243us : 0: }D [ 863.987309] syz-exec-312 0...2 432290245us : 0: }D [ 863.992572] syz-exec-312 0...2 432290248us : 0: }D [ 863.997835] syz-exec-312 0...2 432290251us : 0: }D [ 864.003097] syz-exec-312 0...2 432290254us : 0: }D [ 864.008358] syz-exec-312 0...2 432290257us : 0: }D [ 864.013628] syz-exec-312 0...2 432290259us : 0: }D [ 864.018888] syz-exec-312 0...2 432290263us : 0: }D [ 864.024157] syz-exec-312 0...2 432290266us : 0: }D [ 864.029423] syz-exec-312 0...2 432290269us : 0: }D [ 864.034686] syz-exec-312 0...2 432290271us : 0: }D [ 864.039954] syz-exec-312 0...2 432290275us : 0: }D [ 864.045836] syz-exec-312 0...2 432290278us : 0: }D [ 864.051097] syz-exec-312 0...2 432290281us : 0: }D [ 864.056451] syz-exec-312 0...2 432290283us : 0: }D [ 864.061720] syz-exec-312 0...2 432290287us : 0: }D [ 864.066980] syz-exec-312 0...2 432290289us : 0: }D [ 864.072242] syz-exec-312 0...2 432290292us : 0: }D [ 864.077503] syz-exec-312 0...2 432290295us : 0: }D [ 864.082772] syz-exec-312 0...2 432290298us : 0: }D [ 864.088043] syz-exec-312 0...2 432290300us : 0: }D [ 864.093307] syz-exec-312 0...2 432290303us : 0: }D [ 864.098567] syz-exec-312 0...2 432290307us : 0: }D [ 864.103837] syz-exec-312 0...2 432290340us : 0: }D [ 864.109100] syz-exec-312 0...2 432290342us : 0: }D [ 864.114361] syz-exec-312 0...2 432290346us : 0: }D [ 864.119621] syz-exec-312 0...2 432290349us : 0: }D [ 864.124889] syz-exec-312 0...2 432290351us : 0: }D [ 864.130149] syz-exec-312 0...2 432290354us : 0: }D [ 864.135409] syz-exec-312 0...2 432290358us : 0: }D [ 864.140678] syz-exec-312 0...2 432290361us : 0: }D [ 864.145962] syz-exec-312 0...2 432290363us : 0: }D [ 864.151233] syz-exec-312 0...2 432290366us : 0: }D [ 864.156495] syz-exec-312 0...2 432290370us : 0: }D [ 864.161756] syz-exec-312 0...2 432290372us : 0: }D [ 864.167027] syz-exec-312 0...2 432290375us : 0: }D [ 864.172296] syz-exec-312 0...2 432290378us : 0: }D [ 864.177574] syz-exec-312 0...2 432290381us : 0: }D [ 864.182836] syz-exec-312 0...2 432290384us : 0: }D [ 864.188105] syz-exec-312 0...2 432290386us : 0: }D [ 864.193368] syz-exec-312 0...2 432290389us : 0: }D [ 864.198637] syz-exec-312 0...2 432290393us : 0: }D [ 864.203900] syz-exec-312 0...2 432290395us : 0: }D [ 864.209162] syz-exec-312 0...2 432290398us : 0: }D [ 864.214438] syz-exec-312 0...2 432290402us : 0: }D [ 864.219702] syz-exec-312 0...2 432290404us : 0: }D [ 864.224965] syz-exec-312 0...2 432290407us : 0: }D [ 864.230229] syz-exec-312 0...2 432290410us : 0: }D [ 864.235492] syz-exec-312 0...2 432290413us : 0: }D [ 864.240756] syz-exec-312 0...2 432290416us : 0: }D [ 864.246028] syz-exec-312 0...2 432290419us : 0: }D [ 864.251290] syz-exec-312 0...2 432290422us : 0: }D [ 864.256551] syz-exec-312 0...2 432290425us : 0: }D [ 864.261825] syz-exec-312 0...2 432290428us : 0: }D [ 864.267086] syz-exec-312 0...2 432290430us : 0: }D [ 864.272348] syz-exec-312 0...2 432290434us : 0: }D [ 864.277607] syz-exec-312 0...2 432290437us : 0: }D [ 864.282880] syz-exec-312 0...2 432290439us : 0: }D [ 864.288766] syz-exec-312 0...2 432290442us : 0: }D [ 864.294029] syz-exec-312 0...2 432290445us : 0: }D [ 864.299296] syz-exec-312 0...2 432290448us : 0: }D [ 864.304830] syz-exec-312 0...2 432290450us : 0: }D [ 864.310097] syz-exec-312 0...2 432290453us : 0: }D [ 864.315357] syz-exec-312 0...2 432290457us : 0: }D [ 864.320638] syz-exec-312 0...2 432290460us : 0: }D [ 864.325907] syz-exec-312 0...2 432290462us : 0: }D [ 864.331171] syz-exec-312 0...2 432290465us : 0: }D [ 864.336431] syz-exec-312 0...2 432290469us : 0: }D [ 864.341697] syz-exec-312 0...2 432290471us : 0: }D [ 864.346960] syz-exec-312 0...2 432290474us : 0: }D [ 864.352234] syz-exec-312 0...2 432290477us : 0: }D [ 864.357493] syz-exec-312 0...2 432290480us : 0: }D [ 864.362765] syz-exec-312 0...2 432290483us : 0: }D [ 864.368032] syz-exec-312 0...2 432290486us : 0: }D [ 864.373300] syz-exec-312 0...2 432290489us : 0: }D [ 864.378561] syz-exec-312 0...2 432290492us : 0: }D [ 864.383821] syz-exec-312 0...2 432290494us : 0: }D [ 864.389081] syz-exec-312 0...2 432290497us : 0: }D [ 864.394362] syz-exec-312 0...2 432290501us : 0: }D [ 864.399623] syz-exec-312 0...2 432290503us : 0: }D [ 864.404884] syz-exec-312 0...2 432290506us : 0: }D [ 864.410159] syz-exec-312 0...2 432290509us : 0: }D [ 864.415421] syz-exec-312 0...2 432290512us : 0: }D [ 864.420688] syz-exec-312 0...2 432290515us : 0: }D [ 864.425949] syz-exec-312 0...2 432290517us : 0: }D [ 864.431211] syz-exec-312 0...2 432290521us : 0: }D [ 864.436479] syz-exec-312 0...2 432290524us : 0: }D [ 864.441829] syz-exec-312 0...2 432290526us : 0: }D [ 864.447102] syz-exec-312 0...2 432290529us : 0: }D [ 864.452367] syz-exec-312 0...2 432290532us : 0: }D [ 864.457638] syz-exec-312 0...2 432290535us : 0: }D [ 864.462907] syz-exec-312 0...2 432290538us : 0: }D [ 864.468180] syz-exec-312 0...2 432290541us : 0: }D [ 864.473442] syz-exec-312 0.N.2 432290571us : 0: }D [ 864.478716] syz-exec-312 0...2 432292779us : 0: }D [ 864.483985] syz-exec-312 0...2 432292784us : 0: }D [ 864.489245] syz-exec-312 0...2 432292788us : 0: }D [ 864.494511] syz-exec-312 0...2 432292790us : 0: }D [ 864.499785] syz-exec-312 0...2 432292793us : 0: }D [ 864.505053] syz-exec-312 0...2 432292796us : 0: }D [ 864.510326] syz-exec-312 0...2 432292799us : 0: }D [ 864.515589] syz-exec-312 0...2 432292801us : 0: }D [ 864.520852] syz-exec-312 0...2 432292803us : 0: }D [ 864.526113] syz-exec-312 0...2 432292806us : 0: }D [ 864.531379] syz-exec-312 0...2 432292809us : 0: }D [ 864.536641] syz-exec-312 0...2 432292811us : 0: }D [ 864.541909] syz-exec-312 0...2 432292814us : 0: }D [ 864.547172] syz-exec-312 0...2 432293550us : 0: }D [ 864.552434] syz-exec-312 0...2 432293554us : 0: }D [ 864.557706] syz-exec-312 0...2 432293556us : 0: }D [ 864.562965] syz-exec-312 0...2 432293560us : 0: }D [ 864.568224] syz-exec-312 0...2 432293562us : 0: }D [ 864.573484] syz-exec-312 0...2 432293565us : 0: }D [ 864.578760] syz-exec-312 0...2 432293567us : 0: }D [ 864.584027] syz-exec-312 0...2 432293571us : 0: }D [ 864.589385] syz-exec-312 0...2 432293573us : 0: }D [ 864.594668] syz-exec-312 0...2 432293575us : 0: }D [ 864.599939] syz-exec-312 0...2 432293578us : 0: }D [ 864.605205] syz-exec-312 0...2 432293581us : 0: }D [ 864.610474] syz-exec-312 0...2 432293583us : 0: }D [ 864.615735] syz-exec-312 0...2 432293585us : 0: }D [ 864.620995] syz-exec-312 0...2 432293589us : 0: }D [ 864.626688] syz-exec-312 0...2 432293591us : 0: }D [ 864.631949] syz-exec-312 0...2 432293593us : 0: }D [ 864.637209] syz-exec-312 0...2 432293596us : 0: }D [ 864.642483] syz-exec-312 0...2 432293599us : 0: }D [ 864.647752] syz-exec-312 0...2 432293601us : 0: }D [ 864.653021] syz-exec-312 0...2 432293604us : 0: }D [ 864.658283] syz-exec-312 0.N.2 432293704us : 0: }D [ 864.663543] syz-exec-312 0...2 432295969us : 0: }D [ 864.668814] syz-exec-312 0...2 432295973us : 0: }D [ 864.674075] syz-exec-312 0...2 432295976us : 0: }D [ 864.679350] syz-exec-312 0...2 432295979us : 0: }D [ 864.684611] syz-exec-312 0...2 432295981us : 0: }D [ 864.689872] syz-exec-312 0...2 432295983us : 0: }D [ 864.695137] syz-exec-312 0...2 432295986us : 0: }D [ 864.700400] syz-exec-312 0...2 432295989us : 0: }D [ 864.705674] syz-exec-312 0...2 432295991us : 0: }D [ 864.710948] syz-exec-312 0...2 432295994us : 0: }D [ 864.716210] syz-exec-312 0...2 432295997us : 0: }D [ 864.721470] syz-exec-312 0...2 432295999us : 0: }D [ 864.726734] syz-exec-312 0...2 432296002us : 0: }D [ 864.731998] syz-exec-312 0...2 432296004us : 0: }D [ 864.737259] syz-exec-312 0...2 432296007us : 0: }D [ 864.742519] syz-exec-312 0...2 432296009us : 0: }D [ 864.747788] syz-exec-312 0...2 432296012us : 0: }D [ 864.753049] syz-exec-312 0...2 432296014us : 0: }D [ 864.758310] syz-exec-312 0...2 432296017us : 0: }D [ 864.763571] syz-exec-312 0...2 432296019us : 0: }D [ 864.768833] syz-exec-312 0...2 432296022us : 0: }D [ 864.774103] syz-exec-312 0...2 432296025us : 0: }D [ 864.779365] syz-exec-312 0...2 432296028us : 0: }D [ 864.784637] syz-exec-312 0...2 432296030us : 0: }D [ 864.789911] syz-exec-312 0...2 432296032us : 0: }D [ 864.795171] syz-exec-312 0...2 432296035us : 0: }D [ 864.800450] syz-exec-312 0...2 432296038us : 0: }D [ 864.805709] syz-exec-312 0...2 432296040us : 0: }D [ 864.810971] syz-exec-312 0...2 432296042us : 0: }D [ 864.816241] syz-exec-312 0...2 432296045us : 0: }D [ 864.821503] syz-exec-312 0...2 432296047us : 0: }D [ 864.826763] syz-exec-312 0...2 432296050us : 0: }D [ 864.832024] syz-exec-312 0...2 432296052us : 0: }D [ 864.837285] syz-exec-312 0...2 432296055us : 0: }D [ 864.842546] syz-exec-312 0...2 432296057us : 0: }D [ 864.847816] syz-exec-312 0...2 432296060us : 0: }D [ 864.853078] syz-exec-312 0...2 432296063us : 0: }D [ 864.858339] syz-exec-312 0...2 432296065us : 0: }D [ 864.863603] syz-exec-312 0...2 432296068us : 0: }D [ 864.868874] syz-exec-312 0...2 432296070us : 0: }D [ 864.874136] syz-exec-312 0.N.2 432296074us : 0: }D [ 864.879399] syz-exec-312 0...2 432296148us : 0: }D [ 864.884660] syz-exec-312 0...2 432296150us : 0: }D [ 864.889922] syz-exec-312 0...2 432296154us : 0: }D [ 864.895180] syz-exec-312 0...2 432296156us : 0: }D [ 864.900444] syz-exec-312 0...2 432296849us : 0: }D [ 864.905706] syz-exec-312 0...2 432296853us : 0: }D [ 864.910969] syz-exec-312 0...2 432296856us : 0: }D [ 864.916231] syz-exec-312 0...2 432296858us : 0: }D [ 864.921490] syz-exec-312 0...2 432296861us : 0: }D [ 864.926750] syz-exec-312 0...2 432296864us : 0: }D [ 864.932011] syz-exec-312 0...2 432296866us : 0: }D [ 864.937271] syz-exec-312 0...2 432296868us : 0: }D [ 864.942532] syz-exec-312 0...2 432296871us : 0: }D [ 864.947794] syz-exec-312 0...2 432296874us : 0: }D [ 864.953055] syz-exec-312 0...2 432296876us : 0: }D [ 864.958317] syz-exec-312 0...2 432296879us : 0: }D [ 864.963590] syz-exec-312 0...2 432296881us : 0: }D [ 864.968852] syz-exec-312 0...2 432296884us : 0: }D [ 864.974117] syz-exec-312 0...2 432296887us : 0: }D [ 864.979378] syz-exec-312 0...2 432296889us : 0: }D [ 864.984639] syz-exec-312 0...2 432296892us : 0: }D [ 864.989900] syz-exec-312 0...2 432296895us : 0: }D [ 864.995157] syz-exec-312 0...2 432296897us : 0: }D [ 865.000428] syz-exec-312 0...2 432296900us : 0: }D [ 865.005688] syz-exec-312 0...2 432296903us : 0: }D [ 865.010969] syz-exec-312 0...2 432296905us : 0: }D [ 865.016229] syz-exec-312 0...2 432296907us : 0: }D [ 865.021488] syz-exec-312 0...2 432296910us : 0: }D [ 865.026757] syz-exec-312 0...2 432296913us : 0: }D [ 865.032018] syz-exec-312 0...2 432296916us : 0: }D [ 865.037276] syz-exec-312 0...2 432296918us : 0: }D [ 865.042535] syz-exec-312 0...2 432296921us : 0: }D [ 865.047816] syz-exec-312 0...2 432296924us : 0: }D [ 865.053079] syz-exec-312 0...2 432296926us : 0: }D [ 865.058327] --------------------------------- [ 865.068060] Kernel Offset: disabled [ 865.072276] Rebooting in 86400 seconds..